
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json)
Hash identifier: qsHC2grrHDzfzbk52YlPixRHe68Vey+zJHoBJs9PbK0=
Subject key identifier: 9F:DB:8F:F0:2B:5C:EE:44:9F:2C:99:60:B8:30:31:22:F8:72:CC:67
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
Manifest number: 9C
Signing time: Sat 13 Jun 2026 07:25:15 +0000
Manifest this update: Sat 13 Jun 2026 07:25:15 +0000
Manifest next update: Sat 20 Jun 2026 07:25:15 +0000
Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: LPVIoCA51TO3KKbF0STRp4zVuzJ+VUki+aZ0tTtfn00=)
2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Validity
Not Before: Jun 13 07:25:15 2026 GMT
Not After : Jun 20 07:25:15 2026 GMT
Subject: CN=6a2d05db-07b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:cf:e0:83:10:51:a1:ba:1a:db:d8:96:cb:
fd:94:3d:43:86:da:e8:c2:5a:ea:c1:23:ce:60:1a:
31:19:39:0d:74:05:9b:3b:32:5a:4c:bc:69:74:ac:
03:c6:2f:5d:53:44:5c:3c:de:6e:da:dc:cc:18:c5:
19:e7:30:e4:ed:ec:76:28:b7:27:e9:78:82:e8:11:
fa:0f:3f:74:87:e1:cb:4f:c6:9a:9e:66:5d:6b:e8:
47:82:f9:f9:30:e4:83:a9:dd:9a:96:1c:5a:8f:79:
20:0f:dc:30:63:bf:35:34:fc:de:f8:d1:90:0a:06:
0f:03:7c:20:b7:dd:4d:03:f5:15:8f:20:7a:0f:62:
b0:67:7d:c1:6b:dd:6f:83:d3:b7:1b:1b:54:a8:a3:
39:a8:f9:f6:f3:3e:06:93:a1:12:9c:09:3c:38:a6:
61:ab:b4:81:3c:a2:ea:84:83:a6:2b:71:f2:77:00:
85:a5:ca:e6:ca:aa:c2:5a:9a:77:27:b9:0c:cb:ef:
bb:51:0d:36:4e:bb:70:2b:0a:91:84:ec:31:d5:a8:
62:eb:fe:a1:f6:93:e0:1e:b8:52:bb:f1:00:82:a7:
e8:67:aa:d4:af:7c:b4:4a:63:93:8d:8d:2b:e9:42:
c5:c0:d3:43:05:1e:bf:f7:c1:b8:2e:69:9c:0c:33:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:8F:F0:2B:5C:EE:44:9F:2C:99:60:B8:30:31:22:F8:72:CC:67
X509v3 Authority Key Identifier:
keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f7:41:51:54:8c:ce:2f:a6:5d:a8:fc:14:92:30:6d:00:d1:
5d:f2:32:71:f2:1d:e9:74:c7:aa:6c:43:66:7e:6f:c9:0a:d2:
c9:b4:45:95:ad:58:4f:92:b7:0d:f9:44:e2:61:7f:1a:cf:97:
89:14:19:94:e0:d3:07:e6:8d:89:ab:04:17:f4:de:38:35:b3:
3a:a6:3f:a8:76:ae:ce:73:eb:28:81:dd:a5:20:36:6e:86:de:
b4:4d:88:51:41:a7:30:f9:0a:71:ea:dd:85:16:22:c3:47:d6:
5a:57:e5:c4:ab:9e:e1:44:f5:90:2a:34:dc:20:66:75:53:b9:
a0:77:d9:c8:27:d9:1b:7c:c3:dc:ae:b2:ab:5f:69:4b:c7:17:
62:09:77:ec:3c:24:0a:8a:53:c6:78:24:88:ad:31:82:d4:f8:
41:40:0f:fc:f1:bc:64:ad:1b:d6:66:89:b2:a4:13:da:2f:d5:
da:17:65:59:60:ae:4a:83:56:c7:66:f8:4a:87:00:61:97:aa:
6b:2d:85:fe:70:37:17:e2:cc:59:e6:e4:7d:70:72:01:e8:34:
1c:b5:91:2b:36:89:4e:a0:0e:77:5c:f7:50:68:5b:b2:a0:2e:
c2:8b:ca:54:59:8c:79:0f:78:5c:db:f5:69:2d:58:1e:b6:ca:
f0:c2:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:11 2026 by rpki-client