
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
File: cA9SATINxKfw-nMFyVWhmUwYJgA.mft (raw, json)
Hash identifier: ad8/HVakwtC7Edh9cocznqFNKln8rCQPkaWJS50b43A=
Subject key identifier: 4A:06:DD:9F:70:8F:B9:47:C6:F3:4E:5D:FC:F3:4E:66:27:A4:D4:D1
Authority key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
Certificate issuer: /CN=A9151290/serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
Manifest number: 36
Signing time: Fri 17 Apr 2026 08:20:50 +0000
Manifest this update: Fri 17 Apr 2026 08:20:49 +0000
Manifest next update: Fri 24 Apr 2026 08:20:49 +0000
Files and hashes: 1: cA9SATINxKfw-nMFyVWhmUwYJgA.crl (hash: BTdNiH7KFE16WwpooaaKSvY7c4l+9E9aGqyyph1BeBk=)
2: 90360F96F35D11F08865480C646F56BC.roa (hash: +hYht0+VhMqie7zs0TemkZjgGj97GrUe4MXcjgwo+x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl
rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Validity
Not Before: Apr 17 08:20:49 2026 GMT
Not After : Apr 24 08:20:49 2026 GMT
Subject: CN=69e1ed62-4797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:e6:23:07:81:8e:9a:9c:b8:09:0f:bd:49:
af:04:88:11:d5:b4:77:c9:aa:e7:5f:d2:df:fd:e6:
04:4d:3d:70:41:f4:7d:cb:5c:28:60:07:27:03:c0:
93:e9:a8:4f:ca:a3:0f:49:68:78:46:07:75:00:33:
a4:14:6b:6f:24:ac:ff:b5:fe:4b:c2:c7:69:8b:9b:
ae:f0:01:45:78:ae:3e:25:f9:34:e7:a9:12:9e:34:
34:45:85:c0:7b:b9:2f:26:75:b9:5c:ae:df:35:4f:
c0:b6:f7:9c:e4:b8:c3:4b:75:13:57:35:98:15:47:
03:db:60:da:69:22:67:6c:6c:e9:a6:46:78:a4:0a:
13:24:86:ba:7b:0c:c3:8f:9a:e7:8f:dc:26:da:4c:
80:57:3f:c1:e5:78:ab:2d:ee:ad:24:64:d4:d3:20:
92:e6:01:f2:73:a1:59:1e:0e:ee:47:4b:9e:17:ad:
a9:95:d6:77:0a:76:6d:6a:c9:40:ee:68:d2:ef:15:
2c:69:44:2d:c7:2b:0f:07:2e:a7:a2:eb:0a:85:b1:
04:e6:39:a8:15:35:c8:91:11:97:ee:28:42:38:b8:
0d:5d:d3:63:99:91:00:d7:36:87:a9:a3:40:7b:3b:
bc:b6:cd:ee:1d:b0:b4:94:7e:53:58:ca:b7:fd:b7:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:DD:9F:70:8F:B9:47:C6:F3:4E:5D:FC:F3:4E:66:27:A4:D4:D1
X509v3 Authority Key Identifier:
keyid:70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:18:9b:57:29:4f:f1:91:11:b9:44:ae:bf:06:03:39:4b:c8:
a8:c8:ce:77:e6:0b:19:10:ce:3d:d5:57:fc:80:01:69:1f:ee:
60:2e:e6:63:dc:02:f4:b9:3e:69:46:98:28:be:52:ab:a4:30:
05:b3:b5:61:ce:17:5b:cf:68:64:cd:9b:92:29:69:57:fb:40:
4d:c1:55:17:48:55:67:53:00:d1:ff:b1:41:3a:1e:69:b3:eb:
9a:54:4d:54:35:a7:ca:01:6b:48:dc:3a:0a:fd:f1:45:c8:49:
cb:02:39:64:db:9a:ab:3d:14:0f:be:9b:2e:39:a9:0e:d3:0c:
27:14:52:2c:b7:3f:86:37:b4:70:ce:da:12:83:a4:3c:a6:fc:
52:9c:3e:9b:1e:97:39:b8:41:6c:c2:86:b0:4e:01:e7:26:8a:
27:da:19:69:5f:df:7c:3b:0c:45:5f:62:00:d6:1c:dd:a8:b5:
fe:c7:ca:fc:f2:49:81:0f:07:a1:56:ba:f7:df:c3:68:07:8a:
03:29:1f:45:d7:d4:bc:8b:c4:ca:3e:e5:ed:61:8e:62:c6:a4:
39:0b:00:ea:40:0d:53:a5:e0:0b:47:ce:40:b4:a0:4f:9f:ed:
27:f8:76:93:88:14:c5:93:7b:ba:fb:bc:36:83:07:52:2a:be:
2e:62:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:44 2026 by rpki-client