
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
File: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft (raw, json)
Hash identifier: m3YlODyWG4+sSb0Ocy1DvTVUjEgQl1oT27hIaveAgBg=
Subject key identifier: DD:8B:29:3D:67:5A:35:2F:5A:D5:1B:F8:12:8F:EB:81:5D:43:62:01
Authority key identifier: F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
Certificate issuer: /CN=A9131667/serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
Manifest number: 1A
Signing time: Thu 11 Jun 2026 11:18:24 +0000
Manifest this update: Thu 11 Jun 2026 11:18:24 +0000
Manifest next update: Thu 18 Jun 2026 11:18:24 +0000
Files and hashes: 1: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl (hash: EKySh0r3woz9tWsCw4hnUPslpRrfL+hXjm3K3VpVzPE=)
2: AE9C9EAC42AC11F1AC02065EBB833773.roa (hash: mM/NCo6m1Teegi+0GRkuaDLw0QJco4DLwfYN12WL/V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Validity
Not Before: Jun 11 11:18:24 2026 GMT
Not After : Jun 18 11:18:24 2026 GMT
Subject: CN=6a2a9980-cbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:f3:18:53:6a:64:a4:dc:4a:78:d6:c7:f2:
05:d5:aa:b0:6d:c2:5a:07:5b:fd:20:5c:14:c6:ac:
fc:4e:ef:46:35:c9:6a:fa:a6:2f:e4:de:1a:67:65:
db:7e:9f:ed:b5:83:e3:fc:8f:19:99:a9:90:f2:e4:
0f:07:35:ff:5c:ba:7b:7e:10:39:f2:16:49:fe:97:
f4:19:7d:c9:fd:b9:f1:07:c1:e8:18:65:3e:70:86:
46:b0:26:9e:a0:96:94:c7:51:ed:d8:17:7e:cb:ad:
45:ef:46:b0:9b:4d:87:7f:1c:fc:83:5b:e9:bf:51:
2e:72:ff:6d:65:93:79:ac:eb:d3:0d:9d:cc:ed:ad:
0a:f0:ef:e5:84:0b:90:f7:82:5c:dc:f4:ac:f7:8f:
33:23:53:51:a3:a7:8c:07:80:79:e6:8e:11:a1:31:
1d:fb:31:ed:62:90:bc:fa:5d:f1:f0:3e:69:87:0a:
ee:2b:e7:b4:14:99:70:fc:86:ee:71:37:40:25:65:
21:30:56:2c:b2:f2:e9:79:c1:ea:80:4e:a8:1a:b4:
42:03:0c:53:5b:e2:8d:79:ab:05:c6:e2:57:cc:ed:
21:ee:8d:ba:67:07:87:fa:da:94:4e:67:d2:e6:f9:
ab:d6:cc:e7:c2:82:39:3e:4a:08:a1:27:0a:d1:f1:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:29:3D:67:5A:35:2F:5A:D5:1B:F8:12:8F:EB:81:5D:43:62:01
X509v3 Authority Key Identifier:
keyid:F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:5a:f0:08:c1:a7:c3:cc:96:7b:3d:ab:4f:91:3e:97:d9:
35:56:a2:b1:5c:f7:8a:98:84:04:f6:44:49:81:8e:a7:53:b0:
36:5d:5b:be:d3:35:27:ab:3b:99:3e:ad:5d:84:36:2f:35:ca:
75:17:34:a2:7a:95:b5:15:39:2d:0b:03:67:52:47:53:da:e4:
2c:61:52:32:30:f8:45:f5:cf:d1:95:3e:bd:9f:c3:9d:bb:9b:
6e:9d:88:ab:00:1b:ac:d1:cd:2e:85:c0:a4:d8:e0:ac:9f:3e:
60:79:03:27:b9:7e:00:8a:f8:21:63:5b:b1:0a:64:c0:b3:c2:
89:db:c2:f0:f3:c4:5a:70:8a:03:bf:ea:aa:50:ce:04:72:48:
58:d6:06:66:7b:e1:12:2c:b9:d2:78:4b:3c:22:5e:ad:b1:e2:
15:79:45:58:9e:aa:4a:59:d1:43:e0:45:81:c8:e1:e9:1f:b7:
0f:66:81:27:6d:50:a8:5e:5f:b2:35:61:81:9f:08:6e:2b:51:
42:1d:5c:57:51:e4:35:02:03:b3:b8:48:e4:8f:9c:fc:13:af:
16:9c:d1:b1:99:50:f1:8f:d6:44:9d:07:52:2b:6f:e7:3b:2c:
6d:6c:75:88:a8:44:90:dc:c0:23:a0:ab:ea:91:30:51:ad:6b:
78:a0:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:07 2026 by rpki-client