
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: H/100IPKmyumvby2/W9tf9KC2TQfEtLpi1rSSVQP1gc=
Subject key identifier: FB:71:8E:20:7B:76:99:A5:06:C8:A5:D3:18:AC:5F:CC:73:95:CF:B1
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 1A
Signing time: Mon 15 Jun 2026 09:03:02 +0000
Manifest this update: Mon 15 Jun 2026 09:03:02 +0000
Manifest next update: Mon 22 Jun 2026 09:03:02 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: cISPvYAaRvCPe5UB+cQUcVk009WifX7G1eo0yjCV5mo=)
2: 2F41CD0643A811F184296E0D94833773.roa (hash: amZ2JPM+XPf34fxY5++TkE/nmH2uk8BWR0qod2Uva1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Jun 15 09:03:02 2026 GMT
Not After : Jun 22 09:03:02 2026 GMT
Subject: CN=6a2fbfc6-b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:4f:9a:8d:e0:b6:57:37:dd:30:fb:80:6c:
70:40:82:db:7c:e5:67:0f:97:5e:02:88:d5:4e:f1:
d2:e4:3a:ac:f3:cd:b4:9f:65:97:93:cf:e9:c1:56:
1f:c6:bb:f7:6f:d0:dc:b8:0c:29:56:4f:58:6c:0e:
9a:71:a8:5c:ae:1e:be:f6:03:ab:f9:32:88:33:e0:
34:18:e3:5b:66:23:4f:07:73:68:85:76:af:1a:31:
38:e9:37:44:5c:83:75:7b:f8:ce:fa:44:72:08:08:
8a:50:c7:b5:20:bb:5d:b4:dc:d1:c4:de:e1:2c:51:
48:03:9c:1a:e8:14:68:bc:49:cb:11:87:ef:19:6c:
2c:e6:4c:e2:3a:e0:6d:f6:f0:a4:8d:dd:4f:5c:ea:
6c:7d:8f:75:20:21:db:54:d5:c0:38:1e:2c:e0:5c:
f4:3e:31:30:f0:f4:90:fb:10:70:10:b3:0f:a1:30:
46:fb:c3:11:2e:b0:f8:8d:c2:ea:35:f5:7f:ec:84:
ee:71:1b:12:a1:c7:ec:21:a2:32:5e:bc:fd:01:e4:
66:bc:da:8b:fb:a6:19:52:3a:ae:f1:96:0f:92:2c:
d5:57:59:44:f7:d7:22:51:7d:fc:7f:62:01:ef:2a:
75:85:d3:bf:f8:76:3c:ea:e6:4c:8f:e9:00:bb:66:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:8E:20:7B:76:99:A5:06:C8:A5:D3:18:AC:5F:CC:73:95:CF:B1
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:0d:82:b1:e0:32:46:2c:de:ac:2b:86:e3:b2:f9:fc:41:
9f:07:a7:4f:8c:00:3d:52:f9:b4:2c:29:c9:47:24:eb:8a:bc:
3f:da:fa:82:48:b6:e2:fc:a1:86:78:bb:f3:ba:75:07:97:54:
86:c3:0e:d8:44:46:48:e9:af:c7:7e:d4:8d:7d:f7:52:ff:a8:
59:5a:e8:61:00:67:c8:5f:a8:bc:15:7d:2b:ab:b7:fc:9c:13:
8b:0a:ba:28:8a:f8:ed:d5:dc:2e:55:86:f2:57:85:fb:9d:47:
49:2f:dd:81:64:81:07:1c:20:3c:04:01:09:4c:b8:c1:1d:b3:
9a:22:81:6f:49:cc:a3:3a:c5:02:9a:fe:d0:16:a9:c8:ae:54:
4c:79:b7:d6:7f:b7:29:e2:fc:ae:03:f4:07:f2:2d:fb:8c:77:
04:d5:9e:05:8b:61:4f:0c:76:01:43:72:8d:5d:5d:c5:1d:58:
ed:de:69:64:4b:a5:5d:75:86:ed:4a:3f:ad:24:3f:9e:04:7a:
9a:31:10:a7:c7:13:9c:de:10:41:a6:d1:00:48:92:32:2a:df:
22:e0:32:f4:f1:6b:2b:9d:b8:9b:bf:bb:15:c0:8b:8f:02:54:
64:8c:4b:8a:aa:03:a6:0b:72:38:33:b2:e2:98:e3:2f:38:d4:
07:52:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:43 2026 by rpki-client