
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json)
Hash identifier: +KOdFDfpu414jr6N3RKG40Z9/vhElD1WYAQBVLYg2ro=
Subject key identifier: 7C:7F:59:EA:23:17:4F:72:E0:32:4F:CE:1A:08:9B:C8:05:3C:03:26
Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
Manifest number: 013B
Signing time: Fri 17 Apr 2026 05:17:15 +0000
Manifest this update: Fri 17 Apr 2026 05:17:14 +0000
Manifest next update: Fri 24 Apr 2026 05:17:14 +0000
Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: QsPWpHRvlMVCACxQ40l5lrxKwmHqTlYBp0DPkBy6IuY=)
2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: BX/V4MXnmfeUAN5WHp08JX8MMvFEmP1cWkHTdG2V9bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Validity
Not Before: Apr 17 05:17:14 2026 GMT
Not After : Apr 24 05:17:14 2026 GMT
Subject: CN=69e1c25b-0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:a0:29:94:3c:5c:2c:6f:2e:05:69:d8:b9:
e8:ce:ff:17:f9:e5:ac:51:9a:76:22:b6:85:84:f6:
84:7b:a1:19:c4:27:65:7a:fc:8b:71:d7:61:d5:1c:
29:14:7c:88:b2:d9:82:73:09:ea:f8:3c:a6:21:1c:
eb:dc:00:62:f5:a1:0c:5a:dd:d4:8d:81:0d:e1:1e:
4d:0c:38:25:b6:71:f7:16:fb:36:ce:88:e6:63:c1:
30:6b:85:7b:db:3e:13:88:34:07:ce:a5:7c:21:fd:
3e:94:2a:07:1a:1f:b5:c3:d2:1d:3a:c4:62:06:d9:
9f:40:b1:0d:6f:64:07:0d:60:3d:e2:cc:ca:b2:e6:
64:c7:fc:51:88:0c:9a:8e:7a:51:0e:28:5c:9c:8a:
a8:fc:92:0f:69:62:e5:4d:ef:fd:79:51:8e:76:e8:
33:a2:f1:ff:e3:bd:d9:d4:00:17:90:07:da:ce:0e:
fc:d2:05:63:fa:f5:71:24:02:e8:3a:a0:c6:9a:7e:
b1:62:3b:23:98:44:9e:84:8c:ea:2d:fc:f9:a9:47:
e9:98:58:53:d6:10:63:f9:8f:d8:9d:53:75:fa:7b:
fb:d6:a0:00:75:dc:63:0a:23:13:50:23:0e:45:69:
9f:38:c5:76:b6:d4:7e:20:5e:2b:6e:7a:fd:c3:ba:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:59:EA:23:17:4F:72:E0:32:4F:CE:1A:08:9B:C8:05:3C:03:26
X509v3 Authority Key Identifier:
keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:4f:fa:5e:59:2c:31:28:fb:ca:f3:a8:d4:6d:0d:bc:cc:
14:97:9a:40:1c:5c:36:f9:94:96:b7:65:8c:87:d8:53:4b:eb:
b9:83:3a:db:8e:f6:07:05:58:43:99:a5:09:77:d1:1f:cd:00:
fb:d5:97:0a:45:8b:46:75:a7:1d:02:af:43:51:77:2a:21:16:
35:25:e6:06:fe:98:81:98:0b:b6:61:f3:a3:85:de:a2:b5:8d:
76:aa:c5:c1:cf:f2:0d:1c:8a:7c:e4:92:69:9a:bf:d9:eb:ed:
5b:1a:7b:06:88:15:35:ee:62:cc:8d:19:75:08:4a:51:af:ca:
c2:68:a7:86:d2:cf:f3:ce:50:95:50:1b:b1:d1:45:5f:c7:54:
01:b9:01:5b:3a:8e:ce:ed:1d:03:81:d5:b3:5c:9a:b3:61:cb:
7c:51:09:88:ab:0d:81:c8:bf:b7:bf:94:f3:ea:b0:99:d5:e3:
dc:bc:22:84:fb:dc:ec:77:bd:45:fd:d0:a5:ef:01:52:07:18:
07:f2:9b:df:17:01:49:5a:88:0e:76:11:ec:48:ab:97:d6:98:
b8:79:f4:2a:13:d1:70:46:1d:95:34:85:59:bd:9a:0d:b5:71:
ae:dc:56:98:40:a0:c9:c4:1c:60:bd:bc:33:60:a8:97:86:8f:
b8:fa:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:48 2026 by rpki-client