
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
File: 9XVLkqq8JoHf84hg3Om63UQAE5s.mft (raw, json)
Hash identifier: 8aHW01xk/IoIh42Iv9klssgoFXX0CZRkPNzE5A9Sjl4=
Subject key identifier: CF:D3:6B:82:68:88:B0:06:D4:77:93:DD:40:C9:EF:B5:A7:C7:5E:9F
Authority key identifier: F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B
Certificate issuer: /CN=A912F441/serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
Manifest number: 11
Signing time: Tue 19 May 2026 08:56:07 +0000
Manifest this update: Tue 19 May 2026 08:56:06 +0000
Manifest next update: Tue 26 May 2026 08:56:06 +0000
Files and hashes: 1: 9XVLkqq8JoHf84hg3Om63UQAE5s.crl (hash: Q29XClT695HmMaNx9lny7PxOzwJUbObAfgiGfM1MH8g=)
2: 9019A36C3E1511F1A306071DB0833773.roa (hash: qFpaUvNcy06CyqhmCRJk7avcwKJJ8xKplcr6b79/BGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl
rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F441, serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
Validity
Not Before: May 19 08:56:06 2026 GMT
Not After : May 26 08:56:06 2026 GMT
Subject: CN=6a0c25a7-9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:bd:74:b1:98:dd:2f:60:41:3d:d4:4f:dc:
24:ec:4c:51:00:24:db:6e:da:58:e6:61:e9:19:ec:
7e:47:a1:9e:a4:a3:71:79:b6:52:94:a3:1c:38:94:
2d:a4:92:96:72:df:e1:4f:d5:2a:d1:8b:48:58:de:
b4:53:89:50:cb:ab:75:f8:1c:cf:66:6c:61:43:9d:
94:a7:4c:b6:0a:48:89:b1:e6:04:4b:da:95:fb:75:
09:c4:fe:c7:df:84:be:90:3a:b2:49:db:d3:d0:6c:
c5:f1:e1:5e:79:9b:59:2a:fb:cf:e9:aa:ef:6c:44:
4c:9d:a8:08:7d:d8:82:b8:75:f5:37:34:fe:fd:a8:
39:2e:b6:37:0a:a7:0d:29:69:7f:0c:a0:91:17:cc:
68:23:40:07:6c:35:1a:70:92:be:59:1f:17:2f:d2:
98:b6:d0:b2:e4:29:fe:66:a7:a4:46:32:e8:e1:96:
da:f0:e2:99:16:8a:62:67:59:55:c5:03:e2:5c:91:
02:83:05:7b:ff:50:62:47:6a:0e:83:bf:54:3f:c8:
82:4b:c2:86:ca:87:42:b0:ac:cb:30:5b:fb:54:74:
4c:34:c1:c8:82:8d:5b:37:2d:f3:06:ea:32:29:31:
16:88:a6:3a:18:af:ef:7f:35:aa:2a:d0:1e:11:43:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:6B:82:68:88:B0:06:D4:77:93:DD:40:C9:EF:B5:A7:C7:5E:9F
X509v3 Authority Key Identifier:
keyid:F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:f2:92:27:e6:20:34:e4:f6:ae:66:81:f4:1d:b6:6a:50:
b7:ed:1a:aa:03:28:aa:79:9a:14:55:b7:5e:8a:73:75:23:41:
92:00:46:a6:c6:b2:dd:e0:39:aa:73:e7:ad:ee:07:db:58:1f:
53:8a:8a:e3:71:ba:18:21:ad:51:a6:d7:92:27:a2:55:50:91:
63:ce:fd:f5:4b:01:fa:81:81:25:bf:83:38:d5:ad:70:d2:49:
d8:94:cc:78:f7:e2:db:7d:74:f0:73:91:6d:55:b1:9d:3f:1b:
90:35:f9:88:30:ee:ea:a7:28:20:91:9e:83:c3:dc:77:ee:74:
d0:fe:39:98:dc:91:ff:29:84:01:ac:87:dd:bc:59:dc:f7:f4:
3d:92:79:5a:3a:6d:64:9e:ff:99:40:ea:4d:fe:fd:4d:d8:2a:
08:33:56:3c:1a:cc:fa:d8:6d:5c:da:f9:78:2f:47:4f:60:16:
29:f7:c4:36:aa:fa:17:6a:76:38:78:78:ea:8e:c8:de:2e:44:
51:74:9b:dd:cb:23:bb:3e:23:1c:fc:ae:09:a2:ed:45:56:e1:
37:ce:dd:3e:42:db:cb:22:f5:73:ff:ec:00:cc:d6:23:05:66:
5b:65:83:91:a1:32:02:6c:9a:6b:d2:07:bd:fb:8d:0c:96:a5:
aa:62:1e:97
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjQ0MTExMC8GA1UEBRMoRjU3NTRCOTJBQUJDMjY4MURGRjM4ODYwRENFOUJBREQ0
NDAwMTM5QjAeFw0yNjA1MTkwODU2MDZaFw0yNjA1MjYwODU2MDZaMBgxFjAUBgNV
BAMTDTZhMGMyNWE3LTk2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA9b10sZjdL2BBPdRP3CTsTFEAJNtu2ljmYekZ7H5HoZ6ko3F5tlKUoxw4lC2k
kpZy3+FP1SrRi0hY3rRTiVDLq3X4HM9mbGFDnZSnTLYKSImx5gRL2pX7dQnE/sff
hL6QOrJJ29PQbMXx4V55m1kq+8/pqu9sREydqAh92IK4dfU3NP79qDkutjcKpw0p
aX8MoJEXzGgjQAdsNRpwkr5ZHxcv0pi20LLkKf5mp6RGMujhltrw4pkWimJnWVXF
A+JckQKDBXv/UGJHag6Dv1Q/yIJLwobKh0KwrMswW/tUdEw0wciCjVs3LfMG6jIp
MRaIpjoYr+9/Naoq0B4RQ7KZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz9NrgmiI
sAbUd5PdQMnvtafHXp8wHwYDVR0jBBgwFoAU9XVLkqq8JoHf84hg3Om63UQAE5sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNDQxL0E1OEJFNDY4M0Uw
QTExRjE5NjMzQUQxREE4ODMzNzczLzlYVkxrcXE4Sm9IZjg0aGczT202M1VRQUU1
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVhWTGtxcThKb0hmODRoZzNPbTYzVVFBRTVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG
NDQxL0E1OEJFNDY4M0UwQTExRjE5NjMzQUQxREE4ODMzNzczLzlYVkxrcXE4Sm9I
Zjg0aGczT202M1VRQUU1cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4GfKSJ+YgNOT2rmaB9B22alC37RqqAyiqeZoUVbdeinN1I0GSAEamxrLd4Dmq
c+et7gfbWB9TiorjcboYIa1RpteSJ6JVUJFjzv31SwH6gYElv4M41a1w0knYlMx4
9+LbfXTwc5FtVbGdPxuQNfmIMO7qpyggkZ6Dw9x37nTQ/jmY3JH/KYQBrIfdvFnc
9/Q9knlaOm1knv+ZQOpN/v1N2CoIM1Y8Gsz62G1c2vl4L0dPYBYp98Q2qvoXanY4
eHjqjsjeLkRRdJvdyyO7PiMc/K4Jou1FVuE3zt0+QtvLIvVz/+wAzNYjBWZbZYOR
oTICbJpr0ge9+40MlqWqYh6X
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:28 2026 by rpki-client