
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier: 2QXBmbfyh6HWucpZbkekmaWzjT9+3bcgSKShFG801MM=
Subject key identifier: DA:79:AF:66:AF:C9:A2:75:52:00:A6:55:49:45:80:EE:1D:03:7F:90
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0D71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number: 0D4D
Signing time: Thu 16 Apr 2026 17:54:57 +0000
Manifest this update: Thu 16 Apr 2026 17:54:56 +0000
Manifest next update: Thu 23 Apr 2026 17:54:56 +0000
Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: oUfVJxr/erY0XzEZdFZwQJq3PG2xbwy+/+9Cc2V8l7Y=)
2: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
4: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
5: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3441 (0xd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Validity
Not Before: Apr 16 17:54:56 2026 GMT
Not After : Apr 23 17:54:56 2026 GMT
Subject: CN=69e12270-ec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:93:a5:53:b0:84:9b:a3:25:c5:d4:07:4e:
7b:17:4e:05:4a:3c:12:52:3f:e9:fe:a9:c0:9e:cd:
03:0f:60:15:29:40:1a:c7:4d:cf:be:71:69:f3:89:
df:e0:cc:02:20:b3:d1:7f:b7:e8:f0:e6:a1:ce:03:
1d:14:ea:b5:55:69:88:6c:26:37:22:1d:cc:c8:ed:
ef:ba:14:f7:15:3b:ac:b6:ec:f5:0d:2b:e7:b0:8f:
ec:e4:73:f4:2f:e5:9d:b7:7e:3a:37:ab:a6:bf:75:
05:90:19:4a:64:ab:05:3c:4a:c8:4d:ec:bd:10:9b:
9d:bf:51:8b:66:21:35:e6:21:da:62:79:38:1c:3a:
a8:a0:ae:bb:59:58:f1:d2:b8:a9:90:92:30:16:b0:
2f:26:c9:6c:15:14:b8:8a:e7:0d:f9:77:b0:10:f4:
ce:07:d2:70:5c:4f:ab:46:bc:c8:2e:36:aa:87:6f:
b0:0d:6d:d6:1b:08:53:a1:2f:1b:5b:66:b2:94:5d:
21:d0:d2:41:61:fe:bf:b9:d4:a0:4f:a6:db:cb:78:
81:35:1f:f9:5d:2d:f3:60:15:25:82:5c:e8:8f:88:
f5:a2:bc:70:11:cb:6b:6f:6f:60:5c:45:0c:f9:88:
2e:bf:e4:fb:d8:32:e7:b1:88:40:77:08:33:21:03:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:AF:66:AF:C9:A2:75:52:00:A6:55:49:45:80:EE:1D:03:7F:90
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1f:5e:99:dd:8c:a5:d5:99:23:ab:ce:ad:ba:c9:67:e1:23:
27:c8:1f:42:01:d7:5c:f5:30:2f:8b:73:75:ee:ba:fc:24:3b:
a4:aa:06:c7:49:63:dc:42:84:04:b4:b2:d8:16:cc:72:f1:c6:
cd:e1:da:42:86:ae:c3:9d:a7:b2:d5:21:89:5a:15:03:87:62:
ae:5f:9f:c7:ef:ad:41:b0:b8:a3:5a:21:50:13:89:2b:4a:83:
5c:67:1a:32:d4:32:8b:ca:50:53:a0:20:7a:8e:d2:04:34:b8:
7c:f2:e7:15:5f:24:cb:03:16:6d:2c:c9:d9:b5:33:4e:aa:7a:
21:b9:66:7f:2b:d4:79:cd:f9:2e:9f:91:22:b3:74:58:7c:54:
1f:93:42:91:68:c7:d2:a7:7d:00:98:8c:68:ce:17:65:68:06:
2d:2b:ed:97:3d:70:c9:2f:3c:2f:4b:f1:a4:7c:ef:52:cd:e6:
38:f4:ed:ce:1e:2c:39:1c:c2:49:6e:06:ec:7c:c9:4b:d6:4b:
e1:65:92:44:91:9b:c7:32:df:65:e0:aa:e7:12:f2:af:32:8d:
5f:de:66:e7:ff:62:1f:88:68:3b:ff:c3:bb:94:9c:58:60:a7:
ae:11:99:37:10:f9:94:c9:5a:b9:41:49:8d:6d:20:02:11:98:
e0:a4:29:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:36 2026 by rpki-client