
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json)
Hash identifier: 5lHIj8f81IH30V7UK1dZqn+IzJssu6BX0srVi+KOSeY=
Subject key identifier: 2A:3C:A0:A0:A0:7D:AD:F4:B0:D7:B5:43:D8:4C:FB:7F:D8:2C:15:89
Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
Manifest number: 0153
Signing time: Mon 01 Jun 2026 06:04:43 +0000
Manifest this update: Mon 01 Jun 2026 06:04:42 +0000
Manifest next update: Mon 08 Jun 2026 06:04:42 +0000
Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: 8ZC3TmfpVj/E86GttwT+252vLznUOStWfL8TuGDKl2c=)
2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: BX/V4MXnmfeUAN5WHp08JX8MMvFEmP1cWkHTdG2V9bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Validity
Not Before: Jun 1 06:04:42 2026 GMT
Not After : Jun 8 06:04:42 2026 GMT
Subject: CN=6a1d20fb-1469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:67:71:a6:51:92:77:26:d7:6d:fe:e8:fb:
2d:c7:32:23:69:66:3e:6f:25:85:e6:37:bc:1c:4a:
fb:76:65:b7:fb:e3:d4:db:bb:d3:88:d4:5b:9c:98:
1b:c2:99:c3:a5:1a:36:7e:20:09:ec:2c:19:8b:00:
e5:d4:32:c8:3a:95:53:6b:03:f2:08:d9:c6:33:4c:
66:cb:2f:8d:41:c1:95:e1:bb:60:38:b1:1b:25:47:
20:5d:d9:f9:e5:68:46:1f:01:a0:59:b4:40:24:d4:
67:d5:61:fc:fb:71:c6:48:9d:ca:7c:88:c4:1f:37:
64:13:89:96:13:49:da:30:da:6d:c9:f3:9b:50:60:
8e:23:ae:e0:7d:96:5e:23:c2:95:4b:fc:74:d9:7f:
3b:0a:43:0b:61:72:96:49:73:e7:7a:1e:10:1f:73:
6b:5b:05:bc:f4:bd:ae:c9:23:41:c3:f3:e6:64:d0:
73:16:d7:56:df:44:e8:9d:6d:83:5b:26:c0:3d:8d:
37:f0:b0:2f:30:dd:19:9f:6a:47:f3:86:bb:12:85:
b1:4f:59:37:a2:88:eb:8e:ec:4c:14:db:51:c5:b2:
ec:ad:62:a3:a1:98:ff:33:50:11:2d:43:4f:81:47:
d5:d3:28:68:60:82:5c:c2:ea:4f:43:f1:83:52:67:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:A0:A0:A0:7D:AD:F4:B0:D7:B5:43:D8:4C:FB:7F:D8:2C:15:89
X509v3 Authority Key Identifier:
keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:55:51:2b:ae:1d:a5:86:0b:2f:42:96:62:21:0b:a5:37:
dc:38:30:fa:a8:67:1f:5d:d4:dd:6b:bf:16:a3:c0:92:3b:ce:
57:e9:f9:6d:e1:61:48:af:9c:0b:8f:cb:73:45:d0:91:b5:ec:
95:e4:63:52:3e:5e:15:cf:fe:45:5a:48:bb:2c:3b:00:a6:3a:
13:a8:1f:72:7a:96:f9:d7:62:84:f4:39:83:cd:37:4d:11:db:
94:c8:e9:0c:e3:80:24:a7:fa:81:9b:22:3f:b6:e7:da:c3:d5:
8e:3b:c6:6e:e5:eb:0e:6b:2e:f1:55:34:39:05:62:f5:a1:54:
90:ed:d4:79:ea:9d:34:2b:15:cf:15:34:f5:37:b4:b8:bc:bb:
5c:96:f0:0a:54:1f:84:09:62:20:30:fd:ea:8d:04:3c:17:8c:
d0:1b:4b:91:1e:a4:bd:00:29:d2:09:32:25:1f:29:cb:48:03:
70:95:a2:db:8d:85:20:31:f7:bb:eb:44:7f:6b:a8:72:7f:33:
5b:4d:58:89:8d:d8:2f:6b:92:09:02:25:51:28:8d:fd:03:c5:
96:cf:e7:5a:37:7f:3c:74:40:a3:79:53:ce:36:ff:d7:d8:50:
ce:10:90:a0:f9:db:60:14:15:45:e9:f4:72:a0:05:ff:19:f5:
53:ff:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client