
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json)
Hash identifier: 3/iYfvTptM9+Na+P32fT6nBNXIP7x6cmegzktlUWz2s=
Subject key identifier: FF:74:F2:BF:69:2F:54:AB:98:73:34:9F:59:47:9E:BC:8A:57:CD:54
Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Certificate serial: 0319
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
Manifest number: 030C
Signing time: Fri 17 Apr 2026 01:09:24 +0000
Manifest this update: Fri 17 Apr 2026 01:09:23 +0000
Manifest next update: Fri 24 Apr 2026 01:09:23 +0000
Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: t5JiEfs5w3FXV72jZ7jifxoAcmM4mswQ0bfplHf2tzk=)
2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: DmII7xnGU6x5+UHNOvDmxgrYS3cKxdXu+2myxdUSRF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Validity
Not Before: Apr 17 01:09:23 2026 GMT
Not After : Apr 24 01:09:23 2026 GMT
Subject: CN=69e18843-7a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:e7:30:a0:c9:db:dc:56:b0:07:a9:26:cb:
88:f6:da:31:cf:9a:14:ae:b0:27:eb:6a:0f:85:3d:
e2:00:76:55:1a:26:5b:28:71:84:81:e4:25:1c:07:
ed:f6:3f:cb:6d:82:74:17:e0:7f:b3:5f:f0:9b:83:
56:db:66:d5:9d:e2:4b:b0:66:f9:eb:24:d2:72:79:
01:72:38:00:0b:50:66:4b:ea:7d:77:1e:ab:e9:a8:
61:82:83:f5:34:99:c4:f3:8a:ed:73:5d:b7:c2:43:
ee:d9:66:03:32:e1:40:17:2b:18:aa:05:dc:f7:12:
c4:bd:ef:ba:08:15:53:e6:b1:bb:01:05:35:c8:6f:
c9:ce:2d:ec:2a:f5:2a:84:d2:83:58:97:38:16:5f:
1e:00:fa:6c:bd:24:17:85:a3:eb:00:cc:96:5b:ca:
c9:95:a4:0b:33:ba:b7:d3:69:a7:e8:51:bd:08:d2:
c6:bc:6c:35:ae:45:90:7b:9a:5f:da:c1:60:61:8f:
8a:41:73:e2:45:de:e6:4b:44:84:f2:fb:b3:18:38:
8d:2c:0c:de:fb:04:1f:24:c5:cc:75:e9:2d:d4:94:
63:ee:17:e9:9a:d5:eb:b8:c8:21:9a:28:28:fe:13:
1d:59:b2:10:a8:cd:22:89:ec:1b:8b:9f:81:20:12:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:F2:BF:69:2F:54:AB:98:73:34:9F:59:47:9E:BC:8A:57:CD:54
X509v3 Authority Key Identifier:
keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:31:ee:5d:f6:c0:1b:4a:ae:fe:9d:13:87:81:76:ee:8b:
a9:1f:4f:6d:35:45:7a:8c:6c:cf:df:1b:2a:ac:ad:ee:cd:e5:
28:f3:83:65:d9:1e:a1:67:1b:f4:a2:89:6b:ce:a9:1b:bf:0c:
9e:e3:33:c4:3e:5c:0c:30:31:f2:6c:fe:87:8c:3e:35:0f:a9:
79:b1:92:35:4c:a9:7c:04:90:9a:c0:42:90:e0:a4:e9:1e:eb:
13:9c:4a:97:ae:96:74:09:b2:7b:9b:43:cd:b1:1b:4b:6e:62:
cf:e0:82:cb:22:64:10:d4:f1:d3:89:02:1d:b4:74:62:0f:77:
34:c1:81:c9:41:77:21:cf:c4:d9:b1:e1:3e:cf:6b:8a:57:25:
48:e7:9b:13:3d:f4:4f:2a:98:dd:7b:d7:d7:71:1d:26:0f:27:
c4:41:a4:f1:51:e4:6d:4e:c6:ab:42:1c:f1:96:2a:44:21:fa:
e7:cc:84:a1:4c:6d:a8:66:4d:a6:c6:d0:d9:73:5b:c4:95:f7:
a0:93:be:29:60:f5:0d:a0:7c:ad:6c:e7:f5:2b:eb:7d:31:56:
4f:49:76:62:7e:88:d5:a9:bc:8d:14:51:d7:0a:22:2a:d7:5b:
44:57:62:5a:55:fa:3f:a6:bb:7b:1d:08:17:75:6d:c3:88:91:
bc:d6:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:56 2026 by rpki-client