
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier: t0KVLlyaLylmzcA+fbTt59/1vJzDe+9dy9MauquHd28=
Subject key identifier: B5:86:6C:F2:E1:D4:C9:83:33:7D:13:D2:20:16:C7:85:EB:72:42:00
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 05:57:27 +0000
Manifest this update: Fri 17 Apr 2026 05:57:26 +0000
Manifest next update: Fri 24 Apr 2026 05:57:26 +0000
Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: pW30AaKmSN8Hd6lDEUbczdSeRkzzVmZ8nD0rSY5gjEc=)
2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: cA4EpqB36n167Q1HdD3K3flvs1ql/TPMQ9D+AoLp6ME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Validity
Not Before: Apr 17 05:57:26 2026 GMT
Not After : Apr 24 05:57:26 2026 GMT
Subject: CN=69e1cbc6-4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:95:70:fb:e8:a5:b6:6a:43:73:e7:4f:85:
e0:19:23:d0:26:6a:01:df:0b:9b:93:52:1e:d2:5a:
57:d9:d7:90:78:50:91:8b:c9:14:13:91:ab:f4:91:
5a:34:4c:9c:c7:07:ae:1a:c8:12:a0:37:f0:56:5c:
56:c4:ec:a1:4b:54:00:ce:09:3d:53:56:2f:4f:aa:
07:b2:16:b3:43:88:3f:f3:47:68:aa:cf:44:39:1a:
99:a9:1f:90:d3:23:67:5f:63:28:19:b9:18:7f:f3:
09:e5:c8:ca:f0:2a:75:a3:a2:e4:bb:e5:9b:88:d0:
1c:42:b0:2c:f5:93:f1:ad:2a:4d:81:79:2c:ad:39:
a6:72:b3:2d:30:15:dc:02:37:1d:e4:9e:e3:3a:f8:
e7:09:8c:d8:03:16:31:b7:ff:e3:ae:27:25:ba:78:
b6:86:a0:b9:cb:36:28:6b:89:cd:f8:f8:bc:4c:63:
2b:82:7a:b1:87:cf:27:c4:64:2a:bd:35:56:94:7b:
81:31:76:fe:26:f9:72:bc:ca:2b:48:2f:51:4d:4b:
7d:c0:ad:41:0c:66:ad:43:88:7b:c8:04:5f:f7:fb:
15:11:cc:21:55:5a:1a:e5:47:a9:f2:b1:60:13:43:
67:99:52:c8:5a:a3:43:5d:b7:6f:57:f7:dd:25:0f:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:6C:F2:E1:D4:C9:83:33:7D:13:D2:20:16:C7:85:EB:72:42:00
X509v3 Authority Key Identifier:
keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:42:30:71:4d:e8:e6:03:a4:b4:af:e4:9e:3a:da:dc:cc:df:
70:de:6c:5d:be:0f:fe:19:c2:cf:03:a4:a8:fb:92:c3:06:91:
51:67:2f:ff:18:47:c6:b7:d2:64:cf:4e:06:ad:cf:0f:49:8a:
b5:8a:02:77:31:96:f0:dc:20:eb:28:e3:22:8a:1c:41:0d:b9:
2a:e8:98:74:33:35:c1:ca:ac:39:7a:ad:eb:98:47:73:21:38:
45:ab:3d:79:70:61:a1:e4:78:ae:4e:f0:b1:9d:3b:f7:54:e4:
64:22:09:12:73:c8:f4:f3:96:19:0f:a1:91:3b:32:1c:6f:04:
e5:70:64:ae:b3:fc:c7:15:3e:53:43:fe:2c:bc:c0:88:35:82:
f8:ca:04:a1:90:e9:82:d3:fa:5e:f4:d7:57:fa:73:5f:ea:aa:
56:70:43:d4:20:dc:ab:b2:fc:62:aa:6a:13:a5:aa:4e:14:44:
05:bd:83:fd:23:e5:b3:f5:4c:ce:c6:65:aa:80:83:a7:53:4f:
3b:71:0c:f8:ed:25:d9:43:ac:55:26:f8:97:15:94:03:85:b0:
33:9d:d1:44:d2:d7:b0:2f:6d:e7:db:98:77:56:fa:0e:df:75:
5d:36:92:8d:62:d9:45:d8:db:ad:56:50:43:bd:d1:c7:d8:a9:
4c:79:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:05 2026 by rpki-client