
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier: KYcR3fJEqLPKEr7rYBCp78vPcAyvNi7XN12pv/91Uc8=
Subject key identifier: 7B:D9:3A:D9:70:65:2D:CA:45:9C:A4:8B:5C:9C:73:C4:6E:61:E5:C1
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number: 01C0
Signing time: Fri 17 Apr 2026 03:37:05 +0000
Manifest this update: Fri 17 Apr 2026 03:37:05 +0000
Manifest next update: Fri 24 Apr 2026 03:37:05 +0000
Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: gacORG1sCkw46t2d3AtgJrBcCW7YQBtvpZWHNpDUC3s=)
2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Validity
Not Before: Apr 17 03:37:05 2026 GMT
Not After : Apr 24 03:37:05 2026 GMT
Subject: CN=69e1aae1-1ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:99:fd:91:61:6b:61:2d:c3:02:5c:46:84:
fa:14:d3:41:aa:d5:5b:3a:91:6a:45:1a:3c:6e:e0:
78:af:1a:eb:2a:45:b1:a0:41:17:45:9c:00:f9:83:
18:21:0b:0d:51:3a:80:01:7a:4b:a4:ca:a7:d7:ce:
92:e2:8b:2c:95:55:50:d2:32:22:99:8e:8d:fb:ef:
bb:57:6a:b4:25:bd:a0:50:4e:e5:32:91:83:08:27:
65:8c:e5:a5:2e:8d:f3:34:14:08:50:b7:c7:fd:8d:
d2:df:9b:a1:1b:c9:ee:db:57:c1:8e:c8:3b:d9:73:
fd:70:4b:73:f5:0b:f8:fb:54:1a:9f:01:6f:c4:6a:
1f:a1:89:d3:79:69:89:6a:fc:f3:84:78:5a:50:eb:
a2:13:f1:6e:9d:ae:ad:e6:a9:62:45:8a:44:d6:b2:
1d:02:60:04:a0:d7:75:23:40:52:4f:3a:3a:49:b0:
99:5f:90:b9:3b:d6:c9:55:d1:ad:09:4b:44:b8:d9:
d4:0e:be:e7:29:d0:5a:42:d4:96:c7:18:a5:b2:40:
24:f4:bd:15:12:4a:ec:2b:42:ce:01:a6:b4:74:79:
a7:30:b7:17:44:8e:c6:1b:24:18:f5:e1:13:a1:33:
10:d7:00:26:97:7f:4e:ea:0a:e2:b8:10:07:72:0c:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:3A:D9:70:65:2D:CA:45:9C:A4:8B:5C:9C:73:C4:6E:61:E5:C1
X509v3 Authority Key Identifier:
keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:48:9c:45:e9:5d:53:39:18:c5:22:ea:31:08:bf:b8:75:
b1:31:8d:f8:b6:41:3f:3e:0d:be:ec:b0:fc:02:bf:f8:02:0b:
36:dc:e4:4d:b4:a8:59:70:85:82:22:2a:6f:be:80:e7:3d:c4:
94:8f:25:1d:a2:49:8f:a1:62:47:7a:22:c5:2f:02:a8:e2:0f:
25:fa:01:c3:84:8a:c3:d6:81:90:9e:14:af:c1:c3:13:96:01:
7f:c1:ea:d2:0e:56:fa:37:88:b4:32:f4:85:66:3c:70:af:d7:
b9:d7:a5:34:4f:90:f1:f7:57:1a:96:94:02:00:32:dd:19:d2:
87:b5:c2:93:77:d4:b0:03:57:cb:36:33:a2:34:b7:31:84:b6:
67:42:63:e1:9f:9f:17:9a:88:34:91:13:5f:1a:8b:3f:76:c4:
c7:8c:8a:df:bc:75:87:b3:13:07:8d:11:ad:98:a5:2c:68:9c:
36:92:b0:6f:a9:ac:6e:92:e0:ab:97:56:7e:86:54:1f:1f:74:
d6:3c:ef:12:d2:28:ba:00:11:5f:67:85:29:31:24:05:8f:75:
2c:bb:36:f3:5b:ea:72:81:78:4f:35:65:42:07:4b:90:a0:9d:
66:a7:6f:74:7d:0c:d8:6f:b2:d1:bd:8a:06:7c:a6:a2:a6:d2:
69:45:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:45 2026 by rpki-client