
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json)
Hash identifier: FzwRUSkZniU0LiFDwUPE+/pOMTFTkAjUd/iqHXCCGWo=
Subject key identifier: 16:C8:F7:8A:59:AC:CF:B0:3F:A4:75:18:9C:FE:42:FC:9D:96:84:8D
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
Manifest number: 02E8
Signing time: Fri 27 Mar 2026 01:04:47 +0000
Manifest this update: Fri 27 Mar 2026 01:04:46 +0000
Manifest next update: Fri 03 Apr 2026 01:04:46 +0000
Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: tcLMjAOddNBC+2K9V/InhlHSHK1j4rjzOqN5QyRmxhk=)
2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: xggHUqhGoBU2THPCHBd7SfkVooQu9NCISC2XN1yhp3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Validity
Not Before: Mar 27 01:04:46 2026 GMT
Not After : Apr 3 01:04:46 2026 GMT
Subject: CN=69c5d7af-3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:3b:e4:b0:29:6c:9c:51:c3:00:88:5b:f6:
93:8e:bc:08:fa:2a:a7:6e:18:ed:46:f9:df:0c:56:
48:06:29:04:f8:82:7e:5b:3f:e0:ad:27:2b:08:28:
5d:08:ee:40:69:f6:47:79:b0:81:0c:45:14:eb:b3:
8d:95:02:68:28:d4:3c:2a:7c:f9:cc:b5:6b:c0:92:
06:ca:0a:b4:df:95:eb:45:cd:cc:81:6b:f1:60:fe:
57:cb:8c:00:fb:80:4a:87:02:52:4b:8f:ce:aa:78:
39:b9:28:c0:fc:0e:bb:27:61:1b:cf:c5:1e:2b:40:
12:73:ae:d6:90:32:a8:38:25:70:d8:cf:28:9d:58:
a1:ef:ed:ba:27:55:8e:79:a4:59:9b:64:7b:55:ee:
98:73:26:3e:86:f6:0a:5c:a4:a9:aa:d6:c8:d0:cd:
90:2d:22:f7:bb:04:a5:de:87:f6:b6:04:e8:30:d2:
70:51:27:e5:1b:27:c8:51:e5:22:f0:1b:eb:af:5d:
dc:19:35:7a:35:ea:92:f1:69:77:4f:d2:e6:dc:6b:
ef:b0:74:d9:d5:21:30:5c:4a:a7:e5:ff:4f:de:ed:
d7:fd:2d:7b:66:59:c4:cc:bb:df:d5:86:76:cd:2d:
17:c2:97:a1:bb:ee:4f:74:3c:fa:ce:55:70:e0:17:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:F7:8A:59:AC:CF:B0:3F:A4:75:18:9C:FE:42:FC:9D:96:84:8D
X509v3 Authority Key Identifier:
keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f1:bf:9c:a4:85:99:e1:db:26:e1:11:e8:da:3d:10:b0:d2:
17:8e:00:14:78:32:e1:16:9d:13:58:f2:b1:99:ba:01:46:4d:
57:3a:4a:29:56:75:04:ef:41:5b:7c:85:49:f5:91:f7:68:a5:
a3:dd:5f:03:ef:38:88:89:91:24:4f:15:72:bc:9a:ef:39:33:
4e:5b:ad:df:9b:19:2c:86:91:e6:69:e5:fa:4e:50:ae:40:87:
72:ac:52:14:cf:01:58:a3:9e:bc:21:f5:a3:75:20:41:2e:94:
5e:04:88:29:3e:3f:f2:38:2f:d3:65:46:3f:d0:28:50:5b:a3:
73:ea:79:1f:4c:1f:09:87:d5:63:ed:8c:32:b9:c1:0b:40:dc:
d4:d9:06:74:ca:9e:cf:20:6c:60:4e:a6:02:f0:71:af:2a:ca:
fd:ca:01:ef:55:be:23:90:ba:79:d4:c3:e5:14:70:0e:28:78:
7b:91:b3:7a:51:a6:0b:3c:89:b8:af:d4:a1:a4:bb:4c:a1:ea:
2f:30:98:9d:fc:8c:ba:eb:fa:9c:73:75:99:ac:78:96:db:ef:
fe:1a:83:6e:e6:98:23:9a:0a:4e:90:7e:b5:df:19:a1:b5:98:
2d:8a:7a:3e:18:4e:1c:06:ae:0d:df:fe:6a:d6:ee:53:2f:ee:
c0:6f:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:04 2026 by rpki-client