
$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier: iLpvch8YwkdOjYFNIP9C4y7Ik3iHVB2T8seBnyAyydo=
Subject key identifier: AE:E5:07:6A:E8:4D:4A:25:B2:09:59:5E:47:78:E3:CC:34:9D:85:4E
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number: 0142
Signing time: Fri 17 Apr 2026 05:00:45 +0000
Manifest this update: Fri 17 Apr 2026 05:00:44 +0000
Manifest next update: Fri 24 Apr 2026 05:00:44 +0000
Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: H9UJB3qFBqlJc2dQ1iWXCa6YzrDiGc9UDZqfZi6G4F8=)
2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: pnNvJ0QcGVavN6ejXIRyXtFdc94Af5xYSFGkl4Uy/KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Validity
Not Before: Apr 17 05:00:44 2026 GMT
Not After : Apr 24 05:00:44 2026 GMT
Subject: CN=69e1be7d-57fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:8f:70:03:27:dc:0a:b5:28:73:1c:22:d8:
dc:fa:8c:0a:a0:d3:13:43:67:6d:b6:6e:88:b3:a3:
3a:8c:5f:03:59:2c:0c:dc:fd:bc:6d:a1:e3:80:9f:
2c:1b:5c:49:34:29:f9:80:61:19:9e:de:c5:68:cd:
55:98:c1:9b:44:7d:70:db:98:45:b4:ea:25:a6:a7:
01:d5:c5:2c:c2:52:3f:0f:a2:56:e4:64:00:12:27:
d2:39:35:57:04:01:70:63:51:7a:26:55:20:db:14:
f8:37:c5:e1:e1:3b:3c:f7:85:ed:f2:6a:5a:35:e6:
30:56:d2:be:e6:1c:a6:19:1d:a8:99:87:11:50:51:
5a:2d:ae:7b:8b:11:09:c9:bc:9d:fb:83:fb:90:a0:
92:a1:86:58:aa:be:40:94:d1:20:99:b4:7e:0a:d4:
40:e2:08:31:db:10:53:b8:b7:a7:0e:b1:75:6f:36:
5a:8a:c6:17:6d:17:88:7d:aa:5a:6b:6e:20:b7:c7:
99:64:bc:2c:86:e0:5e:6b:8a:92:9b:0c:74:2c:68:
ce:92:ea:ac:81:7c:0f:65:bf:e9:82:71:98:2d:d3:
90:2c:c3:e7:07:44:55:e4:03:01:30:f8:e5:21:52:
af:7f:37:5b:82:e6:81:fa:e7:a0:7e:e7:ec:c4:59:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:07:6A:E8:4D:4A:25:B2:09:59:5E:47:78:E3:CC:34:9D:85:4E
X509v3 Authority Key Identifier:
keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:57:06:6f:c0:16:c4:e4:f2:f7:ee:aa:36:62:5f:22:e8:1e:
25:a9:a6:e6:e8:5c:9f:05:7a:0d:3f:4e:58:ca:a7:63:7b:a2:
90:f9:07:42:7c:7f:d7:4a:25:b4:7c:02:c3:0e:58:52:58:a8:
23:48:61:7a:32:01:50:be:b0:db:af:fd:3b:d2:5c:be:3f:13:
f0:49:15:4d:21:7a:f4:19:bf:e8:ff:81:52:ff:0d:5e:37:d7:
cf:59:e2:84:a3:cd:d2:d9:37:69:1b:55:65:e0:7a:21:32:08:
0b:8b:2e:44:3e:37:ab:f5:ef:f4:93:c6:3a:13:13:cb:aa:c3:
13:b7:0e:4c:68:5e:b6:68:0c:9d:58:3c:f2:88:2c:22:19:1d:
9b:c7:93:b9:77:a1:a5:3c:78:6c:06:91:6f:88:c8:98:3a:0c:
c8:e8:c3:9a:3c:6f:bc:ad:ac:ba:a3:42:49:af:f5:16:7b:cc:
ab:6c:9d:eb:16:16:30:7e:fd:51:bf:cc:74:8c:41:72:06:02:
22:c8:49:35:d1:2b:07:99:36:c5:b9:4e:c8:72:12:0a:ce:0f:
26:27:66:4e:22:b5:13:2c:b6:8d:7a:76:db:f9:0e:e3:b1:49:
fe:d4:40:2c:12:95:1c:6b:0e:ae:0d:7d:d2:06:03:b6:94:55:
4f:02:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:50 2026 by rpki-client