
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier: I02/njD17NzoNO/2qytFysXgsX88l3gqcPOvhWXqelw=
Subject key identifier: 61:15:E7:95:F3:96:A3:B6:09:0D:A5:27:EF:B7:CB:6B:10:CB:B7:B7
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0D76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number: 0D52
Signing time: Sun 26 Apr 2026 17:54:36 +0000
Manifest this update: Sun 26 Apr 2026 17:54:36 +0000
Manifest next update: Sun 03 May 2026 17:54:36 +0000
Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: UjLaLCGAmKeRd16OhknFYG0ejs1XPRbhJgrzhfzIkTE=)
2: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
5: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 17:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Validity
Not Before: Apr 26 17:54:36 2026 GMT
Not After : May 3 17:54:36 2026 GMT
Subject: CN=69ee515c-a8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:60:44:3c:ca:41:3b:8d:48:2d:64:5c:3a:
6f:8b:da:fe:e7:96:a1:90:27:e9:b0:85:41:70:3e:
31:b6:b8:1b:45:9f:4d:85:40:52:a3:a2:26:8b:ab:
16:db:3b:b8:ca:67:9b:fa:35:fe:22:22:39:df:7b:
36:6b:c1:ca:61:36:8c:a9:52:39:9d:fe:6c:22:67:
5d:48:5f:d7:67:bd:f0:8b:48:67:5d:f1:eb:3a:a5:
c1:66:74:16:9e:d0:5b:33:a6:a1:a7:15:60:11:92:
dc:50:35:19:e4:66:2e:c6:1e:a2:01:88:0f:a9:0b:
2a:40:31:31:46:4b:9d:b8:6c:78:82:b5:e8:eb:49:
fc:d8:b5:e8:80:e2:29:8c:b5:2e:b8:6c:be:15:6a:
38:c7:6a:ea:aa:12:62:a5:73:94:08:f3:b3:73:ee:
21:34:f5:ba:a7:f6:bc:0f:24:40:9b:bd:09:d1:ec:
c4:83:02:8c:4d:ca:ba:34:e4:a3:4b:eb:af:63:8f:
d2:4c:80:4f:7d:c5:69:ca:dc:a4:7b:bf:4e:96:9b:
56:63:94:a4:68:6d:16:6f:bf:ff:81:2a:b5:14:6b:
fc:7f:e9:2d:bd:cf:20:42:60:8f:d1:67:3f:6c:cf:
42:66:19:ce:eb:af:41:d5:bb:30:ad:95:e9:86:8b:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:E7:95:F3:96:A3:B6:09:0D:A5:27:EF:B7:CB:6B:10:CB:B7:B7
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:54:68:fc:2b:4d:39:7d:df:d6:36:81:82:ac:c0:9d:c6:53:
c8:7e:3f:be:e1:f9:fb:a4:ec:a2:08:78:75:f4:c1:3d:23:69:
94:6b:0e:23:14:23:09:a2:ce:ce:c6:ba:8b:31:e3:36:b6:75:
4f:6e:00:ef:d5:6d:78:dc:f6:1b:d0:18:ec:ab:c2:5f:e9:54:
c8:19:51:53:fd:58:bc:78:88:a1:88:f1:d4:96:4c:2e:48:77:
48:b4:ea:c4:8f:53:4e:37:10:6a:f0:23:fb:18:51:f6:fb:fa:
36:71:48:09:71:6d:81:d5:89:7a:11:4a:47:fa:87:14:80:53:
5e:2a:29:aa:64:58:07:43:6a:7b:a0:f4:2b:dd:4a:35:6d:16:
60:8f:cc:1d:2c:8b:47:a4:f0:96:c7:84:75:db:fb:ac:7b:31:
9c:d0:ea:d1:af:8f:db:bd:dd:d0:20:76:28:3d:15:d6:ca:39:
89:75:93:6a:c6:06:67:1e:19:83:0a:fa:c7:b2:ca:2b:d1:40:
ee:6a:ca:58:fc:35:bd:84:75:7a:d4:48:18:62:e9:91:ef:03:
8c:bb:12:02:00:c1:69:fd:f0:d9:42:69:99:6b:f2:a0:a5:60:
a3:7e:65:53:90:f6:4a:85:9b:08:30:46:52:12:9f:05:a6:2a:
60:ed:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:47:21 2026 by rpki-client