
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: q6DHI7n33CzaRYGH3E8eG3aS1pi27w/t0Zf2825NxMs=
Subject key identifier: 27:2D:96:92:2D:3A:12:D9:CF:BC:C2:3C:71:1D:07:AC:68:F9:82:32
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 52
Signing time: Fri 25 Sep 2026 08:27:04 +0000
Manifest this update: Fri 25 Sep 2026 08:27:03 +0000
Manifest next update: Fri 02 Oct 2026 08:27:03 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: dgnro+v7v9B4PbbZ/MDHUlzOt91E1I4lEoyCAteflz4=)
2: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: +9AXgCQZHA/qQnY6/zfwgsV6IjHJCtO7mBqzVtouNxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Sep 25 08:27:03 2026 GMT
Not After : Oct 2 08:27:03 2026 GMT
Subject: CN=6ab63058-3bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:01:ec:25:36:e4:87:0c:ba:bd:f4:cf:fa:
02:3f:be:13:72:c7:1f:8d:1b:9a:08:86:f3:f9:92:
0c:e6:1e:76:14:7b:fe:3d:04:83:d4:38:ec:7c:af:
39:e5:b4:f4:fc:5c:94:5b:42:77:7a:c1:f6:a9:09:
b9:6c:61:82:2f:8d:32:69:c2:11:93:37:3c:6d:2c:
79:f3:0b:18:c3:3d:7f:8f:8d:54:37:00:58:7b:5c:
8a:48:7e:af:f2:44:84:3a:b9:63:80:1a:3a:34:05:
76:2b:35:83:97:a0:7c:4b:c7:02:af:44:a2:39:14:
94:95:fd:6e:ba:72:db:18:f8:a5:a5:9c:a5:b5:de:
77:bd:e5:a1:13:d6:30:4e:b2:d5:92:1d:2b:fb:67:
be:de:59:23:a6:10:9c:cd:a2:73:87:33:4c:c3:6b:
54:96:84:87:6f:3f:55:a0:70:a4:b0:46:ef:40:55:
7b:31:f7:b4:18:bd:1f:f6:fc:8f:16:22:78:80:ca:
c2:e2:01:8e:92:75:3e:85:b8:f7:58:a9:c1:76:71:
15:d2:b6:de:33:3b:53:17:02:55:f7:b3:f0:13:11:
51:6c:79:c1:08:bd:f1:b6:51:74:fa:5b:eb:0f:3f:
22:9b:32:14:de:71:6c:0a:54:a3:9d:27:0e:3b:9a:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2D:96:92:2D:3A:12:D9:CF:BC:C2:3C:71:1D:07:AC:68:F9:82:32
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:cf:a6:93:0e:5c:15:86:82:88:a5:e0:60:af:60:06:41:
40:0c:a0:03:2e:02:66:4a:4d:27:b1:f4:3d:bb:54:46:da:54:
e4:62:83:3d:0e:f4:a3:82:f1:6e:29:a9:0d:35:90:a3:79:4a:
67:19:cb:08:7c:01:0e:e0:9b:ba:59:11:e3:19:59:36:ce:3d:
1e:02:1f:c4:a6:bf:9b:78:4b:d9:b3:0c:65:63:be:84:1f:55:
03:a8:4d:e1:2d:4e:83:35:ff:e4:83:2e:36:78:40:8c:16:e4:
c4:9f:ed:a7:1f:00:07:10:69:af:28:76:f0:ad:6d:56:e4:cf:
f1:23:0f:5b:02:ae:cf:b5:cd:13:c1:fe:3f:65:8c:c4:1b:a9:
4a:82:c7:00:de:e6:85:e5:86:a2:d4:bd:14:04:ec:2c:32:82:
a5:d2:46:a7:18:43:1f:d5:bb:37:d3:ea:9e:e0:83:05:c7:40:
95:45:f3:1d:f5:e0:78:5c:25:ad:40:98:35:bc:b3:bb:d2:02:
31:9b:85:aa:be:2d:44:6a:ed:8e:6a:b1:71:21:92:20:5b:b0:
00:19:49:a4:6c:f0:12:2f:99:dd:58:dd:3c:26:c3:9f:b6:bd:
a2:a0:11:b9:76:7e:4f:d2:9a:de:f4:3c:af:b3:f3:bc:a6:bd:
e3:ad:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:37:12 2026 by rpki-client