
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json)
Hash identifier: INI/RSnqKgbzjxVkORp8sqhb3YbTQRbK8jqzUnVXqoQ=
Subject key identifier: DA:4D:A9:B3:0C:95:57:91:D5:C8:45:74:ED:EA:7F:2C:E1:E1:9E:74
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
Manifest number: 87
Signing time: Wed 29 Apr 2026 08:27:59 +0000
Manifest this update: Wed 29 Apr 2026 08:27:58 +0000
Manifest next update: Wed 06 May 2026 08:27:58 +0000
Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: hI0BXKHwLAjuZKVTYr5NVy+/mh2I7c+ch1oHFX6d/4E=)
2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: loa/gmNkqH5emPdqG1mfwNrpi51lh8r/Sh1SgqZBjbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Validity
Not Before: Apr 29 08:27:58 2026 GMT
Not After : May 6 08:27:58 2026 GMT
Subject: CN=69f1c10f-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:8a:69:64:f0:c2:c5:0f:b3:0c:21:7c:3f:
07:02:a3:1e:68:4b:2a:e7:1a:6f:45:10:ab:06:f8:
3c:97:2b:b9:4f:45:d0:fa:88:29:72:7c:62:3d:b3:
88:b4:49:72:3b:44:5f:5f:85:5f:03:8f:b1:72:6a:
cf:fa:85:92:bc:b7:ea:ae:16:b0:ec:94:04:fd:1d:
8d:af:d4:ca:95:6e:1a:03:64:69:d9:23:de:9c:71:
c2:24:a9:60:b9:2e:38:e1:3a:5b:61:76:bd:32:11:
36:e7:90:ae:a0:f6:72:5b:a1:51:6f:50:7f:09:39:
8f:de:cf:e6:9d:d4:fc:9e:d9:4c:2b:24:3b:0b:99:
14:3f:04:0d:8f:81:7b:0f:42:fe:bd:37:a4:3e:a1:
64:62:b3:60:db:01:d9:e8:44:ad:fc:b1:13:6d:ea:
5d:99:44:94:e2:e1:bf:0c:a5:dc:14:93:8e:34:ab:
b8:1c:05:19:a8:93:dd:4c:6f:d7:d1:12:e3:58:9a:
46:43:46:98:a1:50:63:8a:d3:a4:66:db:f7:36:fa:
ac:50:5a:aa:ec:ca:ae:f5:d4:29:a8:1e:a2:e0:6e:
b5:f5:2a:49:b8:97:eb:4d:2f:e3:42:9e:6b:8e:8a:
b5:dd:55:8f:57:c9:12:54:d5:07:4d:78:7c:1a:2a:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:A9:B3:0C:95:57:91:D5:C8:45:74:ED:EA:7F:2C:E1:E1:9E:74
X509v3 Authority Key Identifier:
keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:12:8f:39:71:b8:6c:fd:df:4d:34:92:46:1a:47:e4:1c:f0:
18:26:43:0b:87:4a:5c:ff:75:ca:61:5b:3e:2e:b3:b7:78:92:
af:fe:0a:46:0b:8d:a3:4c:d8:af:27:61:26:4d:f8:0a:c6:b4:
88:b1:5a:32:0c:ac:e5:97:68:9e:aa:53:39:0f:a3:14:f7:9b:
5d:fb:58:3f:fe:fc:e2:54:31:c0:38:eb:a3:9c:a4:19:58:84:
c8:30:ba:ae:e5:6a:c9:60:af:8b:33:0b:85:b0:e4:ca:79:fb:
7a:0a:e4:ea:2d:c7:c8:eb:00:32:85:e8:b4:fe:de:c7:59:3c:
cf:a0:95:d9:e4:7e:a2:07:b3:07:b2:ad:e9:e5:74:8c:99:06:
57:9a:bf:7f:66:a8:2f:35:21:dc:c5:b2:9a:6d:f3:b4:fd:bf:
b1:a8:12:62:3e:c9:c7:f9:7f:2c:b6:c9:66:32:50:93:95:74:
2d:ce:62:50:1d:15:45:b4:94:35:ad:75:06:1d:aa:94:34:f8:
67:73:52:a9:92:f2:50:02:4d:ad:73:2e:5e:8e:14:af:d5:d2:
7f:b1:8c:68:a8:d6:e6:b6:37:45:ad:22:85:2a:d1:d0:f9:e1:
41:20:c9:d8:f0:aa:13:4a:08:55:2d:f7:e6:a9:51:4a:a4:c3:
15:48:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:44:35 2026 by rpki-client