
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier: 2V1S2pREUhCwDGPR0+XN3hxfN83+fjJUKi2HDK0nnlA=
Subject key identifier: E3:82:83:2E:D3:5E:B1:D0:8C:BF:07:00:72:25:91:0C:F7:75:06:43
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial: 2C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number: 2C4D
Signing time: Thu 16 Apr 2026 15:30:11 +0000
Manifest this update: Thu 16 Apr 2026 15:30:10 +0000
Manifest next update: Thu 23 Apr 2026 15:30:10 +0000
Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: WjsO/auUOkKu25ETHUrAhoRMtXnTz2jFiY7Nsg551VI=)
2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: hL/ySclBGJtSUV6puP2byNzzoVBcmJfiT5H7TGRB+KQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11359 (0x2c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Validity
Not Before: Apr 16 15:30:10 2026 GMT
Not After : Apr 23 15:30:10 2026 GMT
Subject: CN=69e10083-20a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:a1:bb:26:b4:c6:30:b6:7a:18:37:03:5b:
ad:c1:1b:87:c7:03:e7:89:3a:4d:e0:a5:1a:4c:0c:
e4:74:92:f9:4d:49:2c:68:c9:bc:7a:23:b0:6b:23:
14:4d:29:cd:ad:13:cc:ba:42:06:a0:2a:53:f5:8d:
17:90:6a:58:56:4a:0d:b9:a4:00:a3:c8:a1:03:cc:
14:e3:58:60:ce:a0:2f:bc:b4:a7:7a:2e:dc:40:aa:
37:8c:c5:fa:fa:d8:36:3c:01:82:d0:70:e0:f0:b3:
a9:ae:15:9b:06:38:44:9d:22:7e:f3:3c:1a:93:7e:
8b:52:2d:44:fd:a7:d2:48:5f:45:e4:95:91:fd:ff:
8c:5a:1f:1b:83:ca:c2:d7:5b:dd:e0:c0:30:d4:07:
7a:dd:4c:42:fd:a5:7f:12:5d:61:24:11:29:7a:fb:
b0:13:ba:22:6d:03:fd:6c:3d:48:e4:ff:f2:cc:21:
75:bd:a0:ca:68:19:dd:b1:f3:01:98:5f:65:46:58:
92:5b:fb:c2:99:cd:64:95:73:63:31:6c:e5:e5:90:
68:b1:54:36:ea:d6:77:1e:c3:0e:2b:0a:51:4a:a4:
a1:0b:70:0e:0f:94:16:f2:fc:f1:2b:ce:7d:c1:73:
4d:52:94:83:fd:84:df:02:20:f1:db:82:6f:24:00:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:83:2E:D3:5E:B1:D0:8C:BF:07:00:72:25:91:0C:F7:75:06:43
X509v3 Authority Key Identifier:
keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:89:e7:2e:86:a9:a9:59:8f:7a:07:6c:fe:d2:6f:28:1b:38:
92:12:cb:4b:03:a5:fe:56:b3:d1:d4:48:7d:71:41:f6:89:d2:
0e:b1:2b:48:38:6f:af:44:97:32:41:90:2c:4b:37:b7:46:cb:
08:1c:17:e4:94:b3:c8:06:58:4f:04:bb:d8:53:2a:7f:5f:9e:
de:f2:4b:9d:51:53:46:93:eb:60:03:fc:a9:75:44:e1:a5:f1:
91:0a:f3:64:95:f5:db:66:7e:20:61:f4:ee:d6:93:41:f1:3a:
25:fc:1f:64:f1:90:41:54:04:b0:bc:df:be:b9:6c:73:c3:21:
7f:d4:90:82:d0:2d:d3:b1:41:a3:cd:03:40:a2:4c:b3:2c:fa:
30:db:99:0d:ed:cd:98:c4:08:f5:0c:5f:ae:18:a0:b8:b2:81:
38:41:fb:5a:33:b0:33:75:44:5a:eb:23:6f:7b:ee:52:32:33:
c7:f0:d5:05:8f:99:10:5a:c1:52:fe:48:f6:2c:f9:5d:ae:fa:
bf:68:c6:aa:28:08:d5:48:39:71:9d:74:e9:4b:71:79:95:15:
36:2c:b3:e9:ff:43:2c:35:7c:33:49:5f:0b:5d:18:0c:4f:c4:
9e:61:8f:03:f7:2a:3d:d0:65:ca:cb:1c:4d:42:a9:a6:c5:a6:
fb:3b:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:11 2026 by rpki-client