
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: B23jMhWalaC9rzUvW+GMgKJWdCpLVgTjSclyt4VAWfE=
Subject key identifier: 79:8C:A2:E0:D0:89:2E:CF:D3:6E:2F:E2:05:9B:DE:CA:EB:79:E0:94
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 017A
Signing time: Fri 17 Apr 2026 04:22:36 +0000
Manifest this update: Fri 17 Apr 2026 04:22:36 +0000
Manifest next update: Fri 24 Apr 2026 04:22:36 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: vz5VxecuGIzv9qCxIfqnXir6NvX6CM6QJhtkjnprQqI=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: ge93gK4lUWgpZWqf0mLTvZJqGeY+ssrFNxVQ9BEvxjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Apr 17 04:22:36 2026 GMT
Not After : Apr 24 04:22:36 2026 GMT
Subject: CN=69e1b58c-a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:f4:d7:e1:28:ac:6f:8a:55:e7:75:04:ae:
20:e2:4a:9d:c1:8b:ab:38:86:23:3b:3b:1c:46:79:
29:b8:f2:f0:81:54:cd:43:b2:0f:df:93:77:d9:58:
28:ec:1d:fa:2f:f7:eb:40:e2:90:82:0c:37:af:74:
e6:ca:66:60:ba:86:45:4e:27:61:4e:28:ad:12:77:
b5:1c:d6:72:68:62:f8:b5:ed:83:25:24:5a:16:f4:
fe:8b:02:63:b2:26:35:20:e7:77:4b:3c:68:79:3f:
0d:e1:29:35:32:98:41:60:de:e5:22:60:9a:b2:a0:
a5:7c:30:25:a7:7c:24:83:6c:ec:9f:a6:8e:b2:98:
3f:f4:39:17:99:f0:83:85:98:33:ac:a6:dc:3d:74:
34:96:b3:65:62:f6:2b:1e:83:63:4e:fd:53:90:d5:
d2:bd:0e:27:64:7d:40:65:c2:a5:f1:f0:48:80:0d:
05:72:ab:46:2b:34:1a:fc:9f:54:1a:4d:37:2d:90:
21:f8:d7:34:de:cc:8e:a6:ae:33:f9:59:35:bd:7d:
ea:fc:bf:37:40:e5:f0:68:17:25:51:fd:f5:24:0b:
70:d2:a0:e0:24:bf:b5:de:9b:62:60:d5:a7:d5:d0:
04:2b:fc:98:92:d5:03:48:a0:e2:9d:45:72:1a:12:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:A2:E0:D0:89:2E:CF:D3:6E:2F:E2:05:9B:DE:CA:EB:79:E0:94
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:47:f0:f2:78:97:bb:2e:bf:1c:6c:7e:c6:6c:20:21:94:
c7:a4:13:d1:84:96:c7:12:42:c9:bf:98:c4:9a:cf:f0:2a:fa:
6f:f9:30:32:c1:07:e3:98:f9:e7:50:cc:e9:9e:cf:b9:18:03:
04:23:21:3e:5d:85:4d:80:e0:59:3d:b0:f4:fc:5e:c5:c2:7e:
0d:2f:e8:75:df:99:32:04:fd:21:41:53:4b:c0:f7:dd:2a:12:
77:f4:06:b2:3e:72:5c:1d:36:65:ff:d3:8a:ad:e9:ef:d7:02:
62:8f:84:9b:13:e3:86:1d:57:5f:ed:5d:c2:89:fb:55:15:97:
e3:09:dd:6b:06:ac:7d:fe:a6:d8:7b:e4:87:19:10:3c:d7:cf:
25:f7:7d:d9:00:6a:96:68:2b:9b:e3:32:b4:39:cd:3a:ef:f0:
f8:00:12:4e:cf:9d:3b:e7:a2:b0:63:30:4b:07:c1:6d:c3:3f:
d0:2c:39:c5:1c:d1:1f:44:9c:f1:ae:cd:b0:ea:93:5a:88:0c:
70:7f:26:d0:eb:08:a7:be:4b:ef:c1:1c:f5:74:5e:c5:22:b4:
38:e3:01:63:55:7b:80:ef:8d:9d:a1:54:a6:41:51:24:66:d4:
c4:39:a6:e8:db:6d:bc:1d:8d:ac:03:5e:2d:23:3d:84:81:c5:
06:62:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:14 2026 by rpki-client