
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json)
Hash identifier: vqAdFtTQ34pQYrdAqyi9gX3m32iOb5EfF3vDzGS8UHs=
Subject key identifier: B9:B1:85:83:AA:DC:2B:22:5D:5A:48:19:EF:C7:54:00:7C:96:EF:CB
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 11C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
Manifest number: 119C
Signing time: Sat 04 Apr 2026 17:05:44 +0000
Manifest this update: Sat 04 Apr 2026 17:05:44 +0000
Manifest next update: Sat 11 Apr 2026 17:05:44 +0000
Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: UuiBCAFSU0HL+P3/HnLgWEmYv2OZty6zqUydDgeir/I=)
2: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=)
3: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=)
4: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=)
5: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4545 (0x11c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Apr 4 17:05:44 2026 GMT
Not After : Apr 11 17:05:44 2026 GMT
Subject: CN=69d144e8-b641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:12:f6:24:02:53:08:3d:83:b3:86:15:a3:
50:86:f4:db:12:b2:b3:4b:95:a4:df:31:c8:28:40:
d9:0c:65:73:d1:24:15:52:c5:3d:ad:48:54:f3:f2:
c2:db:65:f9:8b:ca:01:2a:ab:f8:93:99:a0:78:e3:
cb:e5:29:34:27:55:7d:91:fc:3e:67:a5:d2:14:3b:
38:b8:a2:7c:ac:84:a6:66:66:83:fb:4d:a7:21:6e:
08:a0:96:8d:2e:11:2e:ea:eb:4c:4b:bd:8d:65:65:
e5:59:82:9d:89:b1:82:fa:8e:9d:b4:f5:2b:e1:ac:
3a:5a:38:76:e8:b7:4e:5a:4f:49:26:43:53:d2:c9:
7b:a2:65:5c:44:9d:a1:ac:bb:bc:ad:34:fb:0c:90:
0d:e4:3a:e3:2f:a8:a0:73:32:4a:51:b0:3a:a5:45:
3b:62:97:cb:24:72:5a:5a:b7:bd:fa:02:63:f7:16:
0b:7d:f0:e9:07:3a:54:81:84:a7:0d:e1:be:b2:5a:
79:21:62:fb:40:67:20:51:ab:49:87:d3:77:00:3f:
ae:4b:0f:2f:f0:84:de:04:91:7e:12:41:94:3a:3a:
fe:4e:07:49:ee:eb:92:01:97:24:a9:7e:c6:d4:b3:
eb:a1:2c:3e:3c:ab:43:d1:ed:de:13:22:d1:cb:d1:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:85:83:AA:DC:2B:22:5D:5A:48:19:EF:C7:54:00:7C:96:EF:CB
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:91:ae:3b:77:00:95:35:42:ec:61:f0:8c:bf:f8:36:36:b7:
2d:62:f2:82:7e:bc:1a:b8:5a:e8:ff:b4:21:9d:96:fe:da:38:
4a:b8:ee:67:9d:2c:43:f5:83:69:02:63:01:67:35:d0:16:1f:
c1:84:9b:b9:df:32:dd:d6:51:4c:c1:99:34:c3:2a:07:2e:b9:
bb:f5:db:00:78:83:87:a8:a7:8d:f3:9c:3f:df:a9:fb:09:ab:
16:86:88:26:2a:82:5f:86:c1:6b:58:f5:31:c8:34:ec:fb:16:
7b:5e:3f:97:24:b7:35:ce:45:f5:1e:49:c6:20:7f:ad:39:c0:
b7:53:ce:5d:40:cd:3a:f1:a1:21:c6:59:e0:bb:47:51:b6:cd:
d5:d3:69:d4:70:3b:76:58:31:de:ff:80:b4:05:32:e6:64:5f:
71:ab:dd:4e:71:68:0c:a6:66:dd:7f:28:0d:50:ab:df:b7:d9:
9e:3e:ce:73:96:9f:83:cc:12:14:c6:8a:c5:44:03:b3:1b:c5:
12:3a:cf:7b:c8:4e:2d:93:87:81:4c:3c:67:19:9f:e3:3f:08:
a2:af:5c:7a:e2:84:42:7a:3a:4c:8a:7f:2a:ad:8f:60:b5:9f:
d0:d4:62:85:0f:80:fe:48:12:13:7e:13:58:13:15:97:b4:cc:
1e:f7:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:24 2026 by rpki-client