
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier: wB0ZoWSujS6xWudrRUpA29AlW17VoGTTupvEVJZlAuI=
Subject key identifier: ED:A9:EA:1B:86:DA:88:6B:87:3F:37:8C:DB:8D:72:52:1F:5F:77:0D
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number: 01AD
Signing time: Wed 15 Apr 2026 03:39:51 +0000
Manifest this update: Wed 15 Apr 2026 03:39:51 +0000
Manifest next update: Wed 22 Apr 2026 03:39:51 +0000
Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 0neS4APv7nuChucJ3vYjha+FT1yFnxB1WHDqlpI94Jc=)
2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: +LlWfDPiKDdUCs+xHkkWz7phXd+8+cijStN/OwLrfmY=)
3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: QyH6dxXjokhnXxiQxLvd1TdbejtHEOfwUUHqYEjI6K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Apr 15 03:39:51 2026 GMT
Not After : Apr 22 03:39:51 2026 GMT
Subject: CN=69df0887-f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:f0:bc:f0:46:81:43:a7:da:53:85:9b:39:
e2:20:93:55:66:23:5c:0f:86:4e:dd:d0:e2:c4:ae:
14:8a:2d:6a:39:bb:31:f5:a1:a4:78:90:b3:11:6c:
78:a7:b5:39:20:a9:9e:e2:7a:77:6b:9f:82:5f:27:
36:ad:9d:4e:a8:3e:81:b3:f0:f5:42:6d:6d:66:a6:
dd:f2:6f:b5:00:7a:1b:04:f7:9a:56:45:b9:ee:6e:
fb:fc:34:ad:7c:8a:cc:ac:cd:f9:77:73:0d:7e:6b:
30:08:3d:cf:0c:89:94:97:2b:5f:5c:db:1b:78:09:
ef:b0:fc:9a:26:f4:aa:fd:ef:6c:10:72:fd:b4:9a:
b9:e6:15:1e:76:e5:2d:52:47:03:8c:46:a6:6c:da:
af:47:09:eb:97:42:cc:9f:69:9c:75:88:f8:fa:a7:
79:c6:d8:c0:57:7a:43:e2:61:dc:db:0c:29:53:9f:
41:60:16:31:e2:5b:da:e9:12:af:a9:56:7f:db:e3:
cd:db:ec:04:77:fa:0e:dc:b7:44:a3:20:22:2e:ed:
a8:34:24:5b:26:05:a1:3d:70:75:58:48:d4:20:2b:
4d:40:15:03:22:bf:9e:05:d7:74:ec:81:c6:ef:68:
fb:75:e4:39:0d:eb:ea:43:b0:94:21:77:62:a7:de:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:EA:1B:86:DA:88:6B:87:3F:37:8C:DB:8D:72:52:1F:5F:77:0D
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:28:44:b1:14:90:f8:34:47:81:fe:91:e2:b1:d7:08:68:
7a:61:ce:4f:5b:91:64:d5:06:63:f7:c1:16:39:4e:c4:b3:07:
4d:28:c3:e0:3a:a2:e1:c5:03:39:67:79:8c:ec:aa:83:fc:9c:
1a:e2:d7:60:cc:e3:0d:eb:05:78:fc:58:97:29:94:4c:7e:0b:
b2:e8:35:ac:44:4c:4c:5b:a8:0c:1a:46:ab:e4:3b:7c:c2:59:
c0:f1:48:08:08:95:9d:74:ba:8d:c9:37:2c:8c:50:68:6a:d0:
67:5f:56:ad:f4:01:01:5d:02:bb:7a:e0:78:0d:57:e7:8e:cb:
36:ab:29:57:00:c0:18:16:de:dd:d7:fd:b5:de:d5:1c:eb:d8:
c9:62:00:d9:7d:81:bb:aa:f3:f7:07:e2:25:8e:bd:75:27:c3:
90:fd:92:67:b5:55:37:d6:cd:4b:e0:a6:d2:19:9e:41:b0:6c:
25:98:5f:6d:4d:d5:e5:60:b1:e0:91:a7:8d:e8:6c:ab:a3:db:
4b:2a:87:32:88:5a:75:32:04:ef:83:74:59:a5:ec:b6:a5:65:
63:1b:f5:a0:c3:b8:4b:d6:6a:39:d0:0b:b4:86:45:fb:c9:e5:
f3:41:77:69:57:25:a3:75:47:57:9d:dc:d4:3d:8a:6c:b9:88:
fe:f1:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:47 2026 by rpki-client