
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft
File: v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft (raw, json)
Hash identifier: IBUI3xddid9tocYq2eZDv1cPEODnC//l45Yh+IKgO1Q=
Subject key identifier: EF:D9:B0:08:AC:93:FF:1D:7A:30:F5:3D:BB:3C:10:E6:DC:83:1F:E2
Authority key identifier: BF:53:5A:8B:D6:62:04:B8:8A:80:4E:13:FF:D3:F6:38:7E:43:4D:68
Certificate issuer: /CN=A9128478/serialNumber=BF535A8BD66204B88A804E13FFD3F6387E434D68
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft
Manifest number: 0C
Signing time: Wed 07 Oct 2026 09:49:36 +0000
Manifest this update: Wed 07 Oct 2026 09:49:35 +0000
Manifest next update: Wed 14 Oct 2026 09:49:35 +0000
Files and hashes: 1: v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl (hash: ORNz4JC+4y3xT516ombwd/lHdwH/M6Addee/zC4lSM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl
rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128478, serialNumber=BF535A8BD66204B88A804E13FFD3F6387E434D68
Validity
Not Before: Oct 7 09:49:35 2026 GMT
Not After : Oct 14 09:49:35 2026 GMT
Subject: CN=6ac615af-f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:ad:b5:e6:0d:a9:bf:02:8a:ee:bd:e3:29:
f6:9c:57:ef:aa:63:44:f8:e9:13:d9:80:5a:62:14:
0b:b7:00:c0:4a:d1:f2:0e:18:5a:6c:e9:a6:15:1a:
12:f4:c5:6b:fc:0a:78:b9:be:e7:0a:bd:40:2f:de:
2d:3f:58:e4:2c:12:8d:5d:60:69:90:87:24:f5:1f:
da:77:04:85:c4:11:f8:73:13:39:e0:86:24:71:3a:
80:ad:63:a1:7d:14:3d:33:38:fa:fd:ed:be:87:34:
43:01:70:de:c8:77:2f:28:9c:b4:be:25:9e:db:0e:
db:89:6d:6e:b5:cc:bb:a8:dc:47:8d:b8:8c:c3:74:
30:66:4d:ab:f5:be:36:e5:82:86:50:b6:13:86:e0:
7e:e7:1f:13:73:cf:8b:10:04:79:78:69:20:d5:2d:
6a:16:bf:3a:dd:38:b4:ec:06:98:cb:e2:4e:bf:c8:
37:ac:60:28:ce:22:90:18:4b:d8:7d:89:b5:a1:50:
6f:05:f9:7f:4d:62:c9:14:60:8f:fb:8d:56:10:fe:
b5:c5:fa:b9:b1:b8:ba:4c:09:64:74:80:28:85:f1:
87:18:6c:38:f6:2b:9f:b2:c1:39:5a:fe:5c:a9:06:
8f:49:1a:f4:93:25:76:8e:40:79:81:0e:ec:90:b7:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:B0:08:AC:93:FF:1D:7A:30:F5:3D:BB:3C:10:E6:DC:83:1F:E2
X509v3 Authority Key Identifier:
keyid:BF:53:5A:8B:D6:62:04:B8:8A:80:4E:13:FF:D3:F6:38:7E:43:4D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128478/51936A28B29C11F19339EA314011F970/v1Nai9ZiBLiKgE4T_9P2OH5DTWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:98:63:b7:7e:fd:77:f4:d0:2b:27:29:03:17:3e:84:3c:
d6:e3:ae:06:9a:84:81:29:ac:44:0b:2c:14:da:38:c9:92:48:
2d:75:81:7b:f5:e6:e4:78:f2:f1:83:cb:97:7d:2e:cd:d6:35:
2e:85:4f:4d:85:ef:9b:d3:4f:7f:ff:03:3f:77:c4:d9:0d:50:
53:50:76:ec:9b:7f:68:37:14:6f:35:61:13:f1:60:dd:96:f9:
22:b1:7d:71:83:ac:a2:3a:60:1a:0d:81:8f:42:0c:8e:b6:78:
f7:47:31:1a:0e:9b:c8:1a:1b:21:32:44:0e:fc:ec:67:24:ff:
cd:b0:4c:89:9b:0d:b8:ea:c4:5b:48:38:21:a8:ca:e6:12:aa:
bd:b3:ae:fd:59:8e:19:2d:fc:de:d4:1f:b4:20:d8:ac:f8:74:
cf:9f:59:4d:91:ab:a9:c0:81:e6:1f:57:d4:70:01:6a:b8:fb:
ac:92:b9:b7:c1:de:5e:c5:0f:62:1a:9f:3a:c9:5b:f9:dc:6b:
af:00:22:e5:7e:4a:9f:84:a1:5b:c0:6a:ff:23:82:8a:41:8f:
db:18:33:fb:c4:c5:36:71:c5:e9:83:78:85:06:c0:00:88:98:
31:49:eb:74:45:14:af:4d:ca:10:90:de:75:45:41:33:ea:79:
83:cc:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:02 2026 by rpki-client