
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier: /wDz+n6kTKU6XRtCARJs7bdA6DK13sE88VX3uhrmQSw=
Subject key identifier: F1:9D:3B:58:5D:FD:0F:6E:D8:A6:E1:B2:18:5B:AD:57:81:9D:20:11
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial: 0CCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number: 0CC1
Signing time: Mon 02 Mar 2026 01:27:55 +0000
Manifest this update: Mon 02 Mar 2026 01:27:52 +0000
Manifest next update: Mon 09 Mar 2026 01:27:52 +0000
Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: O0VnT1zcz3eH3gVLW8ISPvUehIflA/yeWEnNUGooKQw=)
2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Validity
Not Before: Mar 2 01:27:52 2026 GMT
Not After : Mar 9 01:27:52 2026 GMT
Subject: CN=69a4e79b-d694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:e6:b7:b5:8b:81:4d:bc:dc:b3:af:23:88:
04:b5:b3:ab:4a:53:6f:b9:4c:cd:09:85:61:05:f8:
11:f9:9b:e0:fb:f5:13:4f:1c:20:cd:5e:6d:e7:87:
b2:b6:da:7b:cd:70:4a:98:46:eb:91:10:c7:d1:e4:
fc:7e:f0:6d:cc:2f:92:e0:80:c0:a4:41:55:51:9a:
bf:ef:a2:40:fb:2e:dc:d4:c7:f1:64:fa:fb:aa:b7:
69:34:5e:5f:16:8b:37:a5:0f:11:e0:43:d0:cc:4f:
eb:5e:a1:07:92:ab:2a:21:e5:95:0a:79:33:e8:5b:
a5:90:05:68:9e:55:28:d2:5b:b7:da:55:0b:88:a1:
c1:fd:cf:e3:5f:c6:d7:fc:c1:cd:37:9c:16:a4:06:
48:e2:d7:f0:4f:ec:b8:53:d5:d9:67:19:83:7a:48:
ba:0b:a6:52:f5:36:52:9a:08:66:a0:cf:16:cd:21:
8e:99:af:a6:9c:79:d3:0c:5c:ee:68:30:76:d7:2b:
80:c3:fc:8b:52:11:7c:d4:c5:97:29:6d:32:7e:48:
23:07:27:e7:d6:d8:ca:36:de:b1:e1:6a:3a:a2:4d:
bb:ad:ea:52:69:66:58:fb:b9:46:34:ba:00:f9:62:
5e:c9:fb:43:f3:0d:aa:3a:a3:b5:35:79:48:7d:4e:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:3B:58:5D:FD:0F:6E:D8:A6:E1:B2:18:5B:AD:57:81:9D:20:11
X509v3 Authority Key Identifier:
keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:b0:35:c5:f8:c3:c1:1a:20:77:ed:e4:b2:b1:79:03:f8:
39:82:a8:7c:1d:85:91:e5:86:a7:e8:9b:4f:6a:6f:21:76:e7:
6c:ec:77:fc:21:f4:3d:a1:b8:6e:84:c5:6d:d4:35:8b:10:d5:
06:b5:a5:80:cb:5f:4a:6a:31:df:6f:4a:d0:33:e5:bd:b0:65:
9f:54:03:d0:9d:c0:84:7f:74:09:92:c8:3d:e0:ed:24:6a:43:
89:7f:5b:80:03:22:d7:21:3e:4d:2e:bb:86:f7:26:af:f7:11:
a1:c4:d9:2c:e0:13:5b:7d:a7:9e:29:0b:31:3d:77:a0:86:d4:
5e:a9:22:d4:7c:4e:c4:36:65:33:3d:2d:a2:9d:a9:73:94:44:
7a:7f:cc:d8:29:1e:6f:dd:5e:73:45:d5:d3:a4:f0:a0:30:d2:
08:d4:f6:71:31:59:5a:86:34:8e:21:c8:a8:de:2a:e5:1a:8e:
8f:0e:be:f4:2b:d8:27:8e:fd:27:01:f5:a0:a8:7e:a5:9e:40:
e9:6d:13:c8:c4:b2:74:47:f7:e0:e7:9e:8e:e0:92:5b:7d:e4:
4d:ae:d6:11:19:ee:bf:18:21:21:87:85:dc:18:78:ec:a7:3e:
e0:7f:d7:50:e9:8a:3e:0b:f5:ec:ee:d3:0d:82:1d:9a:5e:92:
ea:65:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:20 2026 by rpki-client