
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier: MxRzYXU//o32bO44V84E4IErlf58oRmnXsnG+JGNSDQ=
Subject key identifier: 47:36:36:51:AA:C2:73:8F:D8:6F:CA:CC:C7:38:EE:CD:37:E5:BD:60
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number: 11
Signing time: Thu 11 Jun 2026 11:26:08 +0000
Manifest this update: Thu 11 Jun 2026 11:26:08 +0000
Manifest next update: Thu 18 Jun 2026 11:26:08 +0000
Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: cXiEM9dS8ybeXH+MY0jgI17w3RLMSVTCMN9u3ZjnWlk=)
2: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
3: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Validity
Not Before: Jun 11 11:26:08 2026 GMT
Not After : Jun 18 11:26:08 2026 GMT
Subject: CN=6a2a9b50-3135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:ba:f9:aa:e8:7c:e9:68:cd:5f:ad:6c:bd:
23:3f:06:48:72:e9:a4:42:fe:00:a9:75:59:6f:96:
11:29:01:56:a2:6f:3f:c4:05:1a:6b:b1:77:a8:e5:
42:9d:f6:30:b8:29:c8:3a:6e:86:15:ee:87:76:84:
ae:10:86:e0:b5:ae:27:66:de:58:ae:5a:4f:8a:ba:
e6:b1:d1:84:ec:c0:7c:75:1a:99:68:37:37:f4:9c:
85:e4:77:60:09:dc:cb:a1:bb:8b:fa:e8:9b:4e:57:
2c:51:05:23:2d:c3:0b:bb:97:04:80:18:26:d9:e2:
0a:66:18:13:2e:24:f1:bb:74:04:5d:d2:8b:b8:66:
c5:e8:66:fd:e3:2e:c2:e6:82:38:fc:25:f2:4a:2f:
20:29:e5:3f:7a:87:8a:70:0f:d9:15:00:f4:23:a9:
7d:c9:26:3f:cd:47:58:b0:40:1e:9a:16:23:73:60:
6f:7b:54:02:9f:3c:58:28:8d:a5:a4:08:a7:10:8d:
7d:76:27:de:2c:82:15:37:38:54:d3:5d:c6:74:bd:
4e:6b:10:d6:57:ff:43:a5:9f:b4:7d:e7:1d:c7:4a:
e8:ef:4d:08:d0:ee:6a:93:4a:3b:86:60:f0:5b:77:
74:5b:18:92:1a:b7:19:6e:33:9f:3a:1c:a3:9a:85:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:36:51:AA:C2:73:8F:D8:6F:CA:CC:C7:38:EE:CD:37:E5:BD:60
X509v3 Authority Key Identifier:
keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:52:bb:46:03:8d:46:c9:81:72:02:ab:2e:2a:ea:c8:73:82:
7e:6a:29:c3:84:31:57:65:47:e7:25:78:6a:18:96:b4:07:4c:
75:2a:f5:97:c2:32:ae:4f:07:09:f8:23:7c:e8:34:28:a4:90:
ed:bf:57:cb:de:e0:5c:b3:c3:5a:a6:1f:3b:83:d7:75:6e:bd:
75:06:5b:45:52:e7:4a:e8:6d:84:85:03:cc:10:55:a6:ac:c3:
be:06:4c:8f:ef:60:ae:c3:9b:e2:d1:2e:de:34:8f:2c:fb:ca:
6f:6d:9e:58:3f:02:e6:e9:31:27:09:57:ed:1a:8e:10:90:10:
11:e0:ba:df:ee:8c:d5:8a:c5:95:f4:e0:04:1d:97:d1:b6:62:
ce:8b:38:17:14:c7:e8:f1:30:47:6a:cd:64:ad:1f:f6:91:f4:
9c:79:8a:a3:f5:72:da:db:60:66:83:46:ea:91:9c:e8:61:32:
83:5c:43:6b:75:23:22:ae:f0:01:22:62:26:ca:87:9c:0f:a0:
c2:21:29:b1:3f:cf:25:83:82:fe:58:9a:78:4b:b2:ca:47:17:
d3:c3:e4:91:e8:af:a9:25:48:ea:f5:3b:92:41:1d:d5:36:ce:
77:33:55:44:22:79:eb:a3:6e:dc:38:66:f8:5f:f8:bd:0b:ef:
0f:4c:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:50 2026 by rpki-client