
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: 8t3F2xx5lfKLsn3k+dJhmKP5byNnjsPduJzkuTGu9d4=
Subject key identifier: 39:31:80:19:F8:DA:30:E3:56:63:66:61:C7:E3:CB:DF:F5:43:7E:15
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 44A6CCBFAB62DB69BEEA9ACDFA55B4B9CE1885D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 0391
Signing time: Wed 04 Nov 2026 20:15:16 +0000
Manifest this update: Wed 04 Nov 2026 20:10:16 +0000
Manifest next update: Thu 05 Nov 2026 21:11:16 +0000
Files and hashes: 1: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: rI1MQ4ROV5lFymDFy5O3jlZIRtAYCMlDt78fEf/3pag=)
2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
3: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
4: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
5: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 21:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a6:cc:bf:ab:62:db:69:be:ea:9a:cd:fa:55:b4:b9:ce:18:85:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Nov 4 20:10:16 2026 GMT
Not After : Nov 5 21:11:16 2026 GMT
Subject: CN=39318019F8DA30E356636661C7E3CBDFF5437E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:6d:eb:4a:96:02:82:91:bf:94:af:e1:c7:
34:99:b7:c4:c7:6b:e9:66:d2:95:25:56:e6:ed:46:
db:b9:8f:bc:2e:48:fb:dc:c6:d7:66:73:5c:7d:fc:
ef:d8:af:b0:94:e8:4d:35:e1:80:e6:85:c8:ec:e1:
a1:75:a8:8c:44:ea:cd:fd:29:61:08:49:74:64:50:
e8:7e:61:ff:9e:91:46:3c:c0:d4:e1:87:92:d4:c7:
17:d9:f9:50:3f:12:ee:bd:61:89:fd:df:a7:79:76:
df:18:cd:f2:8a:6c:d9:5b:83:34:f2:c9:3a:f1:c5:
87:e3:64:e3:45:b1:ed:2c:57:bb:42:af:ab:27:be:
a8:b6:2f:c2:2c:f4:78:ed:6a:68:3d:5a:18:21:2e:
f2:d6:3c:60:9a:93:e4:bc:bb:8c:22:46:83:e4:33:
b0:20:99:c8:98:6b:b0:53:71:ef:8e:fc:1c:68:e5:
e2:89:f9:23:c8:d4:21:df:c6:da:68:ea:c1:fd:67:
00:7c:4e:89:38:51:31:61:a3:f9:c9:46:db:db:53:
39:6e:00:d5:ea:0d:63:bc:fa:e3:f6:db:33:56:7d:
63:ef:85:cf:e4:82:89:a4:b1:ad:ef:0c:23:10:a6:
10:be:ba:c3:06:87:e6:c5:5c:67:cc:a1:11:1d:8d:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:80:19:F8:DA:30:E3:56:63:66:61:C7:E3:CB:DF:F5:43:7E:15
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:70:81:2d:57:73:94:8e:99:1a:55:9f:02:23:20:8e:c7:
1f:10:d4:8a:49:3e:2b:e9:4b:52:82:cd:83:48:9b:6d:3e:8a:
9d:c4:30:12:86:74:4d:45:84:dc:5a:36:d8:dd:e2:a4:bb:26:
b5:a6:c5:9c:ef:c0:19:b3:45:7c:e9:c6:c3:dc:d0:ca:80:3b:
13:83:52:61:fa:8b:37:68:10:20:14:bf:6c:a0:ab:ab:d4:98:
6f:c1:49:6e:0c:89:65:21:78:00:d3:a2:76:c2:9e:ab:10:72:
89:0a:23:dd:5c:e0:6e:a3:aa:29:05:7c:6e:9a:d8:1c:45:14:
ac:81:0f:02:3f:1d:ea:61:ad:0a:11:18:66:e6:3b:b7:e3:51:
7c:d6:8b:25:99:03:6b:fd:e5:a2:89:80:be:01:25:8c:0c:f3:
52:17:75:c9:f6:f3:8f:f8:7d:8a:e4:21:a2:68:d9:27:d5:54:
0f:76:90:1e:3b:de:cb:53:51:ce:39:55:35:22:c8:b5:23:28:
e0:f1:13:e7:8d:95:88:ba:a8:24:af:ce:d5:63:a9:c9:84:a7:
61:75:cd:0b:cd:0e:90:1e:93:73:a5:ed:ef:e2:b7:81:44:49:
fd:e3:af:6b:d6:72:c2:96:8b:91:90:d6:8f:8c:70:c8:ea:f3:
5f:dc:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:39:51 2026 by rpki-client