
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
File: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft (raw, json)
Hash identifier: afUFSC4vr/kMfWQWbd/XkvzTYl/rVi7jOO2JwZzumMk=
Subject key identifier: 2A:1E:E2:26:F8:4E:D2:AD:CC:2D:B6:4D:66:BA:1A:F0:8D:88:DD:08
Authority key identifier: 0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
Certificate issuer: /CN=A912C2EB/serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
Manifest number: 0F
Signing time: Mon 27 Jul 2026 11:29:05 +0000
Manifest this update: Mon 27 Jul 2026 11:29:04 +0000
Manifest next update: Mon 03 Aug 2026 11:29:04 +0000
Files and hashes: 1: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl (hash: aKUW9BxP6CGmbOh9d41JKzjUAvK+efkLZisC09FoZx8=)
2: E64DF1C2738811F1BF8D4D716EA30FBC.roa (hash: ta94cq6P3Y9AqMQ72/iTm11UyiyepXDOi/daYTMVMwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2EB, serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Validity
Not Before: Jul 27 11:29:04 2026 GMT
Not After : Aug 3 11:29:04 2026 GMT
Subject: CN=6a674101-7af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:de:e3:e4:38:f2:3e:20:d2:5d:e7:a9:78:
f7:ac:41:ce:5b:30:59:81:d6:e8:14:09:38:24:30:
5d:6e:aa:11:cd:57:e3:f8:55:69:b4:5c:62:26:ae:
43:72:0f:b6:86:e6:03:05:9e:12:68:49:13:2a:0b:
74:51:b8:50:78:cf:70:75:f7:4e:e9:40:cb:27:f8:
9a:c0:57:1e:c9:99:c4:e4:b5:fa:c1:4c:eb:98:83:
bf:1b:17:f0:c1:97:de:1e:00:5f:07:80:af:17:b7:
17:a4:90:7f:d7:b3:2c:f1:d5:c3:c7:21:5b:95:66:
b5:eb:b3:e3:d0:bd:6e:8b:d2:7b:47:68:67:02:11:
fe:84:1e:3c:05:d7:d3:76:fe:f6:e6:5d:1d:c3:c1:
c1:46:db:57:73:61:94:1f:c4:1e:77:50:f7:5d:af:
f9:b3:8b:34:92:42:eb:c5:92:08:84:be:ec:0f:81:
ae:c6:98:09:1a:c8:93:ed:1b:bf:0c:bf:af:f6:4c:
81:d0:29:c4:3d:19:fe:37:15:0f:70:ed:2c:4a:20:
a9:5c:70:07:79:cc:01:d5:f5:6b:49:1a:f4:6c:1b:
fa:69:61:33:02:27:59:ba:72:49:81:95:7b:4c:d9:
a8:fa:b3:fa:1e:a1:27:7b:8a:14:92:58:12:22:45:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:E2:26:F8:4E:D2:AD:CC:2D:B6:4D:66:BA:1A:F0:8D:88:DD:08
X509v3 Authority Key Identifier:
keyid:0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:27:97:62:c8:7a:52:2b:6b:29:da:5e:7a:ad:6a:10:00:e8:
09:91:db:4d:fd:93:31:28:88:3f:b2:f5:58:9c:32:9f:8f:84:
4f:e5:45:30:7c:1c:ce:63:44:06:f5:ef:12:22:a1:63:62:13:
e1:14:76:72:8f:a1:a7:8b:ab:b6:59:3c:c1:b8:7a:57:ae:14:
21:22:58:fe:a2:99:1e:46:79:59:2f:d2:13:aa:a6:95:f7:71:
66:bc:cb:67:9d:e9:99:2f:53:3e:62:b5:c1:1d:b3:45:54:5f:
5d:ab:03:91:06:83:ee:b4:b1:7a:3e:63:fb:00:86:69:32:7d:
fa:b2:95:1e:69:7c:b5:ef:72:8e:94:22:54:24:2a:8a:fe:2d:
7a:9f:34:c0:fd:ba:70:3a:a6:89:a4:b7:0f:1f:3f:ac:bb:de:
c5:dd:53:69:de:c8:c7:84:6c:14:1a:05:95:7f:29:f9:95:92:
b3:06:4c:c3:ef:46:f0:2f:aa:21:60:4d:35:9a:ef:cf:49:78:
23:c4:45:46:a3:3e:41:52:6f:8c:7b:e3:e9:9c:b1:64:f6:14:
89:6e:1b:26:94:07:81:14:d4:d1:d4:13:5b:ce:f2:cd:d7:de:
20:ae:0f:73:bc:7c:66:3e:cc:3f:ab:7a:11:97:4e:24:d3:98:
1f:0b:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:54 2026 by rpki-client