
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier: J+8bsfv1VVAdDyp5y1KUgCxdlwkTzKXP42ez7+8+YSw=
Subject key identifier: 3C:A0:4A:E4:61:23:8B:14:BD:6C:C8:05:4F:7D:D8:85:D5:24:58:B4
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number: 01C9
Signing time: Fri 11 Sep 2026 03:52:55 +0000
Manifest this update: Fri 11 Sep 2026 03:52:55 +0000
Manifest next update: Fri 18 Sep 2026 03:52:55 +0000
Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: 7BvbtCNOkp+K5v22cHZgORIkjvsOML8Lu316t4YzHes=)
2: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=)
3: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Validity
Not Before: Sep 11 03:52:55 2026 GMT
Not After : Sep 18 03:52:55 2026 GMT
Subject: CN=6aa37b17-1de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:5f:2d:66:f0:c4:07:cf:82:cd:70:30:bb:
52:71:5d:9e:c6:e1:a3:1a:20:35:21:72:1d:62:53:
51:fc:e1:25:fc:38:26:1c:49:fc:16:3a:e1:15:d4:
44:a8:98:3e:a6:59:ab:2b:2c:bd:f4:b2:da:77:99:
7f:51:4b:87:32:5a:9b:9a:43:3b:da:98:e3:65:19:
89:25:68:cf:54:dd:c3:93:7e:90:a3:50:34:87:88:
d8:bd:2b:23:24:02:f9:f4:40:05:3f:34:ea:cf:2f:
e7:d0:ae:4b:97:95:0c:6f:d3:8c:d2:15:a5:b3:58:
04:b5:e8:88:31:a0:de:8a:df:e6:62:6a:49:da:55:
73:4b:83:94:c8:30:13:7d:6d:61:d9:60:fc:0d:67:
50:90:9e:1d:8b:5e:63:cb:02:43:c1:1b:22:77:27:
96:26:c8:89:20:4c:d3:8d:fd:08:80:fc:09:39:24:
46:e0:86:f6:9d:b7:2b:63:b7:93:0b:45:04:4f:ee:
aa:70:1e:f0:a6:1b:82:a8:53:f2:d0:cd:2b:dd:b0:
b6:cf:42:ab:67:34:54:8d:af:bb:6d:4d:94:4e:90:
9e:6f:ef:57:15:da:03:97:cc:2f:cc:ed:e8:3d:36:
4a:64:58:2f:2e:23:82:4c:6f:34:3d:48:38:ec:f0:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:4A:E4:61:23:8B:14:BD:6C:C8:05:4F:7D:D8:85:D5:24:58:B4
X509v3 Authority Key Identifier:
keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:ce:c7:db:b9:fb:ee:f6:9c:56:6f:e9:0d:32:b4:21:43:
a6:6b:65:f4:35:12:c1:28:c0:3e:2d:6c:68:37:1f:48:fa:b0:
1b:6c:47:36:94:4e:da:a0:f6:9f:4a:85:d1:22:dc:b7:73:c1:
b7:7d:b7:78:b8:4b:bb:7b:1a:c6:1e:b3:06:cb:bf:9b:1c:4b:
79:88:3d:50:f2:b4:8f:ec:e7:6d:c9:56:fe:77:23:e5:62:31:
7f:ba:84:ab:1b:f4:a3:0a:93:d3:c2:6c:58:a1:2f:f2:80:b3:
b6:50:28:cf:79:b7:ce:40:af:72:9d:b4:ba:3e:e3:3c:ce:b7:
e2:35:6a:98:35:fb:0a:83:d4:39:00:31:ba:5f:44:c2:6b:4f:
15:36:e7:c3:5c:82:a8:49:59:b9:b2:6f:8b:e9:dc:4b:4c:69:
fc:72:b5:33:65:b5:08:80:82:f1:da:3a:ef:cf:48:c9:10:48:
69:a7:8a:db:4c:06:62:b6:a0:37:b1:f6:4c:a3:70:dd:dc:cf:
b5:98:f6:b7:2e:f5:be:64:80:17:f5:41:d3:e6:ef:7f:10:e0:
2b:c9:7d:c6:ef:fd:e6:d5:92:81:49:cd:17:2a:39:37:24:e2:
ac:70:3b:46:f3:04:cf:93:ea:a9:42:89:ca:30:4b:95:c0:e3:
74:cf:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:26:13 2026 by rpki-client