
$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json)
Hash identifier: 0g/9i7Pj5BNKrBzt/Dgqd0ya+mlt3FGN7vVQMNJfmkk=
Subject key identifier: 49:1E:82:DC:F6:BD:DA:B8:62:A2:CF:05:F4:60:D1:1C:87:07:14:FF
Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Certificate serial: 1A9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
Manifest number: 1A5C
Signing time: Thu 16 Apr 2026 16:17:52 +0000
Manifest this update: Thu 16 Apr 2026 16:17:52 +0000
Manifest next update: Thu 23 Apr 2026 16:17:52 +0000
Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: nXqPC2LfWI/zA3Ux0eYO6vANpLFgsR4Z67aHhsDEZ9Q=)
2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: kwgKh0oIcd7aU/3K+fYEn2O6hHR9NFe0BcHgoefOH/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Validity
Not Before: Apr 16 16:17:52 2026 GMT
Not After : Apr 23 16:17:52 2026 GMT
Subject: CN=69e10bb0-180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:04:87:ab:dc:1b:2f:94:af:b4:23:5d:e2:
b5:36:c7:e2:ad:cf:25:19:ff:fa:6e:a9:bc:c4:aa:
1b:97:86:b8:d6:f2:81:cc:b8:eb:7f:04:a7:25:23:
70:c1:66:27:c0:f3:e8:97:51:d8:ed:6f:e3:8e:7f:
79:7a:19:be:55:a1:60:ce:be:c3:27:fc:3e:cb:df:
0b:9d:50:58:fe:27:c3:15:3b:84:6c:ed:b2:5b:26:
2a:fe:58:7c:31:53:c8:c7:8b:af:63:12:6e:09:80:
02:b6:6a:cf:ad:ea:65:95:bf:95:ac:3c:c9:40:48:
82:3a:a9:cc:90:94:28:e6:73:95:ee:33:ad:96:fe:
48:e8:cc:dd:dc:52:eb:a6:88:6c:b4:af:e4:2e:57:
3d:68:45:44:fe:c1:b9:29:9a:5f:5e:6f:9e:2f:bc:
05:7a:1e:2f:4b:ca:7b:16:b5:b8:51:e3:1b:01:25:
a3:61:d2:1f:8b:e0:93:7c:98:0f:34:5d:92:c4:7b:
33:15:fc:15:c9:7f:f0:c2:5e:d2:97:b3:25:16:37:
13:f7:07:5f:82:d2:58:af:f0:5e:67:f8:f9:ed:07:
73:6f:fb:99:98:1f:28:11:ff:c1:e6:cd:ff:cd:a8:
1f:44:f5:71:e8:b6:3e:42:99:d0:a7:f8:cd:dd:f8:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1E:82:DC:F6:BD:DA:B8:62:A2:CF:05:F4:60:D1:1C:87:07:14:FF
X509v3 Authority Key Identifier:
keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:56:e7:eb:74:c9:be:06:ea:bf:3e:8f:a1:75:0a:bb:6c:
d7:60:c5:cb:00:9e:4b:8a:3f:8a:b4:a9:e1:37:8a:03:81:e7:
9d:18:4e:d8:30:8f:d4:ba:a8:72:38:04:61:c2:ba:ac:4b:f8:
ed:e5:f0:a0:5a:0c:9c:73:8c:64:7a:91:15:e3:0d:49:48:92:
66:8c:51:d3:d0:d1:25:48:f2:97:a9:27:b0:db:d6:8b:24:49:
05:73:6f:49:a5:08:00:16:b0:a0:8b:54:da:46:4e:67:e1:c1:
11:de:c7:f6:9d:57:75:52:39:a0:0b:27:34:8f:08:f0:75:7b:
d8:11:39:59:52:45:cf:47:65:ff:b7:c2:5d:a5:c1:86:1e:ef:
dd:cc:a6:14:19:87:91:03:d6:23:23:13:a9:57:22:7c:07:86:
55:af:24:62:53:61:87:6f:f6:cf:5c:e0:98:8e:aa:a3:b3:73:
6b:71:de:29:13:76:bd:23:99:60:d5:99:a6:95:d3:5c:d5:11:
fe:48:8e:46:de:b6:be:b2:ea:1b:35:8f:b6:24:f3:c7:d5:80:
0f:9e:5b:6b:f9:cb:6e:b9:e1:3c:f8:b1:49:0a:95:cb:6f:f8:
74:0b:f9:b1:f7:ab:e7:a1:69:b2:b6:b8:b8:8a:26:1b:64:06:
2b:36:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:10 2026 by rpki-client