
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json)
Hash identifier: KfEtdd+qnUik7hbgTGs+sBldPRAAKHebCQr1kWu4szI=
Subject key identifier: 0E:5D:E4:44:14:8A:5C:D0:FF:3F:3F:B1:D4:18:8C:7A:F4:44:EF:AC
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
Manifest number: E1
Signing time: Fri 17 Apr 2026 06:22:50 +0000
Manifest this update: Fri 17 Apr 2026 06:22:50 +0000
Manifest next update: Fri 24 Apr 2026 06:22:50 +0000
Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: SlpzdM7Awb8VG2FTBygP46xXT0JFnL+7wnrQCKYd8Vk=)
2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: O9Yt4bqmeUlYCqj4N4ngu/2vlQ4xip7ftz93ux7SErA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Validity
Not Before: Apr 17 06:22:50 2026 GMT
Not After : Apr 24 06:22:50 2026 GMT
Subject: CN=69e1d1ba-d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:d2:c0:82:13:7d:69:92:28:57:c3:6a:52:
f2:dc:55:34:fe:18:56:69:4c:03:94:c9:49:ed:90:
d3:da:3e:f5:de:af:e1:43:97:4c:37:c0:58:bf:8f:
4c:ea:97:9e:41:23:64:fe:d9:ae:5b:98:65:e3:b2:
86:11:72:2f:e7:74:d6:54:7e:17:5f:e6:3c:d2:ce:
de:75:b4:fb:13:3d:24:47:e0:72:8d:18:31:c4:de:
71:28:fd:10:a4:22:2d:63:6e:f0:12:8e:34:0b:55:
ec:8f:98:34:62:1d:3d:7f:c1:ac:d3:ab:c3:94:be:
f3:f8:de:df:23:e0:18:fd:0e:43:a9:fd:4f:82:63:
13:ef:a1:1c:c8:f1:31:6f:99:d6:30:11:d1:95:aa:
7f:e7:f4:0f:f3:2e:92:e0:7f:71:74:93:fd:fb:52:
f2:3d:c9:b4:c6:54:96:0e:27:b4:f9:df:23:fb:a7:
71:99:2a:8d:5e:c0:43:5e:f8:f2:b6:db:c9:38:0e:
c1:cf:95:97:59:ca:20:4a:e8:5b:2d:9f:5a:53:26:
44:af:2b:df:99:03:81:63:cc:6e:74:3a:81:cf:14:
45:3f:44:a2:5a:d9:9b:01:73:a5:16:b4:34:9d:4a:
c3:85:99:8f:10:b3:23:99:80:80:d9:3f:7a:81:4c:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:E4:44:14:8A:5C:D0:FF:3F:3F:B1:D4:18:8C:7A:F4:44:EF:AC
X509v3 Authority Key Identifier:
keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:83:9d:b3:d5:04:8b:5e:81:57:d1:4c:e5:4a:ec:9a:10:
10:9a:1e:7d:0b:22:d8:b3:79:af:ea:7e:2c:5d:7a:e6:63:92:
0d:1d:52:e6:50:ed:f5:0f:4f:81:47:db:07:31:e6:38:32:30:
98:e1:42:3a:fc:f2:df:bd:93:5f:23:a1:9e:03:63:80:45:bb:
77:d2:38:9f:1d:bc:6a:f0:10:3e:d1:3b:94:ca:93:04:19:eb:
1d:9d:0c:02:00:4a:e2:fc:f5:ab:51:fb:ee:2b:ea:7c:27:27:
be:f7:ab:3a:40:1b:fe:7c:5e:cf:dc:e1:82:b1:36:2f:05:d5:
3c:66:d7:f6:9e:d1:8a:7f:86:ef:fc:c4:7d:6a:24:09:2c:91:
a5:4e:f8:19:18:6a:68:f5:4c:12:59:77:cc:ec:8a:e0:83:b8:
e1:bd:d9:bb:b7:93:12:18:47:32:17:75:93:fa:25:62:3f:a5:
4d:d4:58:4e:05:1c:30:19:56:f2:3d:c6:4d:28:d5:7f:5c:0f:
0a:f0:72:00:50:4d:8c:90:ef:d0:be:64:a4:7a:7c:06:73:17:
68:bc:8f:d7:84:79:08:3f:ad:2c:ce:3d:64:82:1c:37:8c:5f:
63:0f:35:3d:49:c7:20:58:71:19:df:1d:a9:1b:d8:9e:c8:0d:
6f:56:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:50:27 2026 by rpki-client