
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json)
Hash identifier: hYesRZL01+EqO1wXAwi7zuabypMyrrURe0pwcaaUiSs=
Subject key identifier: 38:41:9A:2C:DC:C6:47:20:00:78:5B:DF:EB:C5:60:84:5D:8A:7D:9B
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
Manifest number: 80
Signing time: Wed 15 Apr 2026 07:17:36 +0000
Manifest this update: Wed 15 Apr 2026 07:17:35 +0000
Manifest next update: Wed 22 Apr 2026 07:17:35 +0000
Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: ltfcxqR/rf41/I3MmdMHfiINiiO/UuEsiRhBHsBvEzI=)
2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: loa/gmNkqH5emPdqG1mfwNrpi51lh8r/Sh1SgqZBjbo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Validity
Not Before: Apr 15 07:17:35 2026 GMT
Not After : Apr 22 07:17:35 2026 GMT
Subject: CN=69df3b8f-03e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:d1:22:83:32:d1:6f:a0:8d:dc:db:e0:94:
6a:0b:d6:e0:8e:96:c9:4e:9a:84:85:d2:aa:5b:3b:
28:bc:15:02:5d:c3:46:35:47:4b:a2:b1:d2:4a:4c:
61:17:fc:54:36:a6:a2:41:11:82:fe:e5:56:31:61:
9c:04:90:03:be:d3:c9:be:e9:bc:ba:f6:24:0c:4f:
d7:b2:f6:a2:b8:12:74:34:62:df:ee:01:7b:f3:bb:
b5:a7:9a:27:8a:9c:2d:71:c5:12:2c:01:31:e7:72:
26:a8:d8:9b:f4:99:0e:55:b5:da:ba:79:3c:cd:b9:
c0:b3:30:08:0f:fa:07:6e:32:6d:47:28:d4:30:b0:
f0:f8:75:b8:70:8a:ca:d2:7e:19:74:3c:45:4e:b7:
b5:37:5b:f9:ff:db:8f:08:34:77:33:2d:05:79:e3:
e1:55:c8:ac:98:24:10:09:de:2a:dc:b7:dc:3b:ff:
80:74:e8:94:56:e5:ad:2e:30:7c:f8:85:00:22:54:
17:1d:1e:c2:16:0d:c6:2c:da:99:a5:41:39:db:9c:
27:a3:83:9f:de:be:cc:b6:3e:bc:3a:80:f1:75:a3:
4c:97:38:a8:0b:74:c6:87:63:7a:ac:0c:c2:0d:64:
41:8e:b0:0b:af:b6:9c:8d:e3:ab:59:d8:5a:c2:ea:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:9A:2C:DC:C6:47:20:00:78:5B:DF:EB:C5:60:84:5D:8A:7D:9B
X509v3 Authority Key Identifier:
keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:7e:ff:54:a1:bd:82:c7:33:c1:98:ab:3f:dd:a5:80:44:
5b:60:ab:e2:ce:e7:50:89:a0:51:ae:6b:af:dc:77:56:3f:33:
9d:67:59:c9:b4:79:14:08:c1:55:21:57:57:64:ec:c2:93:65:
d2:a8:6e:b2:ab:49:c5:31:02:ff:18:97:ec:bf:99:f9:88:c2:
eb:fb:2c:6d:b6:45:ec:90:40:87:71:17:d3:c5:70:57:19:ab:
3f:85:8b:a7:9b:43:f9:5e:95:2f:b1:e7:6d:fd:b0:c7:db:92:
9f:12:f7:ae:7d:7c:42:b4:ee:32:1f:46:06:e9:ee:09:cf:63:
00:bb:2a:45:0b:a5:10:52:5a:a7:7e:48:9d:eb:1e:00:61:17:
a1:06:7a:6d:2d:5f:f9:87:50:a1:8b:57:a6:ce:22:e7:41:8f:
ad:b0:d1:b8:c4:f1:33:04:6b:a7:9f:bb:ec:9d:d4:98:cf:db:
21:77:b0:46:1e:bc:3b:79:ae:a0:8d:aa:22:d7:5c:3b:f1:20:
12:cd:55:2a:73:e1:19:e1:53:23:56:94:95:64:79:e9:6c:ec:
1c:72:e3:14:7d:0c:33:e7:00:df:50:48:41:cc:be:d3:35:2c:
98:77:90:db:a9:a9:a8:4d:d9:a4:5c:29:ee:d3:5e:c8:39:47:
dc:ec:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:20 2026 by rpki-client