
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: GbXk+BrRfyIyeeGqVPyKvj3dSFKcg8B1ErXuUeEQewA=
Subject key identifier: E2:EF:7C:7A:87:5D:53:D3:D3:AC:1B:0F:9C:74:C8:A0:1D:2C:30:4B
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 31957D51FA67948BC1B92E6C9174E962F9A0A9B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 030A
Signing time: Tue 28 Jul 2026 03:26:09 +0000
Manifest this update: Tue 28 Jul 2026 03:21:09 +0000
Manifest next update: Wed 29 Jul 2026 05:58:09 +0000
Files and hashes: 1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: OxfvWzPkD6HThX8sbxreZQb3PqUPl42+ZNqZb2dB2hs=)
4: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
5: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
6: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 05:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:95:7d:51:fa:67:94:8b:c1:b9:2e:6c:91:74:e9:62:f9:a0:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jul 28 03:21:09 2026 GMT
Not After : Jul 29 05:58:09 2026 GMT
Subject: CN=E2EF7C7A875D53D3D3AC1B0F9C74C8A01D2C304B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:b3:6d:e9:61:8c:8b:09:03:28:f1:08:c6:
f5:7b:b3:ad:50:f0:09:f7:4c:3d:fa:7d:27:dd:f8:
2a:11:9d:39:06:be:75:e9:29:db:3c:bd:bf:31:7c:
21:b8:40:f1:47:83:80:79:67:a7:3a:fe:4d:4d:55:
77:9a:ec:85:64:5f:a4:11:8c:c5:23:8a:4e:a6:35:
2f:e8:0c:37:b0:88:46:79:ad:96:d8:98:f0:79:33:
5d:a4:45:a4:7a:b8:52:e9:42:45:78:ff:af:70:46:
e3:d4:b9:e0:ea:35:a3:99:53:c8:70:ae:7e:c9:48:
22:7a:d6:01:36:80:74:f6:a5:57:1d:11:10:d2:34:
0b:ca:81:a0:03:e3:13:e9:29:e2:fb:20:1e:c9:99:
b1:4a:c3:be:27:af:99:18:6e:34:8c:00:f7:ac:f6:
a7:ac:86:ba:7e:ea:40:a0:bf:b2:c4:a0:ac:b7:56:
fe:b6:c6:7a:b7:56:19:2b:ac:b8:41:52:17:1e:9a:
ab:37:59:ac:67:40:20:88:52:54:78:f8:60:f5:b6:
3f:8d:3e:40:12:4a:67:d8:a2:50:83:69:ad:9d:b0:
83:38:93:05:94:45:b9:42:47:eb:fc:c9:15:65:59:
81:25:01:1f:ee:1f:72:fb:b3:28:74:a7:99:cd:e5:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:7C:7A:87:5D:53:D3:D3:AC:1B:0F:9C:74:C8:A0:1D:2C:30:4B
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:a5:10:65:a4:63:0f:b4:49:0c:1b:f7:90:9a:bd:da:6b:
49:de:89:a3:63:b2:0d:12:17:37:7c:69:a2:69:69:cf:91:d6:
af:b7:ef:01:41:41:1d:92:d2:59:7b:a0:60:4f:e7:78:43:ef:
29:2c:2e:b1:81:2f:52:44:1c:77:3c:58:46:bf:9a:d9:6d:f8:
f1:5d:ea:c0:a7:2f:7d:26:9d:64:2a:1c:aa:af:f4:a2:92:e2:
b6:e8:6c:51:26:cc:14:3e:49:54:39:2e:07:db:a4:93:f5:3d:
f9:af:6b:c4:6b:04:f0:ea:0a:69:4f:75:dd:6d:b3:01:e3:a1:
ac:9a:ec:20:47:70:60:32:9d:83:91:4d:ea:66:35:0a:6d:ae:
40:4c:17:d8:2a:f4:94:d7:0d:f8:34:07:c8:11:ba:40:c4:48:
5f:ae:09:b5:77:fa:92:35:9e:01:93:66:36:42:f5:18:f1:47:
dc:60:8f:df:40:3d:97:db:c9:19:73:d5:b0:42:9b:e4:2f:1e:
62:c2:33:e7:6b:78:bd:59:d9:33:a2:2c:c9:74:43:26:ce:9c:
a8:28:23:e4:a0:23:17:a3:82:a9:b2:7e:ee:a5:c4:3b:f8:2f:
f4:14:b9:5e:32:d3:45:c1:47:cb:04:6c:cd:2f:81:9f:20:3e:
e0:77:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:20:02 2026 by rpki-client