
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: VdSGP97mxPk35ZrUdEwR69eL4k1N2EN9tWtM9mTDI4E=
Subject key identifier: 12:6B:86:5C:6E:B3:C8:94:7D:6A:62:96:55:E8:DB:A2:88:A4:2C:10
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 1464EEA2514A3AC9DD039C0FE45CB58974735014
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 0352
Signing time: Fri 18 Sep 2026 12:21:32 +0000
Manifest this update: Fri 18 Sep 2026 12:16:32 +0000
Manifest next update: Sat 19 Sep 2026 14:08:32 +0000
Files and hashes: 1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
2: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: ctysLw7Hc2mshd96RxHLTjD3pqemHoQbJDHNNxHkTqA=)
3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
6: 3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa (hash: OcqsdLDtMbRRfAMVaO1K99xhO+aLsojGYCO5peADbbA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 14:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:64:ee:a2:51:4a:3a:c9:dd:03:9c:0f:e4:5c:b5:89:74:73:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Sep 18 12:16:32 2026 GMT
Not After : Sep 19 14:08:32 2026 GMT
Subject: CN=126B865C6EB3C8947D6A629655E8DBA288A42C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:05:00:97:bf:0b:35:e6:58:a9:d1:ca:9e:
2c:ca:9d:d4:a9:24:d6:4d:a1:7b:09:e9:d7:d5:52:
47:31:98:b6:ff:9d:40:51:d5:1e:07:c8:14:14:2a:
e8:c3:38:4d:a3:b2:c5:a7:da:57:5a:45:f6:6d:41:
8c:22:6e:ac:9d:f5:da:5f:6a:c6:c6:64:76:bd:66:
e7:ef:56:44:f9:17:68:55:50:92:98:ca:9e:1c:6a:
05:96:4d:d6:06:5b:af:e3:bc:50:b0:90:b3:9f:90:
13:9e:68:c4:09:4f:4c:ff:dc:81:e2:e5:0a:bd:ab:
50:48:e4:9a:f0:64:9e:07:47:52:de:e9:60:18:d5:
24:34:ee:fb:bf:1d:fc:b9:b6:19:21:64:f8:80:ae:
99:ee:55:f2:14:a0:bd:b1:b0:06:e6:b8:d2:c6:f2:
ba:1f:c9:a2:3a:8e:c3:36:2b:58:b5:7e:fd:25:84:
70:1a:a0:25:d5:c9:88:79:52:ff:c3:24:18:52:db:
59:aa:bf:8a:b5:cd:4a:68:81:1d:10:73:aa:4e:d9:
35:d7:bc:ad:85:af:26:8e:6c:43:e0:fa:78:dc:94:
cf:06:58:0d:7e:ba:48:33:f4:96:15:be:06:30:47:
1c:25:97:f2:94:68:0e:aa:ba:6e:b4:db:ba:30:d6:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:86:5C:6E:B3:C8:94:7D:6A:62:96:55:E8:DB:A2:88:A4:2C:10
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ea:df:90:4c:47:26:63:59:db:a0:21:0c:aa:49:4c:9a:22:
d4:7f:95:76:59:9d:42:ed:ac:24:24:97:12:52:aa:dc:3e:4d:
ec:74:25:e9:41:57:bc:65:0c:71:1c:ec:57:ab:c1:fb:17:fe:
dd:36:3c:26:84:cc:53:2d:94:1c:b7:1a:ea:cb:d8:2f:7d:41:
c2:66:73:7a:76:d2:82:60:af:68:1d:ef:4f:ba:48:0d:a7:8f:
96:b2:36:ca:64:b4:b0:41:1f:fc:11:3b:2a:02:e5:1f:0b:24:
98:1b:38:35:35:02:e7:18:b9:cf:2c:29:b7:87:5e:47:95:5b:
30:a7:e4:3f:8a:63:4e:54:da:9d:c8:84:6b:01:c7:01:fa:10:
fd:eb:c8:47:c1:ff:c5:0c:d2:97:f5:f3:1d:20:6f:c6:82:f6:
37:6f:93:11:71:f8:a5:01:00:3e:e8:d7:94:88:9d:6f:36:6b:
98:3d:e7:a6:0e:b3:2c:25:a8:91:21:ac:d1:0b:ad:e4:a2:94:
2d:95:fa:d1:b1:5d:86:52:3f:82:8d:60:44:08:80:1b:23:53:
79:1c:40:26:ef:21:44:07:13:6d:bf:ea:6d:14:d8:a6:f0:7c:
9c:b2:61:2c:56:12:47:f3:b1:fc:91:9c:46:c3:01:03:0e:a6:
c2:5c:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:07 2026 by rpki-client