
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File: R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier: NexrJGkxuJSojQVRZNWDBW3Pe481GjHeHkKnZyV3Hl4=
Subject key identifier: 75:5E:77:C7:BC:15:C7:11:2F:0A:72:4A:E5:14:8E:B3:D0:BB:01:97
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial: 1201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number: 11EC
Signing time: Mon 02 Mar 2026 02:36:36 +0000
Manifest this update: Mon 02 Mar 2026 02:36:34 +0000
Manifest next update: Mon 09 Mar 2026 02:36:34 +0000
Files and hashes: 1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: BhaMXuuHz9KbQbVX8PcAUMcZsfYLsnonmVQ8ikIkKwY=)
2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4609 (0x1201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Validity
Not Before: Mar 2 02:36:34 2026 GMT
Not After : Mar 9 02:36:34 2026 GMT
Subject: CN=69a4f7b4-fcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:50:12:09:94:d1:82:82:4d:91:04:7b:b8:
ba:b5:6c:b2:aa:56:dc:1a:fb:03:20:cc:38:57:df:
fe:8f:c2:a0:fd:37:cf:84:aa:9e:f7:3a:4e:0c:d2:
5a:2d:96:e3:c0:15:63:b3:38:2d:4b:eb:13:c2:27:
af:90:3b:b9:ac:a9:ce:08:4f:b1:f7:9a:db:f1:a5:
f4:51:e6:ee:36:15:fb:65:59:0b:ab:56:76:e6:6c:
c8:76:e5:b0:2f:3f:75:71:5e:07:02:09:53:76:ee:
36:1c:fe:be:1b:f7:14:c6:23:08:e9:fc:3d:1f:75:
dc:be:fd:e1:95:f8:92:78:e4:b9:66:1b:ab:a7:1d:
ad:11:19:c9:a3:28:e3:61:89:db:cc:dc:30:b7:93:
64:66:de:1e:1e:34:8a:0b:fa:14:7c:1d:43:01:d8:
43:be:b0:ed:ca:8e:3d:ba:16:b0:2d:dd:8e:f1:46:
80:64:7e:70:c2:df:06:e7:e9:00:aa:05:90:d0:3d:
39:a6:c5:72:2f:3b:23:b1:d9:01:4f:c1:51:b7:27:
90:a5:34:ab:33:83:0d:ed:4c:4f:90:39:0a:52:76:
a4:b1:4b:c3:9f:7e:78:0c:67:f2:fb:c1:fa:fa:ef:
74:a0:21:fd:d3:b8:47:21:09:4e:5a:33:9a:e5:ba:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:77:C7:BC:15:C7:11:2F:0A:72:4A:E5:14:8E:B3:D0:BB:01:97
X509v3 Authority Key Identifier:
keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:45:0d:29:b7:cf:a2:23:ab:3f:fb:4f:92:23:56:0b:4b:26:
b7:ae:0f:1c:c1:2f:70:9c:7d:69:20:79:83:e5:98:59:47:16:
34:2b:a1:60:c7:98:89:0a:9f:52:2f:d8:be:a8:aa:5c:0e:03:
8e:05:e8:84:34:27:f5:f2:e7:0d:8e:d4:31:80:af:93:01:1b:
0c:15:59:51:ee:07:fe:bc:95:9b:c1:47:7d:52:80:b6:1d:87:
64:81:e2:46:82:ba:7e:4f:28:f5:a6:b7:26:bb:c9:d1:66:5d:
19:7c:1c:fa:5e:59:d4:48:e3:ad:1d:c2:77:21:74:5d:2d:4d:
b2:1b:bc:fd:4c:d7:50:f6:74:22:70:02:13:aa:86:e2:25:2f:
ec:41:6c:a0:2d:ab:69:c6:fe:51:da:27:75:3f:71:c4:31:07:
36:04:ae:64:95:4d:4c:63:a4:0e:82:eb:12:58:aa:4f:4a:68:
fb:f7:18:81:e8:b8:a9:7f:66:55:c6:25:4d:1f:ea:46:6c:af:
4a:7a:b3:55:57:9a:8b:90:ee:d1:36:9c:f3:60:9e:58:aa:ab:
76:b4:6f:13:5b:3a:40:c9:67:93:84:80:5a:c0:13:c3:fd:18:
02:d1:fc:99:05:29:dc:54:c0:3e:7c:d0:ad:40:21:97:16:c2:
01:f2:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:28 2026 by rpki-client