
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier: e83zVCPHXa+kFZh+blKo4pJbmtZdtjqnVduMZSdx+68=
Subject key identifier: 26:B9:25:8D:9F:AE:5B:F3:CA:FD:83:4A:D9:49:9D:07:3C:30:34:B9
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number: 01CA
Signing time: Wed 23 Sep 2026 03:39:38 +0000
Manifest this update: Wed 23 Sep 2026 03:39:37 +0000
Manifest next update: Wed 30 Sep 2026 03:39:37 +0000
Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: RLuJBkoxnU7bgYiojlcxOfN2eihe3z269GXBRn5mqcE=)
2: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=)
3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Validity
Not Before: Sep 23 03:39:37 2026 GMT
Not After : Sep 30 03:39:37 2026 GMT
Subject: CN=6ab349fa-4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:e0:56:5b:2e:96:62:da:43:7c:03:c5:a5:
c5:2e:f3:32:b0:74:e9:35:bc:4e:47:8e:0c:58:1f:
42:6a:22:d8:cf:ab:23:11:8d:58:9a:88:41:48:a6:
62:bd:dd:5a:12:7f:d1:fd:32:88:ba:61:6c:33:b1:
65:79:dd:35:fa:27:d2:4a:f1:25:c4:68:b3:bb:db:
10:18:4f:4c:77:0a:e7:f8:e2:f3:c5:45:a4:ab:d4:
d2:ee:9d:2f:ab:8b:ff:d8:44:b1:c7:0a:34:d3:ff:
df:9a:50:d4:2e:67:e5:68:da:7c:16:5d:2a:37:03:
7d:b0:25:00:a3:32:9a:29:12:69:dd:aa:df:c1:5d:
09:a9:44:84:b6:9d:4a:d1:3e:16:fc:bd:b1:38:f4:
d2:a7:f7:b2:cc:8e:83:16:61:4d:65:5b:11:ca:95:
72:58:d9:ca:75:c8:69:1e:6b:53:55:a4:4d:15:91:
2a:7f:ad:83:2b:6b:f1:f3:92:57:a1:e1:3e:13:f8:
88:3e:9c:3f:64:3c:c7:4c:0a:1f:72:6e:e0:ac:af:
5e:14:ef:c2:d4:d7:8a:5f:c9:b7:78:a3:f4:a5:3a:
c3:4e:05:87:57:f7:f0:bb:fb:65:94:92:d5:dc:e0:
f3:07:d3:b7:39:6d:27:75:ef:49:1b:81:9a:2e:eb:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:25:8D:9F:AE:5B:F3:CA:FD:83:4A:D9:49:9D:07:3C:30:34:B9
X509v3 Authority Key Identifier:
keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:fb:8a:54:75:d3:b2:cd:25:18:55:c5:18:0d:21:cc:d0:
73:c5:ab:c9:9c:78:e6:54:3f:97:c4:a4:db:26:bd:54:dd:c0:
25:b5:20:27:6e:33:5e:89:7b:3c:68:ae:44:f4:ff:b0:80:d5:
26:6b:10:86:90:8f:1a:96:cd:a6:a0:53:04:04:18:5a:b3:d0:
b0:00:eb:d8:d5:8b:e1:c0:4c:64:bb:f6:60:6a:77:6c:73:f6:
8b:2d:c7:7f:3e:e3:3f:3b:98:d7:36:c1:23:42:6c:3a:66:e6:
da:a3:c3:f4:7b:75:2f:46:f6:05:a0:0f:0e:98:f1:16:b4:ca:
59:27:13:e1:3e:2a:67:35:d1:95:9f:af:d6:55:ef:af:47:46:
a6:3e:57:30:9f:c0:20:5b:a3:8f:04:6a:28:0d:2b:18:06:15:
38:c6:43:76:ae:bb:9f:ff:0d:1a:11:6a:7c:e3:fd:00:50:fb:
ca:81:06:b9:b4:9a:9a:ff:57:25:4e:54:63:4c:88:63:68:bc:
47:a1:90:82:55:54:9a:5b:35:12:39:0e:0f:fd:c9:18:8a:62:
89:6e:2e:43:a7:14:90:37:73:00:1a:e2:af:cb:95:b0:58:0c:
db:49:da:45:5e:76:1c:63:87:fa:17:2e:17:56:0c:2b:14:e2:
ac:33:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:29:53 2026 by rpki-client