
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json)
Hash identifier: hJQ1krdC+qF/tjlMrtTmEsPy3KUMYdHC3wAjaz9K+yU=
Subject key identifier: D4:62:32:25:89:3F:D5:1C:FC:81:EA:AD:60:2F:85:86:73:5F:A4:75
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial: 0732
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
Manifest number: 06FF
Signing time: Wed 20 May 2026 22:27:33 +0000
Manifest this update: Wed 20 May 2026 22:27:32 +0000
Manifest next update: Wed 27 May 2026 22:27:32 +0000
Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 7yPAoW67NtB/9Cs5SFvqhPd/QM0iS1faIzAVyGqqCRk=)
2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: I0fdKsHvXdyMww8h7AjfWaIz+Z8MPQG9V3zDhTuhz2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Validity
Not Before: May 20 22:27:32 2026 GMT
Not After : May 27 22:27:32 2026 GMT
Subject: CN=6a0e3554-dd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:e3:1f:cf:4d:4e:1d:38:90:04:47:3b:da:
79:e2:81:83:89:64:85:90:e7:dc:0a:e2:5f:19:8c:
a0:f4:bf:ee:b5:e1:4b:80:cc:a1:e7:98:53:26:3a:
e3:36:9d:a1:6e:23:cb:7f:fd:87:fc:d4:ac:90:74:
7e:b8:49:e4:5d:c3:80:10:71:91:cc:00:60:d5:29:
7a:ea:65:53:0c:43:24:91:96:13:e3:0d:d3:fc:b7:
88:41:0f:b7:c2:84:49:cd:34:33:19:67:01:58:3d:
f5:a0:a9:c2:11:4c:84:b4:5a:fc:84:cb:6a:50:46:
63:5e:02:dc:93:b8:c4:0b:1b:7e:9a:49:84:8c:2d:
6d:89:c6:f4:4b:33:8d:47:26:fc:65:8c:8c:1d:75:
6b:6b:f6:a1:f9:8f:09:56:b0:d8:56:b8:df:5f:62:
25:6f:17:e0:12:c0:fa:5e:69:98:d6:08:c5:35:ff:
f6:73:55:72:d0:a2:a6:fe:20:b4:b7:cd:0a:3a:3e:
04:ad:1d:cf:7a:37:9d:4f:a9:a4:60:9c:39:63:bd:
be:fb:bb:b9:98:12:be:38:49:51:00:c0:05:33:de:
34:0b:43:77:b2:32:b3:bb:65:75:9b:00:ff:bd:8e:
96:b1:b4:08:79:d3:01:44:c9:bf:44:fa:fc:3d:33:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:32:25:89:3F:D5:1C:FC:81:EA:AD:60:2F:85:86:73:5F:A4:75
X509v3 Authority Key Identifier:
keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:20:e5:81:11:11:06:8f:d5:bb:ba:d1:26:cc:1a:a8:a1:
7e:23:73:e1:fe:65:9b:e2:39:68:f3:5d:c8:ca:f1:dc:ac:3a:
12:32:92:2c:71:42:5b:29:9c:dd:ab:76:c3:fe:55:03:50:8c:
15:f2:b7:67:e7:a3:74:f3:b0:4c:19:d2:0f:af:12:95:d8:7b:
64:fe:94:ad:92:f0:2e:5b:9d:7d:bb:ca:6d:35:19:82:0f:e7:
3a:ec:aa:3e:f2:b5:25:0f:5e:10:7a:ac:e9:39:b5:8b:a2:9d:
fd:f0:8f:20:fd:f6:69:8e:bb:cb:4a:a1:86:8b:a1:bf:f9:45:
e1:38:dc:72:cb:27:2d:06:5d:fb:b8:b3:43:6f:99:2e:16:d2:
49:5d:90:d1:e8:e0:a1:12:6f:f5:29:99:9a:44:9c:1c:99:8d:
59:3c:e9:02:aa:f7:dd:78:93:2a:d7:9a:8f:dd:1a:f7:5f:2e:
e8:c3:35:5a:a7:06:ab:95:93:8c:2a:53:dc:ee:64:09:35:d4:
40:41:98:8d:8d:e3:b9:17:52:49:da:10:e2:ff:13:db:b8:55:
f1:45:c7:99:22:83:d6:19:a9:64:19:6c:ab:b8:15:0a:3b:f0:
e2:47:ac:a9:c4:e9:25:3d:79:9d:00:e9:43:8b:6c:9f:02:49:
15:f6:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:30 2026 by rpki-client