
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier: A09byVyWg/HjLK7RHy50XsSBtsjZV1GZXRdRlmoEK7E=
Subject key identifier: 41:CD:BF:FE:1C:83:99:B3:7A:F8:CA:33:78:7D:F4:D2:C6:69:09:3D
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number: 0224
Signing time: Sun 01 Mar 2026 03:33:10 +0000
Manifest this update: Sun 01 Mar 2026 03:33:09 +0000
Manifest next update: Sun 08 Mar 2026 03:33:09 +0000
Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: 2uERczNTLfa3biYuuBsHqJQzwTxIjgqClPaJyBZsQpc=)
2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 0YOpcsYYdv+KR+NOYyYJwG25cnZwoM8nL02wcBCu2pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Validity
Not Before: Mar 1 03:33:09 2026 GMT
Not After : Mar 8 03:33:09 2026 GMT
Subject: CN=69a3b376-37d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:e4:f6:9c:3c:5c:b7:c3:e0:8e:3d:a1:38:
db:a2:37:53:be:3d:d7:c0:4b:f4:94:cd:91:91:b7:
04:cc:f0:78:dd:04:e9:29:3c:ca:ca:2e:56:1b:2a:
66:f0:c5:27:40:c8:61:7a:f3:a8:4c:d4:d2:76:6d:
fa:75:a6:c2:cb:c9:c1:e4:45:4f:b2:bd:85:be:cb:
5f:a7:a0:1c:20:91:02:df:60:61:8d:d7:c6:ae:c8:
a2:3a:c3:fa:99:f8:c7:9c:af:54:99:e6:ab:8b:1b:
70:15:d9:d2:ce:14:36:5c:e2:d5:be:66:99:9a:e5:
aa:63:d9:98:d8:a2:2b:b2:46:03:69:03:fd:75:a4:
ad:44:4a:1f:37:65:47:e2:ef:ab:22:84:2c:ac:fb:
31:c8:5f:28:d7:17:7b:b3:71:a2:4d:96:f2:d0:43:
36:bb:2a:fa:ff:10:13:59:e4:0c:fc:57:c3:63:b8:
b8:05:f0:0a:9a:1c:ca:12:b5:f8:6d:32:d5:42:98:
fe:ff:86:7e:fd:87:a7:60:d2:35:73:f6:01:47:7c:
3f:12:57:61:4c:c3:1c:c0:25:c7:95:4d:56:88:47:
00:c6:dc:80:d6:03:e3:7e:96:0c:c4:4c:d5:ef:df:
43:a1:4b:67:a7:78:f5:c1:d5:82:69:d3:f5:85:53:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:BF:FE:1C:83:99:B3:7A:F8:CA:33:78:7D:F4:D2:C6:69:09:3D
X509v3 Authority Key Identifier:
keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:15:63:ad:94:0a:6a:57:c8:b3:d4:11:e1:fd:54:49:49:
99:af:3f:2d:a5:ee:53:95:a4:03:6e:1f:15:02:2b:ca:78:41:
87:f9:6f:be:e2:90:30:bc:a1:4d:b5:52:96:a2:60:f6:d9:ee:
0c:20:62:c6:c5:22:43:e4:e6:44:6e:46:40:61:9d:d8:e2:4e:
26:94:04:db:cd:09:b8:63:ec:a0:07:fa:8a:04:49:36:ae:4a:
0c:21:9a:40:8e:f8:aa:58:70:6b:92:5e:28:ba:39:24:c3:da:
9f:3c:38:5c:d8:07:e9:11:06:fe:6f:cb:85:d8:8d:a9:e8:86:
d0:ba:20:45:e9:e5:ee:10:cc:f2:d0:9f:34:f7:eb:b8:d1:6a:
a7:e7:5b:6a:b8:92:96:34:32:2e:9f:4d:41:8d:e8:a0:d9:24:
71:17:2e:1c:ec:78:be:fd:56:93:a9:b5:5b:20:e4:bb:62:94:
74:94:ed:9b:fa:e4:61:26:45:de:08:0d:bd:50:fe:d3:bc:85:
dc:6a:99:3c:c5:b4:ed:14:08:0a:d8:a5:54:f9:60:a1:50:a9:
39:6c:dc:8d:cf:b0:bd:c5:c3:79:e7:38:fa:3e:05:83:fa:63:
b9:78:70:19:74:fd:66:ac:2e:a7:9e:b1:34:ed:1f:db:8a:e5:
ae:8b:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:53 2026 by rpki-client