
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier: /5pnbiVFBtMR7jTjKVXAutzK5cKcqPAukdL/xoD/65k=
Subject key identifier: 9C:BC:19:6F:B4:36:E7:A7:5E:10:BE:E9:8C:CF:33:BE:9B:97:97:3C
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number: 0123
Signing time: Sat 13 Jun 2026 05:46:32 +0000
Manifest this update: Sat 13 Jun 2026 05:46:32 +0000
Manifest next update: Sat 20 Jun 2026 05:46:32 +0000
Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: xo5qc9savTJZGQhQnbb45dJiClCa3vYAKvErJHUdQRQ=)
2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Validity
Not Before: Jun 13 05:46:32 2026 GMT
Not After : Jun 20 05:46:32 2026 GMT
Subject: CN=6a2ceeb8-ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:80:12:25:d9:7b:8f:29:dc:eb:74:6a:1a:
b2:77:40:ad:a4:03:46:dd:bc:ed:f7:a5:50:69:06:
66:0e:5b:b0:25:ee:01:13:b2:81:82:39:fa:c1:ee:
25:1c:09:b9:46:26:72:64:f5:2d:bb:52:68:63:6e:
f0:88:18:3f:04:0d:5c:07:80:c9:86:2c:52:57:ae:
0f:71:15:42:09:cd:8f:01:6a:6d:f6:48:54:41:b5:
f3:9d:b8:59:65:6e:82:4d:18:04:2f:1c:eb:61:17:
1a:27:68:6b:25:4d:c7:59:1b:b8:ad:ec:59:4a:97:
d0:e4:dc:3f:44:d6:49:ae:f9:19:dc:5a:ff:29:59:
ae:47:83:ff:61:e3:0b:35:e8:8b:d5:f2:0d:2e:e1:
bf:8b:bc:1b:c5:fd:23:f2:23:84:2f:ad:7e:3f:da:
c7:10:43:98:52:43:6a:90:31:e6:81:8d:1c:11:c4:
5f:d8:72:bf:ea:c3:ba:68:2c:7d:38:dc:47:f0:68:
04:ae:02:26:0c:00:0c:f3:e5:cd:e6:75:0f:31:94:
28:11:c2:50:cd:07:e7:b3:6d:af:1d:bf:eb:8a:37:
f3:6e:99:49:da:44:d4:47:c1:5b:ab:49:d6:35:56:
ca:45:34:50:2a:33:3d:85:37:5b:2d:aa:48:3a:62:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:19:6F:B4:36:E7:A7:5E:10:BE:E9:8C:CF:33:BE:9B:97:97:3C
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:0e:cf:fa:ad:e2:7f:cd:23:54:88:0d:d9:d7:77:b4:9c:
d6:73:8a:37:c7:30:1c:78:e7:c0:cc:b9:26:f8:0a:2e:7a:6a:
e7:3e:88:f4:92:38:b5:e4:78:1a:99:25:d4:07:62:06:30:2f:
97:85:1f:d4:e7:6e:e1:2b:4b:5e:da:7a:c0:ab:de:ce:94:f3:
8e:e4:93:7b:d1:11:6c:88:09:aa:86:24:10:c9:ff:36:a6:3f:
15:06:37:a4:55:30:6c:4e:f4:72:5d:34:eb:b7:8a:31:a7:f6:
03:ac:df:81:f1:42:50:29:3a:d5:f3:1d:2d:73:08:1b:52:a9:
09:f0:3e:a4:63:2c:d5:0c:5a:36:11:3e:b2:38:0f:2a:53:af:
a3:0b:b6:36:e3:07:fe:e0:b7:03:26:59:9c:e9:93:6b:e7:85:
da:ff:cb:63:d1:33:ec:55:02:eb:f4:37:e2:b2:11:91:28:07:
38:d1:5e:03:2b:ba:c3:b3:e2:3d:1e:7e:09:a5:5b:92:7b:25:
95:b7:41:35:de:40:f9:e7:c2:fb:09:1a:8f:9b:cf:b8:21:12:
33:9c:6c:d9:12:78:60:b3:4f:e5:43:4c:8a:ec:22:14:6f:cc:
4e:4a:e2:3a:b2:c9:43:8e:d1:f0:74:71:c9:54:97:4f:1b:a9:
49:e9:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:46 2026 by rpki-client