
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier: fpXSg3JgYpjLx7aj4doXMbAPQ8ohqKd91pZcad6fkuU=
Subject key identifier: 86:74:8C:B6:77:95:FA:5F:D7:62:7B:6D:30:03:45:FB:89:A3:21:E9
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number: 0846
Signing time: Tue 12 May 2026 20:56:41 +0000
Manifest this update: Tue 12 May 2026 20:56:41 +0000
Manifest next update: Tue 19 May 2026 20:56:41 +0000
Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: 1Rx02U+xuqsPsokhspI6Ic3PpB4j8cu2s9VjtOH/Y6Q=)
2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: QiYnVEsi/7K9Ji2CODrR010/x13Jz7PV/tzx2JebDQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Validity
Not Before: May 12 20:56:41 2026 GMT
Not After : May 19 20:56:41 2026 GMT
Subject: CN=6a039409-ffa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:c2:c4:86:58:9b:ca:c4:ad:99:e4:c7:fd:
29:0e:07:13:03:07:86:92:84:78:65:94:16:f2:30:
2c:15:70:ef:ff:9a:7e:96:2e:ae:d0:68:5b:c8:aa:
2b:6a:3a:34:87:74:bf:e1:f2:65:71:03:2a:7a:d0:
81:c3:04:2f:fc:9c:ef:e3:6c:1e:f8:47:90:93:71:
af:92:cf:dd:64:ba:e9:cf:2b:3c:45:ac:59:74:0b:
44:ab:28:43:ed:3a:48:41:df:b2:cf:3b:1a:c3:b5:
91:0b:a4:5c:64:4f:09:30:82:a8:68:b5:2a:eb:6e:
fd:40:b5:16:f4:a2:90:c2:1e:bc:9f:bc:2c:20:d3:
44:48:5b:f7:d7:b7:06:d0:28:2c:e6:d0:f4:1e:e5:
fa:e3:93:38:e0:9a:62:0f:1c:ee:b2:39:39:74:f8:
ad:7f:f9:01:54:02:6b:34:78:a3:9f:98:7f:81:ac:
8f:d8:03:b9:ed:a9:69:21:e9:08:12:11:9c:40:a7:
db:b9:31:73:b4:08:86:1e:63:1f:89:9e:86:2f:75:
92:a3:ee:1c:b6:ac:13:dd:b6:08:b1:12:33:28:de:
db:8a:27:25:93:c9:95:ae:15:a1:57:a3:4f:35:f0:
db:a9:f6:82:e9:03:57:76:f8:90:88:ca:50:da:32:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:8C:B6:77:95:FA:5F:D7:62:7B:6D:30:03:45:FB:89:A3:21:E9
X509v3 Authority Key Identifier:
keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a9:3b:5f:da:10:fd:51:f8:90:e8:e1:95:e1:d1:0c:51:23:
9c:67:d7:d3:dc:08:b7:da:d3:b8:19:a4:26:42:9b:c2:3e:4d:
7a:d1:a2:88:93:ed:32:a8:af:88:ae:99:af:2b:65:24:0e:9f:
6f:56:b7:6d:bb:a1:9e:ba:60:4b:03:5b:d7:33:21:71:cd:33:
95:b2:6b:7e:45:0d:ee:d3:76:a6:86:7c:50:9f:b0:a5:bf:e7:
26:53:94:ed:2b:99:ca:d2:29:93:ef:6d:cd:0f:4a:72:fe:c4:
67:8b:de:a7:6e:26:13:89:6a:3e:67:dc:bc:dc:0d:e7:fd:1c:
75:82:94:7e:0b:95:b0:27:8c:b2:c8:c8:c0:a0:65:5a:9a:d7:
7f:ed:6a:b8:7c:f7:49:58:4c:d6:4e:33:62:e6:8d:95:39:5d:
e3:5d:66:dc:51:db:92:63:c0:30:1c:53:13:7a:32:0e:f6:65:
0f:e5:d3:d5:af:27:e3:09:31:33:9e:f9:6d:17:ef:0e:f7:d4:
f3:3d:83:50:e5:5f:fc:3a:37:5c:a9:b6:b9:c8:d3:ec:16:85:
fb:e3:71:87:0d:42:4d:0f:86:26:f3:5e:92:6b:48:0c:90:0d:
cd:c5:77:ba:f9:ee:ca:f4:ab:ed:c8:65:9f:fa:cc:d3:dd:4b:
6b:b7:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:09 2026 by rpki-client