
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json)
Hash identifier: kD8qIrB+jVmpsfE00/boW/MWY7la5/uSzpDJT0cJpbY=
Subject key identifier: 11:4F:9C:94:DA:21:E5:BF:60:F0:87:B0:23:99:5C:54:17:7D:5A:DF
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 0A8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
Manifest number: 0A5F
Signing time: Sun 26 Apr 2026 19:37:46 +0000
Manifest this update: Sun 26 Apr 2026 19:37:46 +0000
Manifest next update: Sun 03 May 2026 19:37:46 +0000
Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: RMcH6/ej5lRqoD1CCo8W+TTkI9gWutZTSADxelW4tpU=)
2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: TiDr6WpJL+EOMyHz0B6+gBTfSVybvdd71lcd+PZGQoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Apr 26 19:37:46 2026 GMT
Not After : May 3 19:37:46 2026 GMT
Subject: CN=69ee698a-88dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:d2:0a:4a:fb:2e:e5:a0:6f:d9:68:38:a2:
2b:56:60:52:57:b0:e0:38:a7:b6:ab:9a:bd:2f:23:
fe:05:2c:cf:6e:2f:04:20:b7:ef:2a:b1:fe:56:47:
f2:ac:37:61:44:98:3d:d1:3d:ec:8f:95:cf:ea:48:
d8:56:19:3e:ee:6b:56:30:f0:9b:99:c0:58:05:0f:
38:1c:67:d2:5b:aa:85:7f:ae:6e:56:6b:84:e7:30:
96:93:6a:62:03:f1:89:89:69:97:97:c1:f4:b7:3b:
a6:cc:bf:a8:ac:84:7f:7f:96:49:d7:06:2f:fd:cc:
3e:24:aa:8a:65:d5:ee:a7:d0:e7:57:9c:a7:41:ac:
58:f5:6a:13:7b:4f:16:6f:96:7c:fd:e3:d5:2f:85:
28:d9:a0:89:9b:72:38:c8:6b:20:db:aa:db:8d:c3:
4d:c2:98:6b:0b:9f:a1:20:67:2d:1a:e4:ee:62:39:
66:53:27:b6:83:8d:1b:94:af:cc:63:cb:72:2f:82:
e6:b8:4d:52:49:77:a0:2e:8a:76:34:a6:47:10:f6:
76:cc:f1:e8:01:8d:fd:c1:54:68:15:8f:59:a6:23:
f4:9f:7a:5a:5e:ef:a5:df:ed:ae:96:99:16:8f:4b:
18:08:04:7f:60:19:78:0f:db:69:b4:d1:5f:3c:f2:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:9C:94:DA:21:E5:BF:60:F0:87:B0:23:99:5C:54:17:7D:5A:DF
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:ad:c5:c3:b1:48:64:1c:e3:1f:20:aa:c0:f9:9f:db:13:
db:ff:d2:73:c3:9c:83:6e:55:ed:15:8c:9b:ec:40:bb:a1:c2:
b6:e0:10:66:51:f6:bc:a4:41:82:5e:34:05:59:99:85:c5:0c:
f7:d0:ed:4f:42:02:fa:93:70:05:88:d3:20:54:66:2c:5e:b8:
cb:8b:30:db:94:7f:b2:00:f6:77:ac:8e:f1:af:12:eb:f0:35:
19:c8:32:81:3e:92:81:bf:52:38:07:20:6e:14:04:23:66:48:
4f:05:7a:d6:33:d4:60:cb:e0:05:d0:79:dc:8f:da:98:f6:a9:
45:4d:04:ec:43:2f:95:0c:45:5c:48:56:c2:4b:03:2b:a2:5d:
ca:12:7d:cf:70:11:1f:a8:0c:97:ef:27:a1:7b:b2:61:cb:b6:
a4:ad:f6:e7:85:dd:5d:64:67:03:87:59:2a:18:11:bc:e7:6f:
84:e3:c4:6d:b4:4c:0c:b6:a3:d4:2c:13:7b:e8:5f:b8:e2:cd:
c8:20:69:d1:c5:e8:2d:fe:68:cf:33:0e:9b:e4:98:97:5a:e9:
2d:d6:d7:0c:2c:8f:0e:dc:f7:6a:04:6b:67:c1:a1:23:93:12:
ee:e7:80:16:7f:ff:88:b7:17:33:82:49:ea:cb:fd:8a:26:5d:
53:e0:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:43:17 2026 by rpki-client