
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: eJUd6C/N2gYQI5uUpG98rTj4GK4tw6QJpM/jCv2p304=
Subject key identifier: 55:4E:C8:07:5E:23:9A:42:89:66:81:57:D2:8E:5A:0B:68:18:20:67
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 6839C367472CE67AA0E94A2B9FC9FBF4FD73FA3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 02D0
Signing time: Sun 14 Jun 2026 12:13:51 +0000
Manifest this update: Sun 14 Jun 2026 12:08:51 +0000
Manifest next update: Mon 15 Jun 2026 16:11:51 +0000
Files and hashes: 1: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: qmQN+5PlRp1TOI5Q7y7wzfgIpF3RqlomQJXSyG0E3Us=)
2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
4: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=)
5: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
6: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 16:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:39:c3:67:47:2c:e6:7a:a0:e9:4a:2b:9f:c9:fb:f4:fd:73:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jun 14 12:08:51 2026 GMT
Not After : Jun 15 16:11:51 2026 GMT
Subject: CN=554EC8075E239A4289668157D28E5A0B68182067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:ec:09:e8:9a:25:79:d7:08:d5:28:07:8c:
7e:a3:94:b0:21:fe:73:e2:ca:5a:62:a9:87:60:14:
58:fa:02:3f:d4:21:b8:af:d4:3d:7d:04:cf:71:8e:
09:a7:91:19:bd:bf:22:44:38:22:48:3b:95:c4:3d:
6c:0e:9e:f2:af:9d:bf:fc:40:ac:84:ea:10:e5:e9:
42:3a:2a:a0:da:ad:91:26:54:96:ce:a3:a8:80:26:
b2:b0:42:d1:a4:4c:19:2e:b3:7b:97:6f:44:cb:1b:
e8:0c:51:17:9d:42:ef:d2:b9:09:16:5f:bf:6d:53:
f3:cf:6f:ba:d2:ef:c1:1d:64:a1:f4:fd:3d:1e:e8:
7c:14:35:54:8a:b7:d2:24:d4:c5:3b:33:57:f5:9e:
67:2c:96:78:90:83:bf:ac:15:4d:cf:10:a1:1b:4f:
d8:27:28:9a:1b:02:55:0e:35:34:36:a4:97:32:78:
ce:4d:63:18:21:fc:0e:3d:e6:95:9b:f8:9e:92:ac:
81:23:c2:69:02:82:fb:6f:f7:a9:6b:e8:b3:21:78:
06:56:98:36:ad:b1:d7:d9:7b:f0:92:00:18:e9:7f:
b2:1a:cc:55:ca:27:db:ce:04:a3:f8:04:7f:e8:a0:
03:30:9c:14:95:bc:1c:9c:72:ac:70:9f:5e:92:a0:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:C8:07:5E:23:9A:42:89:66:81:57:D2:8E:5A:0B:68:18:20:67
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:f9:c7:bd:d4:91:97:81:9f:b5:4d:66:4d:2b:23:2e:5f:
2b:35:28:ef:87:8d:08:8a:b8:80:ca:c9:7c:78:bf:75:c3:2e:
12:5c:6d:bd:58:56:d8:ed:95:08:13:d4:d7:d7:57:b5:21:2e:
73:74:f7:05:e2:6a:88:73:17:e3:19:9f:7b:af:bf:ec:9c:46:
18:df:64:3f:07:3d:ef:b2:39:03:0b:98:a3:a4:8c:0c:87:9b:
7e:07:d3:68:fa:15:d3:98:97:a8:7b:3b:ca:12:50:8e:82:28:
9f:37:aa:a5:35:49:7d:dc:9c:f6:cc:a0:10:a4:53:d1:8a:0e:
cb:1c:6a:69:ab:8c:65:bc:97:03:62:bc:b5:f7:d5:14:67:e7:
ef:84:88:1e:e6:77:21:82:ec:d5:2a:f9:53:26:d0:38:ba:33:
d6:c3:3b:f1:bc:64:67:47:68:0d:7b:a7:d5:86:56:e4:6b:4a:
d3:8e:de:1e:2e:a8:7f:b0:a2:1c:fe:54:6a:5c:ad:46:00:54:
88:72:00:0d:d8:3b:7c:f6:1a:a6:e6:37:36:f2:44:65:da:8f:
b7:8f:bc:94:57:f7:23:ee:c5:c1:30:2d:da:d2:26:9d:61:87:
f3:46:e2:99:63:6a:0d:d3:72:44:25:76:b9:e8:34:25:33:89:
df:ff:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 04:20:15 2026 by rpki-client