
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json)
Hash identifier: JlAC+WYAR1cevtGTcFQXkZPySaDLi4QV4l5vvIuNZhQ=
Subject key identifier: 45:1E:D5:B1:0F:38:B2:8B:11:3F:DF:39:DF:87:08:53:15:66:A7:53
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
Manifest number: 05A9
Signing time: Sun 20 Sep 2026 23:00:58 +0000
Manifest this update: Sun 20 Sep 2026 23:00:57 +0000
Manifest next update: Sun 27 Sep 2026 23:00:57 +0000
Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: yDs1fcv98jP9d5W6EtxGwwWzCXGCJvUTSSrgkHBjQEE=)
2: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=)
3: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=)
4: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Validity
Not Before: Sep 20 23:00:57 2026 GMT
Not After : Sep 27 23:00:57 2026 GMT
Subject: CN=6ab065aa-1374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:ea:73:7f:d6:6d:ea:d9:62:98:10:8e:ff:
35:9b:56:8e:96:8c:49:e8:52:48:0c:e2:7f:9e:b9:
63:f6:77:5b:68:18:55:5f:57:f5:f9:5e:dc:94:37:
39:a6:75:09:f1:9a:22:9f:4b:da:6c:ab:b6:97:60:
97:5e:35:7a:f7:f3:86:47:d6:27:63:ed:9b:97:6c:
09:63:83:5a:63:c2:01:34:04:2e:3c:e1:73:6b:00:
fb:c9:78:66:17:fa:06:70:32:c0:27:14:49:28:e1:
a0:30:2c:e4:3f:55:19:b9:9a:8e:59:ec:b1:e8:9d:
55:a4:34:eb:c4:ef:59:dd:8b:96:d2:1d:56:83:ab:
2b:be:21:34:3f:0c:63:03:32:e3:8a:46:ac:22:c9:
f8:7c:b8:ec:28:bd:b4:fe:81:65:f9:9a:0b:ef:bc:
30:48:fb:f2:ce:ae:7f:99:9c:22:67:f2:bf:cf:ff:
9a:dc:6e:16:19:bc:68:b8:bd:b2:35:d0:31:26:1a:
60:70:f8:8d:7f:31:b9:3c:ac:14:0a:88:2b:6e:f5:
f2:d7:11:d1:1b:b0:d9:10:5b:c6:43:81:fa:50:1c:
9b:81:88:34:d8:29:75:fb:0d:3c:b1:c8:75:2b:37:
13:a4:d6:b5:5d:cb:b8:41:8d:eb:0a:31:01:a3:33:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:D5:B1:0F:38:B2:8B:11:3F:DF:39:DF:87:08:53:15:66:A7:53
X509v3 Authority Key Identifier:
keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:b0:6f:ec:78:11:77:f9:b7:9b:28:4e:c1:7a:b8:de:22:
d3:85:65:0f:ef:be:d2:c0:0c:cd:1c:fc:8a:2d:d2:54:5d:5c:
96:cb:f8:2f:ec:6d:22:dc:22:b4:94:4c:e0:b1:c4:03:1b:31:
39:84:35:ce:72:fe:62:fe:4e:c5:82:4d:37:e6:f5:78:37:ce:
d6:f2:8a:d7:ab:84:7f:cd:21:3e:70:59:e2:5e:19:70:9f:44:
16:f1:fc:b1:11:3d:22:a1:60:e9:6d:79:b0:da:2a:c7:6d:cb:
49:c1:18:97:12:af:12:0f:7c:37:54:86:da:a8:b0:29:20:f2:
77:44:1b:77:fd:c0:d5:85:2c:50:5c:57:ab:23:3b:46:e5:31:
48:14:36:d6:bc:0c:ed:11:05:3e:85:65:52:75:37:6d:a2:8a:
a4:f1:57:31:0b:4a:1a:34:9d:f1:0d:bd:82:c9:01:ff:f2:fd:
87:b4:2b:89:c1:47:3d:21:20:4f:75:30:ea:c4:e4:b3:5c:56:
29:44:af:f3:8f:1e:da:bb:cd:e6:18:cc:90:75:06:33:0e:bb:
e0:24:9c:39:fc:0d:3b:41:b5:b2:4e:0c:01:ae:27:2b:c3:8d:
5f:c1:e8:59:93:77:47:bc:98:89:86:7e:81:fd:4d:bd:69:9a:
f0:ee:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:21:42 2026 by rpki-client