
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier: Ru1iZ3cOlUEebaksdu0kUdCLl5ACMVr3jruIfLr/Pd8=
Subject key identifier: 62:09:00:2E:D0:15:97:47:2D:B9:65:D9:47:45:9A:9E:6F:3D:DC:07
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial: 09BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number: 09B3
Signing time: Tue 28 Apr 2026 20:13:01 +0000
Manifest this update: Tue 28 Apr 2026 20:13:00 +0000
Manifest next update: Tue 05 May 2026 20:13:00 +0000
Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: n46py7DwV8eVyQ3dGAqSlqK3UZgscA3nAGT2lS9yjxw=)
2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: QiTuGvny7kwZa0r7xsMS35Li4xGVKVdjf+tEuUZn0Sk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 20:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Validity
Not Before: Apr 28 20:13:00 2026 GMT
Not After : May 5 20:13:00 2026 GMT
Subject: CN=69f114cd-df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:40:b9:fc:84:2f:e0:b6:fd:0b:95:c9:58:
20:e6:86:fe:f6:97:4a:22:fb:b2:30:d5:0b:99:de:
30:45:1e:6e:9b:51:fb:47:2c:8d:4e:7a:e2:be:b2:
9b:09:87:c2:bb:d0:41:0c:99:07:54:68:a7:39:c9:
66:fc:e5:b8:24:1a:8b:60:b7:a2:bc:ef:9b:f5:4e:
40:ae:ac:43:ff:5a:9a:9b:56:2a:e5:9a:c7:c5:99:
b6:c4:ab:9a:cc:ce:1d:31:d6:34:db:16:e5:42:fb:
ff:7f:f0:53:2b:19:a3:2e:1e:00:3d:f2:78:e7:2b:
03:b6:4c:4b:ce:a7:76:4c:03:37:93:a6:23:c7:4a:
14:dc:a6:6f:4f:bb:f9:7c:48:78:4f:ff:5c:13:a4:
64:6d:c9:dc:aa:c8:0a:8c:a5:ba:44:14:90:f2:f7:
41:62:f5:44:6a:e1:51:77:ef:cd:e2:a1:f1:f1:50:
cf:c2:6b:ac:b0:e0:5b:26:66:76:a3:be:36:b0:0f:
bc:09:c8:37:b1:26:a3:57:29:54:6e:26:33:a4:4c:
1b:6b:57:ca:54:be:84:b5:9d:a1:92:e2:07:1a:89:
65:86:8a:2b:1f:3e:ce:5e:85:a4:60:4e:da:9f:f5:
fe:2b:fb:05:20:c1:1a:43:af:3e:35:df:b4:38:9d:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:00:2E:D0:15:97:47:2D:B9:65:D9:47:45:9A:9E:6F:3D:DC:07
X509v3 Authority Key Identifier:
keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b8:9d:f3:e9:3f:25:1f:b3:1e:13:80:ff:4c:79:86:c2:d0:
c7:3d:b7:a8:0a:5b:31:9b:e0:a3:c7:03:95:e1:66:65:0f:a0:
72:33:47:81:dc:85:80:19:e9:b2:63:3d:28:8a:4e:a5:4f:bc:
a1:7f:34:e8:aa:e5:a5:6e:8c:b2:02:05:ed:e2:b1:b3:2d:a2:
ab:d5:9a:64:8d:98:c1:e3:4b:54:d5:9b:64:1f:31:85:31:e8:
47:0a:93:c6:24:c7:34:74:da:6d:bc:b4:7f:38:df:38:9d:d9:
29:be:0e:a3:52:e9:dd:eb:02:1d:d6:0a:a6:b9:68:ac:98:4f:
2a:de:45:a2:b6:a1:6a:5b:4f:d7:44:5a:a9:ce:8c:bb:1f:b0:
39:0e:39:35:27:3c:f0:b6:48:35:69:cd:3c:a7:aa:a0:3e:09:
71:57:85:bc:e9:27:6b:89:e5:4f:13:6e:f4:05:f8:00:0e:bf:
33:80:c5:90:5c:a2:7b:62:b1:34:ab:6a:75:48:eb:5a:9f:b9:
03:4a:42:12:17:77:4c:60:aa:88:f5:b4:d3:ee:34:a9:5b:39:
bb:f5:26:2f:9a:9f:e9:88:61:c0:55:0b:55:0e:7b:34:30:b2:
2e:6f:4a:33:c1:06:50:b0:bb:47:56:e1:bb:6e:40:82:8e:3e:
4d:46:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:47:22 2026 by rpki-client