
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier: AZEoIK4NuY5xM4QGKff5R/NwsWnpuroXtdxHJlZ12Ck=
Subject key identifier: F2:1B:CF:7E:3F:B2:54:70:CB:E3:B5:07:68:E1:ED:6C:81:92:91:A8
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number: 02C3
Signing time: Mon 27 Jul 2026 02:41:07 +0000
Manifest this update: Mon 27 Jul 2026 02:41:06 +0000
Manifest next update: Mon 03 Aug 2026 02:41:06 +0000
Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: KbxlXf3i+nYfgfb/BMq55YOZRLeDH8UGnryooWIjeOI=)
2: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=)
3: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: k4ktbvDzNMFlZcj8AA2wIV1+SLib12XIvSfJT6zbmGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Jul 27 02:41:06 2026 GMT
Not After : Aug 3 02:41:06 2026 GMT
Subject: CN=6a66c543-434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:06:b5:6f:e7:5a:c6:8e:7c:5f:d0:a9:85:
63:4b:85:9d:af:57:db:27:e0:2a:1c:fc:50:58:73:
9f:32:f1:21:01:7a:58:19:d2:38:59:c5:2b:1d:91:
81:90:d3:e7:42:0b:d7:ae:c5:6f:a0:e1:9d:b3:7b:
f4:8a:9c:b8:53:6d:3b:bc:3f:b3:d8:38:02:5d:6d:
78:db:51:6a:2f:c6:40:a6:d7:aa:09:5e:a2:5d:c3:
30:5c:54:84:ba:6c:da:4f:8b:93:fd:6d:e4:20:d3:
f0:8d:4d:29:38:fb:fc:f1:67:63:c0:74:bd:cc:6f:
36:ff:50:c0:bd:05:81:17:36:16:ce:ee:34:5c:25:
a6:f5:01:7a:98:8f:ef:ce:c2:11:31:5c:bc:24:01:
08:a1:ab:21:36:ff:92:33:98:57:09:d0:f6:ec:78:
26:cd:02:c8:a2:e0:e3:1c:af:fd:f7:26:86:f9:32:
e0:a1:8c:20:53:fd:c9:2c:df:1c:e3:a9:8b:12:a8:
30:6d:40:99:9e:40:9c:86:9b:eb:25:c0:14:39:ee:
54:eb:09:2e:4e:18:e8:25:88:86:72:80:7d:80:09:
c8:64:0a:a3:8e:5d:1b:64:fd:f0:02:05:a7:b3:fd:
51:80:9c:01:3e:df:cf:a9:41:1a:b2:a3:a1:53:90:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:CF:7E:3F:B2:54:70:CB:E3:B5:07:68:E1:ED:6C:81:92:91:A8
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:0c:f7:95:42:0d:8c:80:79:be:08:e0:a5:bc:d6:90:3a:2c:
93:c5:bf:11:be:21:3c:42:97:41:36:03:d5:d2:e4:fa:ab:02:
b4:f7:d4:df:b6:a0:af:ca:ea:52:a7:b8:fd:aa:e5:0a:74:06:
7c:44:b6:2d:64:8d:df:d9:bc:3b:09:fb:70:75:fd:f4:60:87:
7f:a0:08:2f:94:70:c9:52:95:47:aa:f6:83:83:b7:34:84:04:
36:7f:ea:ba:6c:53:26:b7:c4:b2:05:db:b0:c8:1f:e2:5a:0d:
f6:e8:25:27:39:5a:b6:57:5e:68:49:1f:b1:cf:72:c2:25:70:
7f:11:5b:e3:0d:33:82:96:db:5f:a5:de:6f:76:97:9a:0c:92:
f9:8b:31:e6:b8:72:be:ff:48:c7:14:f0:be:7b:b0:be:37:5f:
3b:63:f8:9e:d4:af:d4:bc:3d:b8:8f:a2:93:ba:f3:68:f1:5e:
b9:16:fe:5f:2b:f5:34:ed:6c:10:19:c7:f8:04:ce:9b:33:af:
cf:3d:27:19:e5:6a:6a:ba:02:de:a9:93:4d:43:31:09:42:b6:
53:94:6f:b1:67:86:e4:79:58:5e:57:62:70:78:48:34:34:87:
9a:e4:e2:14:7f:93:10:a1:ce:88:b7:4e:9a:3f:f9:c2:0f:d0:
e4:a0:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:46 2026 by rpki-client