
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier: liswDH2F4g3j0BaoU/dxdB1hP6ih2NOW9ty+da+z3Dc=
Subject key identifier: 7E:AF:A7:F6:C5:D8:A3:52:49:FF:D1:1A:49:B8:16:33:D7:76:0B:5C
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial: 0B2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number: 0B09
Signing time: Thu 16 Apr 2026 19:16:47 +0000
Manifest this update: Thu 16 Apr 2026 19:16:47 +0000
Manifest next update: Thu 23 Apr 2026 19:16:47 +0000
Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: TVFPYnFOC5MHTJRLLj4KGa+wPsVUsPX8DqOOj4ZKi3s=)
2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=)
3: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=)
4: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2863 (0xb2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Validity
Not Before: Apr 16 19:16:47 2026 GMT
Not After : Apr 23 19:16:47 2026 GMT
Subject: CN=69e1359f-9d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:6c:19:bf:c9:df:a1:5a:2f:fd:27:d1:40:
b1:94:a2:45:79:30:33:b6:56:0f:da:3b:70:d0:d8:
08:31:84:13:8e:5d:1e:d1:56:30:f6:78:6f:5d:b3:
22:fd:3f:1b:69:f5:ed:c3:df:73:cb:f3:57:c8:fd:
b2:a2:c5:32:e6:ae:0f:e6:0f:64:b9:25:23:a5:aa:
f9:59:8d:a8:1e:03:b5:5c:c5:6d:31:5e:10:68:de:
b0:32:4d:86:da:1a:85:77:d4:6d:cf:3e:20:0a:2f:
5b:dd:04:2e:7e:6e:4a:c4:7a:75:c0:67:51:f9:58:
3d:3d:29:1f:2f:b4:c3:0e:9e:bc:43:68:d3:e7:86:
89:9d:b5:24:98:76:1e:a5:e2:69:40:94:1c:ab:9e:
a8:29:44:da:48:a4:30:2c:4f:97:19:25:00:78:3d:
ee:10:bc:3c:51:81:2f:af:ca:db:b5:5a:34:d7:2b:
01:8a:30:30:98:77:b5:72:9d:c8:d0:1f:0c:82:32:
d9:1c:72:b5:a1:49:c3:c6:65:21:57:21:92:6c:fd:
fb:ce:9b:f5:ef:34:88:77:82:7e:41:67:64:31:96:
c2:e1:81:d1:6f:1c:f8:0e:27:22:a9:66:df:13:1b:
0f:71:79:ba:59:bc:45:9f:78:db:3e:fb:3f:4d:11:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:A7:F6:C5:D8:A3:52:49:FF:D1:1A:49:B8:16:33:D7:76:0B:5C
X509v3 Authority Key Identifier:
keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:87:9b:fe:11:03:80:0c:30:af:fa:fb:d8:76:af:28:3d:
a4:0b:7c:4a:b6:07:84:f6:f3:ae:2e:47:17:92:20:16:ca:b3:
a0:77:fb:15:df:a9:30:f9:ba:8a:21:2c:0c:2f:92:35:9b:ac:
66:a8:72:fb:1e:82:12:82:c9:70:19:2a:85:8b:e3:f0:15:9e:
8f:d2:68:7c:38:a3:3a:cd:3e:db:95:67:44:98:82:9f:9d:b5:
92:0f:06:f2:76:7d:46:0e:93:28:92:72:0e:b4:c3:27:90:55:
9e:5e:2b:fb:3b:ff:29:4b:d0:66:c9:27:c2:da:5a:bc:66:1b:
29:c5:c5:32:14:a4:b2:fc:68:a9:43:3c:11:b2:79:b9:28:77:
00:8a:0d:c8:2d:da:13:f4:b3:6e:76:a9:e1:3d:3d:14:6e:e7:
d5:48:c7:0f:a8:77:b0:61:6f:2b:70:7d:26:e0:a6:e5:2d:1d:
a8:fe:ac:e6:18:55:e0:d0:4c:8c:d6:ca:72:c6:df:35:f4:24:
77:fe:8a:6f:f9:f6:ba:de:99:2f:80:d1:29:53:2e:62:18:74:
34:89:86:f3:f7:02:e6:ac:a5:39:9e:b2:e7:d8:38:ba:55:c0:
f2:0b:ce:6c:eb:53:47:17:3a:1e:0e:d3:55:f5:9d:d0:0f:c4:
e1:4c:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:01 2026 by rpki-client