
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: zT48h0YMEJx6ygYXfm15ftFH6j7GSQ2gth2TL5+Ko9I=
Subject key identifier: E1:7C:3B:3E:3F:B2:82:08:0A:94:8E:5A:7A:8C:D6:20:33:D9:20:CE
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 05:58:18 +0000
Manifest this update: Fri 17 Apr 2026 05:58:17 +0000
Manifest next update: Fri 24 Apr 2026 05:58:17 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: uFDVe6bwf6hgCFjH6pbLhCyf9zKSaSFoEmkcq3Q4hmc=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Apr 17 05:58:17 2026 GMT
Not After : Apr 24 05:58:17 2026 GMT
Subject: CN=69e1cbf9-3dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:a6:ff:72:ec:41:f9:85:70:b9:5a:6a:88:
fc:77:c6:95:58:2e:66:e6:f6:99:6d:8a:00:91:f6:
41:3b:14:39:4e:85:d0:b6:ec:5c:a5:71:30:1c:a4:
d7:10:c8:5c:4b:71:43:74:22:25:b1:aa:fd:c0:95:
99:f2:2b:a9:9a:9f:8e:38:a4:2c:e1:f1:52:e5:ac:
8d:1d:6d:eb:f5:d8:ae:28:18:5d:55:68:41:49:52:
5a:86:3b:d0:3a:26:69:47:4e:ae:bb:ec:46:5d:cc:
b2:ac:18:d3:83:fe:80:db:0c:8b:d1:25:d2:60:e2:
ce:87:12:3d:32:a9:4b:b8:13:bf:1d:23:b0:45:56:
0d:be:d8:d8:27:4c:86:a6:92:f1:ff:bf:4f:b8:52:
73:a8:08:fd:cb:13:fb:69:cd:a4:85:4c:ab:ec:89:
e8:01:9c:6b:9f:5b:65:f8:8c:39:7a:ab:78:0f:a9:
b1:a1:9a:c1:43:12:2c:b4:ef:bf:ef:f5:a6:62:61:
09:2e:4d:da:8d:1d:be:85:e0:b2:c0:e1:07:3a:7e:
51:e1:b3:e5:49:6e:2e:ae:bf:27:30:6c:f5:b8:07:
1a:41:37:4f:2f:d6:64:9d:2c:73:31:22:c3:ae:96:
1d:d3:03:8e:63:3d:bc:96:6d:cc:b6:23:32:62:34:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:3B:3E:3F:B2:82:08:0A:94:8E:5A:7A:8C:D6:20:33:D9:20:CE
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d4:52:18:18:ec:70:43:be:a7:40:5d:91:fd:30:e3:6b:cc:
83:1d:7b:ed:f7:06:24:1a:91:60:64:6d:fb:cf:82:4e:75:df:
9b:31:42:d9:b9:c1:7d:bd:95:f9:f8:e5:29:d5:65:08:34:40:
1a:af:36:89:cc:c2:12:a9:a5:97:2f:3b:e9:39:85:43:52:f8:
4a:2b:58:b0:be:17:69:a9:0b:11:4b:87:42:cd:80:6d:ce:0f:
6b:aa:18:d2:85:9d:25:15:19:11:31:86:2b:7a:98:ee:c1:bf:
94:40:9d:be:d6:78:f1:79:ce:64:c9:40:78:78:8f:91:cd:d0:
22:b8:9e:86:1c:e3:39:9c:6b:b5:d3:f2:0a:34:a1:a9:2f:fd:
96:1c:96:3c:d0:0d:44:78:11:dc:90:77:d0:7b:32:50:ac:55:
95:9d:0a:ee:82:85:f3:ed:7f:c8:16:00:24:f2:b8:66:09:3d:
91:ad:04:fb:23:cf:c2:6a:d0:ed:6c:ea:6c:7f:66:23:cb:a8:
00:ad:55:81:07:74:69:ef:93:e2:53:64:97:69:0f:15:c6:65:
ef:d8:15:9e:6a:ba:15:89:db:61:cd:f5:a8:81:fe:dd:e4:92:
da:7d:0d:71:5e:dd:8a:d4:9a:25:9d:db:97:91:b3:b4:cd:c1:
9a:59:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:37 2026 by rpki-client