
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier: SdAiVQlomhvfnCbeSZWr1CV4Kna78BlF/Q8nQFrQFOY=
Subject key identifier: 59:9E:B1:AC:5D:D1:20:BB:74:B7:D8:50:A3:E6:F9:BF:D3:87:99:C8
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number: AB
Signing time: Fri 17 Apr 2026 06:52:26 +0000
Manifest this update: Fri 17 Apr 2026 06:52:25 +0000
Manifest next update: Fri 24 Apr 2026 06:52:25 +0000
Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: bNValuaHDjOoxv5dvoOHaGD3HqG3Y+/9IUHN+mMv1dQ=)
2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: hj4r5L43295Kpx1PmuExGfY8XpjMW5ANjI0juKbUWcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Validity
Not Before: Apr 17 06:52:25 2026 GMT
Not After : Apr 24 06:52:25 2026 GMT
Subject: CN=69e1d8aa-56b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:7d:72:7b:49:d3:09:e6:2f:89:97:f7:a5:
82:0f:a2:6c:82:17:54:2d:8f:c9:53:d8:ec:6a:01:
4b:6f:b0:71:82:24:6a:76:4b:3e:6f:7c:77:67:ee:
ef:7e:9a:72:3d:9d:31:91:a1:25:ba:95:c6:f0:48:
a9:a0:df:d3:1d:8a:f2:b1:a5:b3:36:b6:96:32:4d:
c1:b2:d7:93:c4:6b:b5:31:21:73:5a:26:fe:61:c5:
6a:0f:f7:41:38:d6:8a:7c:31:3a:8a:32:e7:8a:6f:
c4:02:14:40:a8:06:ec:07:8e:8b:8d:d8:c1:5e:fc:
f9:35:a8:07:ea:9d:a0:7c:70:f5:d0:06:08:71:80:
b3:c0:b0:0f:5a:c1:e7:a0:ea:ee:a9:78:50:1d:9d:
18:d8:e7:04:f1:2f:4a:97:dc:66:79:a0:70:77:bd:
29:ea:41:f8:e8:91:7a:ef:54:84:29:ae:1c:c5:9c:
02:2c:6b:c5:9f:ab:f3:a6:de:23:fc:8b:4d:6b:4d:
ab:3d:62:ae:ba:3f:f2:4b:53:40:20:a2:f2:f4:f3:
ab:4f:37:d8:a7:ba:b8:3f:e1:f2:cd:bd:48:d9:ff:
9c:81:3c:09:2a:f7:c8:ba:89:b3:43:32:32:74:3b:
72:75:a1:c1:4b:63:07:b2:e5:6b:a5:4c:b3:36:5a:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:B1:AC:5D:D1:20:BB:74:B7:D8:50:A3:E6:F9:BF:D3:87:99:C8
X509v3 Authority Key Identifier:
keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3b:19:90:b7:1f:d9:5a:43:b5:b8:99:23:46:a9:1f:83:8d:
56:0d:2c:36:aa:38:a2:f6:be:40:37:2a:99:73:9e:cf:a4:eb:
45:9c:99:32:ae:be:8a:f8:3a:96:27:9c:81:cd:60:92:f9:53:
c1:a0:93:d4:58:b9:54:d8:6c:a3:7b:c7:f8:d7:9c:76:03:2c:
0f:8f:79:18:d8:b0:f5:37:c0:2b:13:9e:3b:6b:25:10:eb:69:
bd:77:77:b9:ad:15:64:66:6f:ee:7a:58:8e:51:18:6e:e9:98:
6b:64:af:f2:98:b8:cd:6c:ef:5d:f4:1c:7a:27:f7:53:fb:4e:
86:31:cd:00:1f:50:af:11:13:23:16:8f:6b:06:79:fa:4d:6b:
ab:d5:1e:41:aa:37:3a:e3:ab:52:fd:6f:7e:54:a2:e8:af:20:
bc:52:06:fc:9e:dc:9d:7a:c9:f4:33:0c:98:2f:6f:da:e3:6f:
1d:a4:58:2e:6b:26:bf:b6:20:e8:b3:5d:39:b4:ad:2c:9f:55:
fa:b4:e3:f4:03:e0:84:bd:f3:68:36:29:d5:dd:5e:a6:51:fa:
77:43:4d:a0:6a:b5:cb:df:c5:a6:af:fb:d9:82:67:94:b7:dc:
79:e6:56:61:42:fc:94:83:6b:21:0f:04:51:4e:5c:0d:dc:9c:
7d:27:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:57 2026 by rpki-client