
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: 0zLZj5iZwMtgwsaRf1A3mB0Dfmxah+aroTYieS/b2EM=
Subject key identifier: 49:45:9E:F1:4D:57:E9:EA:D1:35:95:DF:0C:F6:28:93:D8:5E:91:F8
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 01D0
Signing time: Mon 05 Oct 2026 04:03:15 +0000
Manifest this update: Mon 05 Oct 2026 04:03:15 +0000
Manifest next update: Mon 12 Oct 2026 04:03:15 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: 9WMsB3SV7vB5GtgxJTrka2/33rXSOPi7S91roxH8xbA=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: ge93gK4lUWgpZWqf0mLTvZJqGeY+ssrFNxVQ9BEvxjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Oct 5 04:03:15 2026 GMT
Not After : Oct 12 04:03:15 2026 GMT
Subject: CN=6ac32183-edfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:17:56:d9:29:87:4e:e8:e1:1d:d3:c7:12:
bc:10:ff:6d:48:8a:d3:18:28:ca:d6:ef:d5:de:61:
c3:95:da:18:94:de:4a:2d:0f:c5:31:13:f7:c3:eb:
e4:df:2d:07:30:ee:44:23:81:d5:2e:70:5c:28:ef:
30:87:80:b9:35:98:8a:4e:04:49:84:3f:8d:50:2d:
1e:7c:d0:96:9b:56:01:b5:80:7d:d7:7f:2d:9d:f5:
83:25:00:7b:ef:d4:36:9f:99:69:81:ea:c8:5c:d5:
a1:54:c5:08:62:db:5c:79:32:13:55:9a:0f:17:62:
8e:db:24:35:db:c0:a5:7b:88:2f:dc:8d:d6:1b:df:
da:10:bb:e6:d3:43:56:ad:6d:7b:49:91:83:dd:5c:
9c:ef:d7:5d:3d:7a:45:25:73:69:72:4b:3b:20:92:
3c:2f:ae:b2:74:7e:73:52:a7:97:49:0e:69:7c:32:
2a:f9:fb:e2:f6:da:fb:42:93:e0:ef:d7:71:83:cb:
14:0e:62:b5:f0:6b:03:45:de:71:d2:c0:8f:a0:0a:
7e:81:4a:4f:13:71:ee:e0:c8:e5:c1:24:41:fa:cb:
36:df:68:e5:7d:d9:de:33:85:ba:3c:1c:94:e2:2e:
e0:58:36:8c:3b:4a:cc:e1:b1:a4:6f:33:41:85:16:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:9E:F1:4D:57:E9:EA:D1:35:95:DF:0C:F6:28:93:D8:5E:91:F8
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:a0:c2:d9:ce:87:e7:59:f8:11:af:6b:9f:7a:37:e3:5f:
01:4f:e5:91:d2:6a:07:c0:d2:e0:e9:55:41:e7:ea:14:5f:36:
3e:77:a2:8d:af:b8:ad:41:de:50:68:75:20:27:7b:99:b6:10:
fc:cd:51:8c:d0:db:36:a4:4b:a9:bb:3e:1c:30:13:a5:44:d5:
33:73:4d:4c:86:0a:9a:f6:59:e4:c1:6e:af:80:84:70:45:f9:
1e:5a:bb:8c:a3:a5:55:a8:42:17:a1:fd:ff:82:b8:b6:f1:be:
45:d1:64:11:35:7f:20:e3:88:b8:3c:75:46:df:c7:18:37:c1:
65:f3:64:20:d6:66:ff:1b:01:18:3d:36:04:4d:57:66:04:30:
88:87:57:2b:6c:de:30:b4:c3:df:e2:6a:02:93:b6:58:d6:e8:
55:7a:79:5d:2f:7b:6e:d9:3b:82:a3:e2:30:6b:fa:86:9b:03:
3d:ec:78:b3:d9:8c:a5:77:52:7f:17:ef:bd:9d:53:1a:ce:6d:
f9:5a:5b:0c:ca:01:70:88:5a:b1:5a:c2:9a:c8:f6:10:64:e6:
fe:c3:f1:4f:8e:35:e0:d1:67:60:6a:94:c5:42:d7:c7:87:91:
c8:c7:07:6f:93:fb:b6:10:c6:d0:7e:7b:84:d6:7e:38:46:83:
f9:83:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:12:02 2026 by rpki-client