
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier: 7I6lSqSybeSHQr8S9Eu+e8BL8ViPYw/LCAeqD3KorDg=
Subject key identifier: 2F:03:DB:48:97:D4:26:9E:75:B7:F9:B4:94:B6:8F:53:1A:CD:DF:0B
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0BD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number: 0AD0
Signing time: Tue 10 Mar 2026 19:35:44 +0000
Manifest this update: Tue 10 Mar 2026 19:35:44 +0000
Manifest next update: Tue 17 Mar 2026 19:35:44 +0000
Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: MqZts6nnXBanMKbD6H0PkbSBCC49EGQ/WwssldRChE0=)
2: AA872C46B89711F0A8B6AF18C4F9AE02.roa (hash: L8XeDcqYKfEwtUixbxiuEo2nfMcVKjSSiCD4J312+Jo=)
3: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: tbv3mJpYtopeQGTyPvYuiDpi3ylLpd97qu4zEKbjLRo=)
4: 2A4D3504E07C11F09FEE3C963A6F56BC.roa (hash: pvrAUtNSj5xYTp9GoyYA4vwFLQjwkuK0ozJfp/rLlrQ=)
5: 8628DDA0105211F1BBAEE07D233D8C67.roa (hash: t3OUgC2SOXU6zyQE3OxhA4d4zs/DAgn0xiB4PNX9FDA=)
6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: hsNkAINjk2ZrSkKYe7O+OAvLcD/yedut/tj8L/fDTRc=)
7: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: h48gp7I4fb+7u4ZAxP6VW8RmMJ5sbPGA2wHENEc0Ems=)
8: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: Md5gFpZEYAkNjb3njZGDBbECXerJEDLQA/G2Oi33PwM=)
9: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: 6AybJyEnaCUIrzFIlAdZVQqdIRL6Z88oDgQ+Wlf2glk=)
10: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (hash: j3wvdVZdlkttK5LQzYWRv8MyzczrZzv4IowyLYxZ5Ak=)
11: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: woZN1RZ3CcFFDhSK+AWqbDYzTCUQTLV/86fTxGSM89s=)
12: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eopPOPwLkEVbi55WtWRB1v9qi25upZwX13O32WrQgWU=)
13: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: COoBB02MxjsVzMJ4S0NyDpkOD0uHJhw8SJh40dOTE+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Mar 10 19:35:44 2026 GMT
Not After : Mar 17 19:35:44 2026 GMT
Subject: CN=69b07290-dffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:9d:df:29:ad:21:4c:b4:8f:fd:11:83:29:
49:64:0c:4e:f4:a9:9c:2e:d6:78:fc:be:ad:47:16:
b3:70:8c:09:b1:ed:76:f0:8a:84:12:0a:0f:04:a6:
12:27:71:2e:a8:20:8b:4c:bd:da:c5:ac:b5:3a:8c:
02:e6:00:67:38:8a:b0:1a:c1:e7:3b:c4:79:ff:32:
d7:e5:06:68:64:e9:a4:d7:84:ea:6f:a4:9a:dc:3c:
7e:71:dc:d4:a6:96:62:bd:56:8d:c6:6f:7d:87:70:
1f:a4:b0:89:a0:f4:40:e4:48:b5:d9:b4:46:9d:10:
a2:21:20:59:d1:7d:c1:e6:c1:45:0a:32:a1:54:bb:
f9:df:c0:86:fe:55:9b:c2:69:dc:39:ba:45:ee:ef:
27:f8:f3:d2:55:45:5e:5e:bc:fe:29:34:08:4f:95:
74:37:1f:b7:e0:64:51:a5:77:6c:f8:cc:99:2d:dd:
2a:13:6d:be:f5:a6:5a:b0:fb:f7:97:af:9f:db:6b:
0f:32:c0:9c:0d:3a:68:a8:c7:a8:03:05:b2:59:52:
4a:d5:8a:d6:d4:65:ec:37:d5:b0:40:fa:0b:ff:67:
de:04:02:a4:57:34:83:f4:30:bf:d9:1c:29:fb:b4:
75:f5:0f:92:e8:15:31:f4:3e:d0:09:1e:e6:6d:82:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:DB:48:97:D4:26:9E:75:B7:F9:B4:94:B6:8F:53:1A:CD:DF:0B
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:64:f1:27:1a:8d:7c:7a:bb:81:5a:6d:17:38:88:4d:cb:
19:61:ab:09:3f:27:31:e6:c9:86:23:a0:73:00:9f:1f:7e:e5:
e9:e9:55:57:40:f7:46:df:c3:29:38:78:41:75:be:b7:c8:00:
81:a3:f4:c6:84:20:2a:24:a3:a7:69:de:1c:8a:9c:56:df:e0:
89:e0:39:d7:23:9d:64:be:74:ab:7d:ee:c4:d0:23:7e:25:63:
b9:34:4b:fe:f1:27:ff:e5:09:fa:d6:14:28:40:b3:ff:5e:7e:
55:f5:86:0c:e7:3f:0f:f5:eb:4d:44:e0:1a:05:28:e2:2b:0d:
dd:c6:1a:2c:70:68:fa:d0:e5:93:60:d8:29:2e:cd:a7:c3:49:
f4:f2:02:d2:3d:1e:d4:26:9a:4b:e3:51:88:75:53:1d:a0:f3:
53:52:62:93:47:54:db:64:27:1c:a7:03:ff:80:8a:a1:a3:1a:
be:03:5f:1c:0f:c4:0a:30:ab:f2:d4:6b:fe:64:bf:7a:a8:a5:
33:0f:1d:9f:1c:96:27:49:58:fe:da:cc:d0:17:e7:d8:e2:7c:
1d:c2:79:89:f5:33:6e:4e:88:2f:05:ab:88:9b:7a:a9:5d:c8:
36:07:f6:9b:46:8b:66:64:e7:88:f6:ef:aa:52:fb:f6:c4:ce:
84:38:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:33:28 2026 by rpki-client