
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File: R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier: UuQPUXBkj3Tm+CzqGW3WnlcQrRuQ3zIFRolDr9K5kvs=
Subject key identifier: A7:2A:EC:51:C9:90:2B:42:5F:C5:E7:D9:8C:E7:33:2D:A1:17:63:2F
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial: 1219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number: 1204
Signing time: Thu 16 Apr 2026 17:05:12 +0000
Manifest this update: Thu 16 Apr 2026 17:05:12 +0000
Manifest next update: Thu 23 Apr 2026 17:05:12 +0000
Files and hashes: 1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: MTLtqzsMeeauqSEPGgyxDDRDs0fP0uBrQ3JrihNsEt8=)
2: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
3: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Validity
Not Before: Apr 16 17:05:12 2026 GMT
Not After : Apr 23 17:05:12 2026 GMT
Subject: CN=69e116c8-c783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:fe:03:89:1d:ef:ee:c6:48:14:ed:48:33:
ab:b8:9f:23:d5:09:af:2c:2b:aa:81:83:18:80:9a:
d6:75:5d:4c:5e:07:dd:4b:1d:e4:bb:c3:d9:09:0d:
ac:a3:50:da:7d:8a:97:dd:f6:90:6c:49:c6:47:bb:
63:ae:47:46:02:9a:a2:43:7a:a5:1c:31:d9:46:fd:
8b:3d:ff:d5:72:11:0a:c5:c0:3b:f4:66:91:82:e6:
d3:29:5d:4e:18:7b:16:55:2f:68:a0:89:22:ec:3e:
78:ee:ab:cf:23:d8:b0:cf:0b:48:97:9d:1d:61:94:
6d:2f:a7:bf:a9:ad:46:50:1e:64:52:92:82:b0:2b:
f3:dc:08:44:54:3b:c5:a7:2b:66:1d:bd:7d:3a:0d:
43:b2:02:f7:56:0b:61:90:59:d8:81:1e:1c:85:c0:
14:f5:f9:d0:36:00:c0:71:e4:77:2b:7b:ff:49:83:
fc:d3:78:f2:e0:d0:85:41:8c:56:a4:a8:eb:dd:d1:
22:11:36:54:17:8a:4d:52:ae:99:ce:fb:40:cb:3e:
69:9f:cf:2a:1b:66:53:b1:9f:42:d9:f2:30:2d:64:
74:4b:b1:ce:63:59:80:9a:83:9f:0c:1d:f9:05:ac:
5f:23:55:d2:c7:c9:0e:b7:32:3c:e8:f0:6a:e1:80:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:EC:51:C9:90:2B:42:5F:C5:E7:D9:8C:E7:33:2D:A1:17:63:2F
X509v3 Authority Key Identifier:
keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:98:45:8b:1b:9e:e6:17:84:77:22:56:9d:8d:0a:73:1d:b8:
36:b1:be:98:a6:e5:96:49:aa:2b:d4:35:da:d8:29:b7:73:84:
15:0e:1f:6b:cc:dc:08:aa:16:6b:bb:5c:b3:e8:f3:52:e8:a3:
10:86:d1:16:9f:f7:3a:17:5c:4e:0b:56:de:ce:6d:8f:25:f2:
68:4d:ce:c9:34:f6:53:0a:94:ec:00:b9:a5:1c:4f:e3:86:eb:
04:b7:64:b6:6d:c1:91:9a:23:e3:c8:ef:01:bc:9f:11:13:b2:
60:dd:1f:15:0d:f1:5d:c2:ff:68:fa:60:78:c0:bd:d7:f0:61:
ee:97:1e:0d:57:e8:70:87:56:43:39:c5:88:b0:c7:1a:63:6f:
0d:93:05:e7:8a:2a:a8:31:1d:b2:ce:1d:ae:a3:d4:36:aa:a5:
23:89:8b:6b:02:d9:b1:88:d9:aa:35:3c:6f:20:cc:b0:01:91:
0f:4a:64:78:3d:24:c2:88:a8:37:6e:7e:fd:1c:20:4e:88:9d:
74:b5:f3:1d:db:23:33:38:90:ee:8f:86:b4:53:2e:c5:36:14:
63:02:1a:2d:04:6c:a3:9b:fe:e7:c7:a1:6d:38:b4:b4:48:62:
6a:cc:76:34:ea:25:9e:5b:aa:2f:78:4f:f5:2d:67:f8:65:f2:
c9:bf:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:32 2026 by rpki-client