
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
File: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft (raw, json)
Hash identifier: pZExd8+t5Ru/Vl0KWLtwBZKiUCadvAzfJxdOGnjUQ/c=
Subject key identifier: 64:E9:14:A3:1E:1E:1B:25:ED:9B:C7:29:A3:4A:5F:BA:F6:3C:C9:C0
Authority key identifier: 0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
Certificate issuer: /CN=A912C2EB/serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
Manifest number: 0A
Signing time: Fri 17 Jul 2026 10:29:30 +0000
Manifest this update: Fri 17 Jul 2026 10:29:30 +0000
Manifest next update: Fri 24 Jul 2026 10:29:30 +0000
Files and hashes: 1: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl (hash: py2wq9q6jSzn6V8prnWStW+WEgRv/4f3PAUQL6RV22Y=)
2: E64DF1C2738811F1BF8D4D716EA30FBC.roa (hash: ta94cq6P3Y9AqMQ72/iTm11UyiyepXDOi/daYTMVMwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2EB, serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Validity
Not Before: Jul 17 10:29:30 2026 GMT
Not After : Jul 24 10:29:30 2026 GMT
Subject: CN=6a5a040a-3024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:3e:50:6e:d2:ba:82:32:64:47:b6:b4:92:
4f:b0:13:eb:60:50:e1:90:72:da:b9:69:99:95:9b:
36:9c:c4:62:56:b4:5b:c4:0f:ff:ec:ec:48:32:87:
a8:99:df:5b:90:f0:4e:22:f2:ce:85:84:dd:0b:93:
64:18:6f:31:88:3f:9b:1e:4f:ee:77:6c:83:9d:0c:
fe:56:d5:1e:4e:c2:02:70:fb:49:52:2c:2e:47:ea:
e8:4f:5f:31:4e:21:b1:92:b1:32:40:71:47:cc:44:
6d:1d:cd:b9:05:fc:db:cf:31:7b:d1:b8:1b:bb:91:
ae:53:b9:fe:b4:4c:78:8b:62:e9:57:b7:73:3f:9c:
f2:72:22:6d:9f:bb:61:77:2c:52:68:ff:41:b2:40:
4c:54:f9:bf:4a:1c:4d:52:55:86:7c:87:69:e9:1b:
28:06:01:d6:8a:45:f3:20:ef:a1:6c:6d:e5:71:ed:
af:a7:4e:98:65:27:91:40:d4:fd:4d:61:36:b6:ed:
05:21:6d:76:18:54:aa:4c:2b:87:e8:95:82:89:52:
c5:e7:1e:a5:1a:5a:9b:eb:f1:fa:b5:2d:0b:0d:d3:
67:c1:de:7d:90:4f:c1:64:1e:2a:6c:fd:22:95:ce:
b6:1d:a9:c4:dd:29:a7:e2:e4:58:30:49:d4:2d:f4:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:14:A3:1E:1E:1B:25:ED:9B:C7:29:A3:4A:5F:BA:F6:3C:C9:C0
X509v3 Authority Key Identifier:
keyid:0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:a8:9f:1e:e0:46:e4:14:d2:56:48:0a:73:f8:f3:ee:c6:
35:c1:34:d9:16:37:55:0d:cf:b3:2a:be:87:a7:ab:4e:28:00:
62:e0:df:52:f4:13:e1:2a:96:2d:a1:28:62:48:f6:7b:2f:b3:
6e:f9:75:b4:af:76:a9:7d:73:ed:e7:1a:1d:af:e4:fe:a3:e6:
0c:bc:da:41:4b:23:2f:31:4e:ff:1a:29:cc:21:13:47:38:df:
7c:14:b4:5a:7f:c1:9c:4b:c5:60:e9:77:8c:63:bf:c6:8c:ce:
ac:97:a1:57:c6:da:46:d0:13:7d:cc:76:27:4f:80:bb:bf:ef:
2d:9f:dd:fe:bc:da:d0:8e:7d:44:de:16:6d:0f:97:bc:05:3f:
07:c1:58:42:90:19:b3:9c:d1:86:35:f2:52:ed:c6:e0:25:63:
10:ba:13:fa:4b:fe:2c:4e:4a:38:81:ef:f8:46:7a:d1:46:e9:
72:af:0e:c7:5e:6e:58:c9:08:b5:d4:0b:de:88:40:d9:a1:ae:
cc:4a:c9:f7:80:0f:d0:a5:c4:b4:14:05:02:de:02:2f:97:fc:
4c:d9:73:38:de:f1:c9:b5:0d:fa:4a:7e:27:82:c5:f3:27:a2:
e8:38:8e:40:66:36:a8:ab:c9:cf:3b:78:b0:bd:9f:92:ec:f6:
6f:9e:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:10:19 2026 by rpki-client