
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier: ZRlq9VJo9ufE8ngArY36ui50UMTbFv7Ij6Fx8zBUQ6Q=
Subject key identifier: F4:BB:D6:66:FF:B2:A8:7C:75:DC:D3:D7:5D:B2:D9:BB:35:E9:87:19
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number: 0111
Signing time: Thu 03 Sep 2026 06:11:26 +0000
Manifest this update: Thu 03 Sep 2026 06:11:25 +0000
Manifest next update: Thu 10 Sep 2026 06:11:25 +0000
Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: O2qK6Jv/DPiMpk+OaLQkIMmeJAbEw39JJkkjJw8Nodg=)
2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: cNFpk4xvE3+xhetFVsHGb9R/5Z63kJbCCHb2RP80z/0=)
3: 06E20316A56011F197ACE01C5211F970.roa (hash: 2+Gng8N75dAVqgFX3kAfFklya5J8uLmGt2uI9NZmzZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Validity
Not Before: Sep 3 06:11:25 2026 GMT
Not After : Sep 10 06:11:25 2026 GMT
Subject: CN=6a990f8e-9d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:35:3a:90:e6:eb:51:63:f0:05:6b:14:10:
e7:31:55:93:07:c3:4f:6b:c5:e5:50:f0:75:9b:d9:
d9:7c:86:4f:c0:97:0f:6f:0b:22:ef:cf:69:f5:42:
f8:df:d4:94:14:66:33:c8:4f:19:86:fb:91:31:3c:
bc:d8:a8:22:0c:f1:9d:c5:58:97:ca:7a:1e:e4:48:
9e:17:45:56:6d:65:c3:b1:6c:2d:3b:71:38:61:7d:
20:a8:cf:22:0f:e4:a3:fe:1a:d3:1c:24:72:f8:f1:
2a:d0:0a:38:62:0b:00:06:ed:97:5c:db:5d:ec:9a:
91:19:0d:80:4b:60:48:57:e3:de:fc:27:10:80:c1:
c6:f1:74:91:74:4e:9b:b8:b6:a8:97:51:27:c6:7c:
c6:0d:6d:30:43:ed:61:92:f3:57:06:ad:1b:69:07:
da:9e:ae:a1:84:c0:7f:b6:61:9d:b6:c3:91:d0:dd:
43:f7:49:f9:84:c7:e0:80:b1:0d:1e:f1:8c:0d:a0:
05:a5:f5:30:fb:da:32:7f:e0:91:9b:09:f6:20:38:
5d:3c:54:16:b8:ce:e3:22:e4:0c:95:ec:ff:85:62:
84:de:98:8e:77:a9:1b:24:6a:58:9d:d3:0b:1f:3f:
0e:b4:72:5c:a2:95:c8:f3:59:95:a5:08:36:9c:34:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:D6:66:FF:B2:A8:7C:75:DC:D3:D7:5D:B2:D9:BB:35:E9:87:19
X509v3 Authority Key Identifier:
keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:0a:38:c8:73:81:8e:0e:02:b9:95:05:ca:63:df:44:77:
bc:a2:03:9c:c1:3e:07:a4:99:2d:de:c6:36:55:19:3e:94:2d:
52:0c:66:cc:39:84:95:ca:32:e1:ab:2a:ff:97:dc:71:3f:07:
74:55:92:5b:64:dd:43:87:03:05:67:25:68:6e:8a:c0:27:17:
df:cc:4c:81:19:a3:43:02:d3:17:de:d3:2a:62:b1:09:40:7e:
c8:94:a5:96:34:5d:ff:1d:24:5e:9a:f5:9e:01:ae:9d:eb:32:
b8:e9:bf:73:23:52:d6:1c:1c:ec:c1:d9:8b:df:60:4e:0a:48:
39:b8:7d:2f:70:ed:e6:10:02:1c:2d:06:09:09:16:9e:9e:d4:
18:70:2f:d0:cc:9f:67:73:2c:23:7a:d6:58:91:a2:63:f5:f1:
87:45:a7:62:85:91:bb:f7:2c:c1:1a:94:c7:e9:32:4e:8a:f4:
f8:5a:1b:54:bf:9a:f1:ec:72:0a:0f:f5:4f:ee:54:19:ab:ea:
2a:36:27:40:84:2b:ca:be:34:18:73:9a:a1:9f:1a:a4:82:ea:
05:2b:99:12:59:6a:03:ce:e9:b9:92:af:08:1b:2a:1a:64:2a:
61:6d:78:63:66:e8:38:bf:54:4b:f3:71:14:d5:cc:24:0a:0a:
17:05:79:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFMDkxMTAvBgNVBAUTKDA4QTM5MUM2QjM4OUM4MTBFOTVCQzYxMzlDRUNCMjlE
NUQzOTU4QzQwHhcNMjYwOTAzMDYxMTI1WhcNMjYwOTEwMDYxMTI1WjAYMRYwFAYD
VQQDEw02YTk5MGY4ZS05ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUw1OpDm61Fj8AVrFBDnMVWTB8NPa8XlUPB1m9nZfIZPwJcPbwsi789p9UL4
39SUFGYzyE8ZhvuRMTy82KgiDPGdxViXynoe5EieF0VWbWXDsWwtO3E4YX0gqM8i
D+Sj/hrTHCRy+PEq0Ao4YgsABu2XXNtd7JqRGQ2AS2BIV+Pe/CcQgMHG8XSRdE6b
uLaol1EnxnzGDW0wQ+1hkvNXBq0baQfanq6hhMB/tmGdtsOR0N1D90n5hMfggLEN
HvGMDaAFpfUw+9oyf+CRmwn2IDhdPFQWuM7jIuQMlez/hWKE3piOd6kbJGpYndML
Hz8OtHJcopXI81mVpQg2nDQjFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS71mb/
sqh8ddzT112y2bs16YcZMB8GA1UdIwQYMBaAFAijkcazicgQ6VvGE5zssp1dOVjE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwOS84NzA1NUIzMjA4
QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlCRHBXOFlUbk95eW5WMDVX
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUUwOS84NzA1NUIzMjA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlC
RHBXOFlUbk95eW5WMDVXTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAESwKOMhzgY4OArmVBcpj30R3vKIDnME+B6SZLd7GNlUZPpQtUgxmzDmElcoy
4asq/5fccT8HdFWSW2TdQ4cDBWclaG6KwCcX38xMgRmjQwLTF97TKmKxCUB+yJSl
ljRd/x0kXpr1ngGunesyuOm/cyNS1hwc7MHZi99gTgpIObh9L3Dt5hACHC0GCQkW
np7UGHAv0MyfZ3MsI3rWWJGiY/Xxh0WnYoWRu/cswRqUx+kyTor0+FobVL+a8exy
Cg/1T+5UGavqKjYnQIQryr40GHOaoZ8apILqBSuZEllqA87puZKvCBsqGmQqYW14
Y2boOL9US/NxFNXMJAoKFwV5hg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:10:43 2026 by rpki-client