
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json)
Hash identifier: 6nQBR9OsYhshbU3uSTdsx5nHi2eJhSj/QFPPYJK2m3k=
Subject key identifier: E6:C2:BB:A9:42:1B:28:D1:F5:BB:4E:2A:2C:53:6E:9F:69:01:91:E8
Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
Manifest number: 01A5
Signing time: Sun 05 Apr 2026 03:36:08 +0000
Manifest this update: Sun 05 Apr 2026 03:36:08 +0000
Manifest next update: Sun 12 Apr 2026 03:36:08 +0000
Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: feQffk8Up9fYhRz6pXcrdjUxJ/375CUc8ljF19RVl5U=)
2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: NNMJEwajRGyGNObx6qqodqRkuqhktQjk2L5j1hukx9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Validity
Not Before: Apr 5 03:36:08 2026 GMT
Not After : Apr 12 03:36:08 2026 GMT
Subject: CN=69d1d8a8-1db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:b6:00:cb:2e:99:e2:53:41:08:48:ac:28:
b1:85:29:be:df:ea:3e:a7:00:c7:ae:b6:cc:a9:e5:
3b:7e:5b:a8:22:d0:ae:39:a8:78:58:c9:36:6e:32:
53:87:3c:a8:7d:29:69:09:c2:74:23:9f:8f:7a:f8:
2c:da:5e:52:90:96:4c:d3:7d:6f:79:0e:b2:72:33:
6d:96:b6:54:a6:17:70:e1:ce:b5:16:46:13:f1:a3:
68:6a:f3:2c:93:6a:e5:a6:85:3d:a3:3c:74:92:cd:
b3:1c:d5:2c:61:43:f5:6b:ad:46:2d:e7:e6:52:8c:
18:62:33:0a:31:3e:a4:d5:5e:9f:0a:ba:14:af:af:
31:5d:a7:fb:98:5f:ca:58:e0:87:cf:40:04:cd:33:
09:4e:c2:f6:5c:25:cf:76:03:24:ec:ac:b8:da:74:
6b:f7:13:45:db:c6:34:dd:47:28:33:c4:a4:9a:d7:
85:41:ea:3b:ce:ff:90:44:9d:91:cc:47:56:9a:3e:
42:57:55:b5:b9:06:1c:73:11:0c:9a:00:27:3b:eb:
61:3f:f2:15:2b:8e:2e:d0:e5:22:a6:71:0f:d8:c5:
62:c1:c4:c1:40:9d:15:93:ec:b1:dd:0f:32:01:9c:
b4:f2:b1:5b:f1:5d:e0:c7:17:c9:eb:cd:ec:f8:0b:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:BB:A9:42:1B:28:D1:F5:BB:4E:2A:2C:53:6E:9F:69:01:91:E8
X509v3 Authority Key Identifier:
keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1b:04:2e:e1:69:fa:87:e7:78:6b:c4:49:56:dd:32:d0:f9:
0f:3c:7c:f9:13:12:07:97:7f:77:79:a0:5e:d8:ed:2e:a4:5a:
95:f3:c8:e4:bd:56:67:a1:66:53:35:71:97:36:61:d8:2e:81:
72:4e:15:7c:25:dc:2c:18:b4:31:78:29:6f:bf:2c:a1:bc:68:
85:43:f2:08:d8:cc:ec:3f:a8:83:8f:70:d9:79:55:9b:cc:b3:
07:7c:0f:bb:81:ab:73:b3:a3:b9:92:1e:d6:0e:07:51:88:e9:
4f:95:12:86:89:cf:60:cd:79:73:96:5f:f1:2d:a5:f5:0c:a1:
70:0b:40:02:23:83:e9:9f:4d:9c:03:4d:c8:dc:25:16:9d:5c:
90:b5:5e:52:58:96:4d:ac:b3:b3:b6:6f:02:50:19:ac:19:a6:
8d:b1:c5:62:e7:26:95:a3:52:75:94:6f:ff:cc:76:d8:49:e3:
96:89:06:92:2a:84:a9:71:8d:c9:b7:92:22:9f:45:24:39:e8:
0d:33:6d:f3:50:42:f0:49:b8:8e:72:c0:18:55:eb:66:1c:6d:
d8:57:00:86:af:43:1a:89:11:fb:68:cb:47:7d:2d:bc:52:0d:
04:7e:47:0f:73:62:14:4f:f6:38:ea:37:7c:2b:c8:02:1a:22:
26:5f:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:18 2026 by rpki-client