
$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier: SkbKZyI2L56hYQ2ojHAHR5A6+YOTmw8182A4Z5/zVZg=
Subject key identifier: 08:DD:7F:D3:62:5D:F1:B8:F6:AF:80:FE:AB:01:5E:1D:4F:10:EC:5A
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial: 1348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number: 133F
Signing time: Fri 12 Jun 2026 16:57:41 +0000
Manifest this update: Fri 12 Jun 2026 16:57:41 +0000
Manifest next update: Fri 19 Jun 2026 16:57:41 +0000
Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: Tu8qSNbdtFaH3zSeEqIUfGRlYVMPmqy86wFkpZN3ncU=)
2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: TXksggudhoYnYZG8XJQZOjMGiQeEQ88l8YGg9Asd64Y=)
3: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: sFjuCeK0cCGXi+GkdmGnHvDeHOKZWdP9M+7beoSSfAw=)
4: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4936 (0x1348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Validity
Not Before: Jun 12 16:57:41 2026 GMT
Not After : Jun 19 16:57:41 2026 GMT
Subject: CN=6a2c3a85-900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:e8:63:e3:bf:18:79:11:a7:df:b9:12:81:
c9:03:ae:b1:59:5e:4a:57:af:34:52:59:56:1c:23:
1d:41:09:17:fb:3c:fa:4f:9b:53:de:7c:fe:47:34:
87:9d:56:76:f9:45:b1:4a:db:f3:a5:37:05:36:29:
d2:51:4a:47:40:89:03:0f:4d:2e:dd:00:94:a3:43:
63:f6:eb:a2:82:82:4e:44:57:8a:61:7b:63:1b:8c:
c4:2a:0b:5e:be:68:2d:ca:0b:9b:11:84:23:a9:7d:
f6:bf:1f:3f:1d:6b:70:28:62:34:6c:e0:02:c5:9a:
21:fd:3e:44:84:a7:f2:57:13:7a:54:04:e2:08:f9:
72:78:f1:37:05:bd:5f:b8:12:67:11:39:a2:47:90:
a1:de:f2:4d:0a:6f:aa:13:05:49:17:35:84:da:65:
f8:36:59:6d:bd:e0:4a:e4:39:f2:1d:83:bb:ad:3e:
66:58:a3:03:de:cf:73:12:bd:7b:d9:3c:63:a4:9c:
15:92:12:21:96:44:72:0b:f6:6d:26:f7:99:70:b8:
f4:95:b4:b6:7d:38:0d:bb:f9:48:8a:fa:c4:90:39:
16:b1:ee:a6:70:31:2f:37:f9:c6:30:88:63:4a:a0:
6a:55:27:b9:63:0c:ba:83:f4:41:48:e8:fe:16:72:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:7F:D3:62:5D:F1:B8:F6:AF:80:FE:AB:01:5E:1D:4F:10:EC:5A
X509v3 Authority Key Identifier:
keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:cd:98:31:f9:9f:3d:79:92:0d:f7:b4:97:a3:6c:91:b2:c5:
a1:cf:39:6c:c9:f0:fb:10:00:fa:90:24:03:c6:4b:ef:d3:31:
10:50:26:8c:36:ed:e8:71:36:8e:24:8c:b8:a3:1d:ac:4f:4d:
0b:7b:23:2b:e4:04:0c:05:18:74:dd:d9:b2:ac:71:a9:a9:e3:
84:4a:65:77:98:c8:81:68:ce:55:df:67:dc:6b:43:81:2b:4d:
1f:6c:79:60:0b:9c:07:5a:40:6c:e7:a1:d9:dc:3a:79:0b:6c:
4f:30:fa:46:15:ff:99:67:d7:9e:b5:65:74:89:a1:c5:ac:9a:
72:54:1c:c1:8b:76:fa:9e:db:f6:b4:85:79:b0:52:6b:7b:77:
e4:5c:a8:f7:01:03:22:b3:fa:31:c5:b2:ea:70:d3:03:b0:6e:
5c:59:4a:45:28:0d:fb:ba:81:10:c0:e5:63:44:f0:23:2b:97:
e0:3e:ab:97:26:5a:82:4b:6f:b5:46:4a:7b:7e:46:1c:81:1a:
45:2c:c3:3c:b1:41:74:02:45:89:08:25:f3:93:11:ba:51:0b:
83:72:30:17:8f:5c:1b:65:f9:46:e8:c9:83:74:76:cb:70:06:
85:e4:64:40:3b:23:29:73:9a:0e:d4:dd:c1:51:5a:4d:18:58:
a1:25:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:57 2026 by rpki-client