
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json)
Hash identifier: WUDe+j2+ixTRtiz485zelBPDiHk3acUDTa4RbGUI1hg=
Subject key identifier: 19:9E:CD:F4:8F:98:9D:54:84:A9:C7:BB:0A:81:3E:9D:A2:DF:EB:E4
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial: 033A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
Manifest number: 0330
Signing time: Fri 17 Apr 2026 00:57:07 +0000
Manifest this update: Fri 17 Apr 2026 00:57:06 +0000
Manifest next update: Fri 24 Apr 2026 00:57:06 +0000
Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: S0DNVXY6QG/7VoTs+XXVhbvl3zP8ZmPjKX/K2MhGi68=)
2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: te2pLoJZYO3JYrW3CAq/cTYGshKCIgPSrs/rQNrttpI=)
3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: zJhTBwWvG8hmDhtzVqHYpoi7kDNMPWyue7YoZZ3MSOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Validity
Not Before: Apr 17 00:57:06 2026 GMT
Not After : Apr 24 00:57:06 2026 GMT
Subject: CN=69e18563-6eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:54:38:c3:87:fe:0f:05:61:35:69:d2:57:
b5:ab:2e:65:a2:6a:a5:2d:f6:a4:76:4f:eb:1c:e0:
78:29:ae:bc:b5:71:5f:d1:21:8e:f9:4d:93:94:8e:
cf:19:37:96:82:ad:86:40:d7:1f:33:0e:d4:c1:f0:
a0:46:3a:55:b5:de:64:5f:68:99:f8:7e:b5:7d:3d:
de:f7:ad:90:ca:6d:90:2a:19:c4:3a:6d:a3:f0:0b:
c3:6f:b3:83:df:9c:98:ac:39:2e:09:f3:a0:52:f6:
e6:19:38:9e:6f:0f:65:3a:92:da:d9:a6:20:a7:35:
bd:5d:7b:13:99:3d:82:e1:b5:42:2d:7e:7c:95:5c:
20:70:93:8d:7e:52:60:d0:5a:55:2f:bc:7e:a1:6c:
4b:29:c8:4a:8e:2d:27:63:71:3f:ee:68:63:2f:ab:
47:61:57:64:44:f0:f9:73:fe:18:84:0f:f9:d6:5a:
99:74:fc:ed:c3:c3:96:44:ae:96:32:d9:d9:92:05:
ff:54:93:cb:6d:80:ae:46:41:12:d9:2e:05:ac:83:
52:4f:8c:3e:7f:76:ea:73:b2:ab:af:67:99:df:14:
9e:e9:3a:77:3d:65:62:64:01:42:f8:f1:73:17:77:
bd:b2:2f:c2:a1:61:18:e4:86:43:26:52:32:ca:0d:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:CD:F4:8F:98:9D:54:84:A9:C7:BB:0A:81:3E:9D:A2:DF:EB:E4
X509v3 Authority Key Identifier:
keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ef:0f:1c:fb:ef:3f:04:6c:ec:25:64:be:df:fa:be:40:45:
8b:2f:2b:32:00:e2:b8:fa:b2:0f:10:41:dc:13:ee:0d:04:28:
e9:7d:48:e5:9e:f9:87:53:15:50:a9:35:eb:91:f4:60:d3:46:
fe:ab:23:f0:9c:ee:a4:78:a7:9d:3d:53:a2:cb:4e:cd:40:8c:
28:39:41:18:cb:4c:92:8b:5d:c4:c6:25:81:9f:5a:a0:ab:5b:
f6:db:33:df:48:0c:f0:b0:be:88:2c:ba:62:26:f3:f3:9c:c3:
0f:e6:79:f1:2b:42:42:cc:09:94:35:f0:48:e4:fc:13:38:56:
5b:8a:20:58:06:4b:93:7c:07:4e:c7:52:fc:1c:30:58:80:90:
e7:56:d7:33:bb:39:fa:a9:44:36:a4:28:7e:d7:43:35:c5:14:
23:d1:c9:3f:ae:dc:71:23:b3:a1:64:06:d7:fd:93:04:f3:26:
c8:d6:ad:55:74:de:1e:5d:d5:5f:7e:ec:02:3d:f9:bc:64:6f:
a3:fd:3f:af:8e:55:72:65:3f:36:a7:13:3d:43:3c:c9:2e:2a:
29:27:ca:60:2c:07:05:b7:e1:5c:59:bf:29:d8:9a:62:7c:4d:
bd:27:d5:45:37:2b:36:48:84:d9:91:c7:db:a3:23:2c:d0:3f:
50:a7:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:37:58 2026 by rpki-client