
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: pbp5dL7Wdqfzs1sXtcc00kkoecq2AkozFwvV8Cd4k1k=
Subject key identifier: F2:0D:DD:E7:53:9F:E5:66:C4:40:CA:51:ED:DA:45:59:7F:53:08:B3
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 5F
Signing time: Sat 17 Oct 2026 08:55:46 +0000
Manifest this update: Sat 17 Oct 2026 08:55:45 +0000
Manifest next update: Sat 24 Oct 2026 08:55:45 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: b1FKALq1sltWQDc/r8S0ta2fYA3j9wcGp3Si/Z5cDYE=)
2: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: +9AXgCQZHA/qQnY6/zfwgsV6IjHJCtO7mBqzVtouNxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Oct 17 08:55:45 2026 GMT
Not After : Oct 24 08:55:45 2026 GMT
Subject: CN=6ad33812-e5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:2f:13:ce:09:7c:27:07:bc:f3:00:68:05:
d7:c9:99:b0:2f:da:50:09:12:20:ff:83:c0:1c:d8:
c5:1d:6a:24:f6:61:24:bf:76:6f:fb:76:3e:58:fa:
68:95:d2:52:28:5e:da:8e:38:58:57:72:2c:59:6c:
6c:df:7c:5b:0b:31:4f:0d:22:50:7d:5f:fe:14:41:
f2:81:84:08:f1:5a:f0:46:96:09:d7:96:98:e5:70:
ba:30:d6:86:3c:7e:0f:9d:d8:d4:94:5a:27:fa:18:
48:8c:95:d9:64:0b:d4:3c:cd:f2:ad:8d:de:0f:e5:
7e:73:e8:d2:24:2c:71:49:28:a2:0f:1a:7f:65:0b:
92:ff:d8:bc:00:09:f3:f7:41:65:ed:0c:3a:88:30:
ae:ac:d5:f3:6b:61:ff:e0:a0:0b:3f:b9:03:de:37:
a9:a0:a6:e0:92:d5:64:eb:82:2f:d4:6a:c9:f3:ea:
55:06:55:fa:53:b7:29:14:54:42:5f:b7:e7:1b:ac:
8f:02:d0:de:cd:a7:29:ad:55:67:95:f6:2f:15:7c:
cd:6e:c0:71:22:48:4f:31:41:74:fe:32:9a:b0:7b:
c1:c9:76:dd:7f:9c:cd:ec:87:fb:13:7b:bc:b1:a1:
1a:d9:90:c9:53:90:47:78:34:79:52:cf:eb:e5:f5:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:DD:E7:53:9F:E5:66:C4:40:CA:51:ED:DA:45:59:7F:53:08:B3
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5d:44:c1:49:f9:10:11:a1:51:41:cb:a7:ea:42:b3:b5:59:
f7:a2:c8:6e:7f:3e:98:2c:6c:a0:a1:cb:2b:6c:a9:25:1f:39:
9e:fb:39:48:ef:cf:ac:df:32:21:c6:24:bc:6e:37:8f:37:e7:
39:e3:9e:3c:7e:ff:0a:70:51:cb:7d:d9:88:35:b9:62:e7:d6:
4a:4a:f8:e4:e5:75:25:d0:3e:a1:73:3c:3b:ae:e0:14:31:64:
c3:d5:fa:c3:bd:f9:ed:60:ef:b9:80:c6:4f:52:33:66:54:e2:
3c:c1:0e:63:2b:a7:9d:2a:fc:bf:91:70:73:da:89:13:29:74:
14:c5:85:e6:d3:3a:4c:5e:f0:62:48:a8:63:aa:f3:64:a8:8f:
08:ea:d3:88:35:65:a0:c1:d1:74:11:e2:87:10:08:be:58:b5:
d3:46:41:62:f4:cd:84:9a:ea:be:a5:73:2b:4b:40:46:3d:eb:
ac:8b:75:53:f2:61:14:f4:92:d1:15:96:0b:9f:fb:59:d1:8c:
3b:5c:45:67:64:8c:7a:b9:b7:19:00:17:a7:21:93:2a:50:84:
0f:4d:a5:5e:e6:d2:e1:87:1e:d3:43:bf:8e:f6:e1:5f:3d:3f:
66:4d:f8:a9:1d:30:e7:bc:15:0f:0d:c1:25:3f:fe:72:e0:1e:
93:7b:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:21:09 2026 by rpki-client