
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
File: 9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json)
Hash identifier: Cn9JbJzhvLEthyzw1mrjGujVYt1f2yx0kNpIkuidWIM=
Subject key identifier: F5:97:EA:92:58:81:98:5D:18:E3:67:9C:E9:71:77:FE:DD:F5:E9:1F
Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
Certificate issuer: /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
Manifest number: 43
Signing time: Sun 05 Apr 2026 07:47:49 +0000
Manifest this update: Sun 05 Apr 2026 07:47:48 +0000
Manifest next update: Sun 12 Apr 2026 07:47:48 +0000
Files and hashes: 1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: A+uG34tyFvkgCzO6AwXmkjnKwtF/ZXpkNJiaEPYvwek=)
2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: 6WkyvNNnzEKbhZLPxsCnSzPE8ILtaJ60SG7+lHKUE78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Validity
Not Before: Apr 5 07:47:48 2026 GMT
Not After : Apr 12 07:47:48 2026 GMT
Subject: CN=69d213a4-d720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:15:0a:2c:f8:ec:a2:d0:9c:6f:27:15:cd:
15:a7:a9:ae:b5:f9:00:2e:e7:fd:ca:3b:4f:d3:73:
73:2a:be:c0:e1:98:64:21:2e:8c:ae:3e:e4:d7:f5:
cc:1f:37:b9:83:d3:de:6e:2f:fa:54:b8:e9:d7:f2:
33:d5:18:e9:c0:1a:ba:46:40:49:70:5d:eb:32:22:
00:48:56:56:6a:de:5f:ac:9e:f2:ee:28:3f:1e:11:
9d:8e:db:08:49:d7:15:86:2d:41:52:b4:e6:67:a5:
e4:8d:c0:16:78:02:66:1d:11:0a:06:fe:1c:b4:4c:
b5:8e:84:3b:ed:af:c6:7a:55:1d:20:bf:4b:51:d6:
03:bd:3b:f7:80:21:59:08:70:c4:f2:72:46:5a:b1:
a5:92:86:ca:4e:76:29:9a:e9:21:12:c2:02:22:fa:
86:3e:5e:e0:99:48:25:86:c6:ff:6b:f8:73:9e:3c:
a2:86:57:1d:56:c9:e9:2f:f5:b2:e5:d9:bd:54:67:
de:0f:5f:5a:fa:7d:b0:bc:f5:d8:35:7e:65:d9:21:
ec:a4:77:ad:15:65:0e:1f:70:2c:9c:b9:47:22:2f:
de:0e:d8:29:98:6b:8d:3b:b2:a3:a5:73:34:c5:65:
1e:ef:42:96:1d:df:59:d0:cc:dc:72:39:02:2c:42:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:97:EA:92:58:81:98:5D:18:E3:67:9C:E9:71:77:FE:DD:F5:E9:1F
X509v3 Authority Key Identifier:
keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:3f:47:5d:b8:d9:89:e5:7e:6e:9b:b2:19:7c:22:94:c5:ca:
0a:f4:b1:45:a2:c3:c6:ea:8f:9b:f0:ac:14:0d:6b:3a:7f:7d:
ab:de:b7:30:71:2b:a3:6d:ab:15:1a:13:4a:40:46:91:bc:db:
93:31:f9:9a:99:e9:1b:0b:93:38:bd:38:93:91:c2:38:49:5a:
c8:09:9a:f2:c0:b5:fb:c2:54:2c:4d:8a:e6:fb:69:9c:f7:c6:
33:03:de:5b:ee:c0:e7:54:96:8b:73:16:f7:c8:a8:c1:70:34:
22:32:3d:9a:76:f4:c3:71:51:5c:4b:6d:6f:00:a5:f3:3a:5a:
30:ec:8b:94:99:90:92:e6:c3:1d:73:f4:d8:6f:a5:84:8c:49:
e9:f4:f6:56:fc:2d:b6:82:04:c0:a3:29:d0:dc:19:ec:82:66:
ef:7a:28:e4:95:e5:d8:94:63:77:eb:7e:69:81:df:ce:83:9d:
90:4a:db:1e:2a:9c:33:9f:ed:65:8a:b2:29:7f:03:99:de:20:
1c:83:d6:87:01:3c:2b:5c:5a:a8:5c:80:1a:c6:90:7b:13:bd:
00:52:19:5e:de:41:02:d8:e3:8e:65:b6:9f:55:ea:f3:95:f3:
4d:3f:03:88:b5:12:6b:5a:1f:3c:f2:72:ee:5a:ce:0e:48:74:
84:62:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:26:31 2026 by rpki-client