
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
File: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft (raw, json)
Hash identifier: SnvQ7QOwWk24kBi/y33LPFsQ3qiJnK9tMpMqn6JIwD8=
Subject key identifier: 1D:71:0F:95:6E:DE:13:02:51:56:F7:AA:4B:F1:94:71:74:30:14:6C
Authority key identifier: F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
Certificate issuer: /CN=A9131667/serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
Manifest number: 0F
Signing time: Tue 19 May 2026 08:59:34 +0000
Manifest this update: Tue 19 May 2026 08:59:34 +0000
Manifest next update: Tue 26 May 2026 08:59:34 +0000
Files and hashes: 1: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl (hash: cY257EU4iZmWbX50uZiKj9beACq4HrA5prSgIIrgrGk=)
2: AE9C9EAC42AC11F1AC02065EBB833773.roa (hash: mM/NCo6m1Teegi+0GRkuaDLw0QJco4DLwfYN12WL/V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Validity
Not Before: May 19 08:59:34 2026 GMT
Not After : May 26 08:59:34 2026 GMT
Subject: CN=6a0c2676-e37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:70:c2:77:2d:49:85:d8:5a:1f:d6:d2:17:
4a:4e:ff:74:1e:d1:2e:01:07:01:d8:f5:7f:bf:4f:
9f:a6:88:92:b8:7e:55:31:28:42:b1:04:a8:70:43:
49:bb:e8:68:a2:41:38:d3:6e:c4:ed:e1:96:ae:ef:
0c:01:c9:8c:53:4b:3c:ef:40:d0:0f:70:20:31:b6:
83:24:50:15:04:f4:c1:c2:82:90:08:80:08:f3:86:
d3:3f:a9:95:ce:40:51:ad:7b:3e:1a:a7:e5:2d:37:
2d:b9:6e:16:73:46:4f:1b:cc:11:b4:c2:57:5d:2a:
e3:be:61:22:97:20:6b:8c:3c:b8:3b:46:7b:0f:b9:
d1:2d:74:ff:5c:87:8c:a3:f6:86:dd:6a:16:95:4d:
f6:24:c4:d5:5b:d4:b1:7e:1f:50:f1:f0:ea:6e:18:
7d:9f:a9:2b:8f:e1:b5:cb:d1:8a:78:c6:06:ca:a9:
ce:df:5a:4e:4f:0d:26:90:c2:49:93:02:c8:5b:35:
72:77:78:08:e7:51:d5:dd:71:bb:a1:ff:f8:6c:d8:
0e:9f:24:50:30:da:e2:cd:a3:2c:ea:db:aa:60:0a:
97:79:17:4f:6c:8f:ef:e4:81:97:1b:da:eb:61:b3:
f2:33:c2:85:67:15:aa:5c:07:74:ce:6a:ab:7b:12:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:0F:95:6E:DE:13:02:51:56:F7:AA:4B:F1:94:71:74:30:14:6C
X509v3 Authority Key Identifier:
keyid:F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:2e:e0:19:b1:55:02:67:c3:1a:8d:06:da:c5:e3:e2:0f:
29:e1:8e:f3:36:5a:dc:c5:e9:19:35:47:55:d8:53:eb:21:7d:
fa:7f:5b:f4:43:80:a5:e7:57:ac:62:26:ff:e8:03:b4:fa:af:
1c:2d:d1:be:1e:54:89:c4:5c:a1:31:34:1e:11:51:dc:3e:39:
a7:fd:b7:e3:51:bd:51:21:1f:43:7b:bc:d2:89:79:96:c7:83:
30:cb:65:5c:a6:d1:71:10:ab:e5:00:ff:b8:9f:a0:93:69:c6:
2a:17:86:73:79:b5:8f:46:43:64:77:9f:58:0e:e9:5f:38:8f:
90:28:ba:18:82:19:75:bc:19:77:9d:90:f7:5d:e8:b9:81:14:
96:3e:f9:76:4b:cd:95:73:a1:f2:bf:85:a5:a6:c2:09:30:8f:
bd:77:c0:fd:0f:11:20:1b:e1:ad:bb:29:f9:be:5f:1b:4c:fb:
db:80:cd:c2:ad:ab:8b:03:86:42:c9:d5:27:fe:0f:52:14:7e:
10:c8:96:93:40:bc:85:82:44:82:8c:ec:8b:f5:ba:21:22:50:
5f:3b:02:d1:58:62:46:ed:45:57:b7:87:45:bf:f4:70:6b:05:
61:ae:ce:95:6e:92:ae:2c:b8:31:8b:b0:f5:41:f6:ae:b1:20:
91:2a:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:19 2026 by rpki-client