
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier: xj19A3+qHpb/FwjbjkhH0Q3YUmngfwqjGLfmHGkrrg0=
Subject key identifier: 6A:4B:80:74:85:D0:8D:AE:CA:6D:CB:BA:20:78:9F:07:04:33:59:75
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number: 02A9
Signing time: Sat 13 Jun 2026 01:35:29 +0000
Manifest this update: Sat 13 Jun 2026 01:35:29 +0000
Manifest next update: Sat 20 Jun 2026 01:35:29 +0000
Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: 9PWzlKw/tJaAVGQ6oLJarKAVmSlD5zxgXuT7w1QQ/To=)
2: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: cWPvgLzM0wrI0AI0yO5bwCGuSadpiApmv3awAQWzSA4=)
3: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: ef1Pzkd6YyMYPgvb+0QvXOJe09TY7pC/OEUwYAQF7Qw=)
4: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Jun 13 01:35:29 2026 GMT
Not After : Jun 20 01:35:29 2026 GMT
Subject: CN=6a2cb3e1-e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:43:d0:e3:77:e1:9b:6d:78:8b:e2:5a:a9:
78:6b:b8:03:12:c6:68:c6:56:e2:39:1e:b5:25:db:
ad:dc:bd:24:78:98:a0:12:6d:88:fd:ff:e5:8e:5c:
20:88:1d:57:ad:93:ea:02:39:a7:7d:ca:52:03:bc:
b3:f8:35:2d:ec:76:1d:1b:83:2f:f2:9b:7b:07:77:
ba:07:f6:bb:77:a9:98:85:37:8e:7f:c6:50:a3:d7:
fa:69:f7:3a:d1:a2:69:ca:87:3f:ff:8f:28:1e:14:
e7:c2:36:12:d9:e6:0d:da:9e:2e:43:e8:08:8d:82:
33:96:2e:31:7a:48:c4:84:82:01:66:fa:29:2a:06:
05:31:f5:6e:ad:90:a5:c8:a1:d8:df:a0:d0:ac:cf:
0a:b7:84:b6:55:b7:4a:49:f1:3e:a7:ce:ac:b2:e6:
91:f1:7d:3e:f7:02:8b:ef:59:3a:4d:a7:72:70:18:
ed:69:98:12:88:d5:b3:3d:66:92:b5:10:6b:df:00:
da:75:c3:12:e7:41:91:b6:6c:b3:9b:e5:46:ad:25:
b1:01:29:98:1c:02:b3:c2:3f:73:e0:db:88:d9:25:
06:4c:c6:84:6a:3d:f5:2c:4a:59:5e:b6:ff:c8:f5:
25:51:ed:f4:2c:fe:9f:32:3d:c4:f1:0b:22:e9:1c:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:80:74:85:D0:8D:AE:CA:6D:CB:BA:20:78:9F:07:04:33:59:75
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:2e:71:98:be:ce:77:be:02:11:83:ad:d1:48:89:b4:69:
8d:f2:db:8e:b5:a2:b9:50:a4:51:a3:12:9c:b3:e7:ed:08:12:
2a:cb:06:2c:90:b7:b5:9c:ba:f8:e6:61:80:66:e5:57:ba:1b:
9c:b9:6e:b6:df:60:73:7b:9a:94:f8:eb:49:45:10:62:7a:9b:
83:f5:bf:97:ca:0a:a2:bc:77:32:0f:b0:71:b0:a1:1c:eb:64:
75:d2:29:76:16:2d:9b:c7:4c:15:73:6d:16:73:d5:46:71:52:
68:4f:0b:1a:e3:e1:4b:eb:28:41:22:67:a5:74:53:45:0e:4c:
ea:13:36:83:5c:9d:7b:6b:8f:f7:46:7d:b8:ae:0b:a6:eb:55:
4a:14:8e:11:da:f5:97:b2:bc:22:68:1d:13:42:d6:1f:d9:77:
76:44:c1:17:a6:80:db:75:99:fc:11:74:c4:3e:6f:0d:39:8c:
49:5b:bf:09:a1:be:22:25:1c:d6:45:86:cc:3b:d8:d2:6e:90:
10:43:bf:ba:13:5d:d2:89:78:90:be:27:5d:6f:44:8b:3c:8e:
34:a1:b3:24:14:42:bd:07:c5:62:b2:31:fa:30:23:63:23:7e:
f8:e4:e3:e8:fe:87:58:85:de:a3:46:0f:1c:b9:48:0a:18:5c:
26:91:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:19 2026 by rpki-client