
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: hgBRIEehsL39PH4afLY27NzTlTMVgCOv89f1wBMh9Lo=
Subject key identifier: 3E:FB:97:45:48:C3:6F:EC:BA:35:B7:E6:D9:8F:4D:6A:E4:91:58:44
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 1F4E9E9F7C211F5D8D48B367309230F51E7762C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 02CE
Signing time: Fri 12 Jun 2026 21:18:51 +0000
Manifest this update: Fri 12 Jun 2026 21:13:51 +0000
Manifest next update: Sun 14 Jun 2026 00:28:51 +0000
Files and hashes: 1: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: 5Gq1whotpW5YOP+w0YALlvH5F29QWDiiNdQ3+HbvN9Y=)
4: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=)
5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
6: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4e:9e:9f:7c:21:1f:5d:8d:48:b3:67:30:92:30:f5:1e:77:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jun 12 21:13:51 2026 GMT
Not After : Jun 14 00:28:51 2026 GMT
Subject: CN=3EFB974548C36FECBA35B7E6D98F4D6AE4915844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:9e:99:6c:89:36:32:88:a5:b9:10:78:c3:
c7:8a:23:06:6f:f8:27:d0:67:f8:9e:d3:2f:ec:72:
cc:d0:a1:2f:15:42:c5:f5:05:b0:e6:7e:88:80:4f:
d3:fa:78:cc:a9:c4:34:5b:9c:c7:a6:6f:30:66:9f:
38:1a:f9:7f:29:f6:0a:4b:ae:d0:80:87:8e:e1:f8:
74:1e:11:3e:31:50:d3:68:54:ec:09:88:19:f1:38:
24:bd:50:93:4f:a2:f9:18:69:7b:d3:10:0a:3d:1b:
13:fa:a7:5d:69:f6:88:2f:4b:ef:95:22:6f:2a:0b:
fe:34:bf:ed:fe:c5:6c:53:7c:89:21:c6:8c:2f:65:
8b:32:56:89:87:d7:18:bb:01:8b:e5:a3:69:c5:ad:
5c:5a:33:b4:81:91:3d:d7:21:9d:4c:c7:36:e2:bd:
51:c8:ff:48:64:47:09:0b:78:6a:b0:83:a9:77:6d:
98:f0:0a:cc:47:6f:06:28:14:aa:41:34:d1:53:6e:
aa:aa:61:05:80:70:46:34:9d:04:f2:b1:60:8f:df:
0e:2d:3a:d0:97:4a:88:b4:2f:9a:d0:f5:1a:c3:d6:
b9:b3:a2:56:fe:0d:11:b4:a1:23:36:ac:31:cf:6b:
90:5e:0e:b4:aa:b9:65:96:ae:57:7d:c0:82:09:98:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:97:45:48:C3:6F:EC:BA:35:B7:E6:D9:8F:4D:6A:E4:91:58:44
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:ca:c7:3e:b7:03:f5:ba:5f:46:3e:0c:dd:c0:91:4f:f7:
bc:50:db:a0:9e:5f:2c:a0:00:d9:9a:14:49:28:ae:cc:d6:85:
11:db:1c:60:73:48:d6:9c:6b:8f:91:fb:99:a5:f1:5a:6e:1f:
67:67:2a:55:bf:d7:11:d3:e1:e5:9a:37:5f:eb:23:d5:bc:17:
76:45:87:01:6c:ee:ac:be:14:75:7b:14:68:cb:bf:45:0f:b4:
69:cd:48:fc:3d:c6:2c:a8:aa:63:af:a9:a2:f8:c8:50:d2:d4:
a9:e3:e8:16:7a:eb:6b:13:b9:bd:1c:08:07:29:d7:36:6c:e3:
ef:32:e5:31:14:15:59:a8:7e:5c:d3:6a:12:83:ef:da:55:8f:
0d:1c:78:7d:6c:d8:c2:f6:70:12:d8:2f:2a:cd:95:fe:c6:52:
7f:14:b5:5f:e5:7a:29:81:b0:c5:a5:0d:3f:8a:5b:f9:27:c1:
4b:90:48:d5:ef:8d:b7:da:ab:bc:00:b5:fb:d6:6b:61:68:18:
cc:dd:db:4e:e2:68:fc:96:61:96:34:a3:41:78:59:91:e8:44:
a8:03:3f:7c:e1:44:be:cf:6d:02:c3:03:d2:9d:92:20:4b:ac:
2f:6c:b5:4f:b1:d8:7d:b4:2b:cd:ce:ac:01:46:ad:02:d8:f8:
84:31:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:45 2026 by rpki-client