
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier: HFU0igo1dqZkhbFrKFbUt2XJA5Fy+SEVM5KNWSitFlM=
Subject key identifier: FF:38:59:B2:01:DF:6B:25:33:AB:EA:37:E4:8E:A6:DF:C1:87:B4:3F
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial: 11BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number: 11AF
Signing time: Sat 18 Apr 2026 17:06:24 +0000
Manifest this update: Sat 18 Apr 2026 17:06:23 +0000
Manifest next update: Sat 25 Apr 2026 17:06:23 +0000
Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: ee8HME/6mmWs3V7jW3BZ7cnCaKJ77auLq0g1t5XO5zU=)
2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: STeyXyMTSYyvRcahtnut8o6/l8sNSI++3Wnn1BDQDwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4539 (0x11bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Validity
Not Before: Apr 18 17:06:23 2026 GMT
Not After : Apr 25 17:06:23 2026 GMT
Subject: CN=69e3ba10-86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:46:34:85:d9:de:ed:23:4d:26:e8:b2:23:
d3:66:8c:ac:28:5b:ce:1d:b4:0b:67:9e:ad:19:40:
77:83:31:e9:4e:3f:e4:89:50:22:28:f8:28:40:49:
ed:ec:7b:c4:48:a5:c3:9c:7f:65:45:fc:6a:ec:e8:
fc:59:72:5a:68:70:d7:9b:00:da:a4:70:28:cd:e0:
24:c9:24:43:7f:32:cc:33:79:0a:51:cd:33:d4:75:
5d:5f:4d:d7:f5:c3:50:4a:7e:90:61:ab:63:d6:73:
1e:21:69:ff:d8:7a:9a:62:d1:d2:21:1b:43:93:9a:
e6:c0:bc:47:b7:d2:7f:79:90:ba:82:67:3f:5f:7f:
52:a9:ab:b8:93:63:59:02:a4:32:42:8d:ab:b0:6b:
42:f1:87:6e:0b:24:a3:10:0a:43:62:14:4e:72:2d:
ad:74:b3:75:fe:44:be:87:2e:be:3d:68:53:df:c9:
37:b1:b9:c5:91:47:b6:b8:8b:8f:68:50:ef:17:4d:
d2:b5:1b:93:50:5c:67:f2:f5:9e:fc:47:dd:e0:c8:
5c:e0:5a:d7:9b:f4:71:25:a2:2b:95:b9:57:b7:2b:
ee:f9:1c:35:6f:bc:14:0e:ba:d8:94:e4:9a:dd:f7:
0e:5e:91:b5:40:04:0a:92:75:3a:b2:19:54:19:5a:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:59:B2:01:DF:6B:25:33:AB:EA:37:E4:8E:A6:DF:C1:87:B4:3F
X509v3 Authority Key Identifier:
keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:82:89:60:09:67:ad:76:22:1a:b6:31:94:41:3c:a5:a1:
29:66:a1:71:0c:44:18:93:c2:8c:b3:c2:84:63:78:4e:21:07:
91:f4:de:cc:00:5e:7c:13:ab:eb:aa:21:e5:cf:17:df:c5:6a:
11:a1:ac:67:9a:f5:8b:6c:13:79:0e:07:61:42:14:ea:8d:2e:
9a:51:fd:9f:b2:4b:d3:97:90:51:d3:42:b8:34:42:f8:06:c5:
9a:29:1e:53:b2:bc:ec:57:62:da:7c:33:b7:7a:39:16:4c:c1:
7d:57:33:d6:f3:20:37:3a:28:cd:dc:aa:d7:52:87:af:f2:7b:
a5:80:30:6c:81:32:5e:4b:15:e2:5c:b8:4f:a9:0c:42:bd:4c:
aa:b4:2f:f1:32:00:c6:e8:9f:3a:5d:68:55:14:0c:67:2e:f8:
3c:02:8f:93:c9:f6:3c:6a:f5:11:cb:ac:df:3b:64:ee:85:8c:
ca:0e:72:2b:79:02:bb:98:a1:81:cc:92:6c:f5:f9:43:b7:95:
c1:2c:1d:9e:17:62:27:d9:e4:7d:37:40:3d:43:68:b4:2e:46:
7a:8e:7c:36:18:fa:96:61:29:5b:08:64:8c:bc:29:55:42:a0:
32:c5:6c:4e:28:55:b5:ad:68:b0:ba:67:3a:86:fd:51:b8:15:
8e:4a:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:14 2026 by rpki-client