
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
File: Sr9max48bHEsS0dwG_3RV94Djy8.mft (raw, json)
Hash identifier: 2LjDkS5cqkJ7SGUk2VxuLugv3GbfkrbheS5onPBKjr8=
Subject key identifier: 03:9E:97:A8:A0:A6:65:E4:BB:BD:41:16:7D:6F:45:68:54:AB:AF:46
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
Manifest number: 2F
Signing time: Thu 23 Jul 2026 10:47:26 +0000
Manifest this update: Thu 23 Jul 2026 10:47:25 +0000
Manifest next update: Thu 30 Jul 2026 10:47:25 +0000
Files and hashes: 1: Sr9max48bHEsS0dwG_3RV94Djy8.crl (hash: TtMxvyvu1qwY2YVy1bkHayJhTqvzatDRcCWaYoZjmGs=)
2: A7EA26127C7511F1A21A554E75A30FBC.roa (hash: BGxj9JZPsci+IfGkHlmqHb1QKouulEgZC6AeVROuOFI=)
3: 1EC9E19C7AD111F188194D1271A30FBC.roa (hash: MpR0pLa42VtvAVSR7IX6co5ikrGvSIOJh1Z0FQ/Mnw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Jul 23 10:47:25 2026 GMT
Not After : Jul 30 10:47:25 2026 GMT
Subject: CN=6a61f13d-137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:c3:24:5b:10:5f:44:53:54:f6:00:04:26:
03:8b:84:3d:b4:d5:ef:04:c1:13:96:55:a3:55:17:
5a:31:86:71:69:b7:40:0c:eb:36:df:5d:9d:83:2c:
4d:40:87:fd:06:37:1a:a1:05:b6:fe:77:f3:0e:8f:
e7:af:a0:41:f2:ea:3f:91:28:14:1d:61:66:a1:3f:
ad:7d:cb:d2:da:0c:2b:bb:2c:06:66:7f:91:3a:b1:
b8:e0:63:e6:87:f0:c4:28:e6:fa:e6:c3:c7:38:80:
e5:ad:b8:c8:c1:a7:92:dd:46:02:ca:0e:cc:53:ca:
a8:15:7d:67:a4:9d:cf:3b:5d:11:7b:eb:66:11:45:
7f:e2:48:a3:76:c3:0d:8f:85:90:73:b9:6e:79:35:
36:86:22:49:9c:d8:7e:4a:40:c1:46:b8:84:e5:27:
93:77:52:be:9c:01:fb:56:ca:ad:86:a8:35:e2:89:
ea:fa:34:6b:7f:4c:ca:f7:d1:e0:a8:5c:11:d5:09:
5e:5a:ce:13:15:49:69:7a:89:cc:b0:bc:41:47:da:
2e:bc:25:0b:3b:33:94:48:70:72:06:28:c5:52:bc:
48:32:ca:33:72:3a:66:7f:0f:fd:60:5c:a9:85:53:
72:d0:57:28:a8:b2:ee:f7:07:59:c8:11:81:72:2e:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:97:A8:A0:A6:65:E4:BB:BD:41:16:7D:6F:45:68:54:AB:AF:46
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:dd:7a:f7:55:65:67:41:c7:f9:f1:9b:59:4c:a3:df:3b:c5:
48:12:88:b3:c2:08:82:29:23:b7:00:a4:85:f5:a4:83:ab:4c:
dc:0e:0e:5f:7c:c1:33:39:b4:9c:60:d5:29:1d:6e:63:dc:b4:
2b:b6:28:59:88:a7:f8:67:27:98:61:70:7d:cf:16:68:f4:f5:
2b:e5:4b:8d:63:6d:37:ab:ad:51:b5:d9:71:d3:11:63:12:1a:
ed:c6:f5:85:e3:7e:38:ad:63:eb:09:ae:eb:1a:10:cd:60:93:
54:a4:48:a5:a9:63:a6:1e:21:f4:b1:7e:77:1c:9d:1a:89:b1:
3d:42:57:66:16:6e:5c:07:fb:5e:5b:dc:2f:8d:12:e9:76:59:
36:ce:2e:25:ac:49:98:c4:37:c0:a1:23:de:1f:17:61:33:c3:
53:1f:3c:59:20:08:3e:86:60:6d:d3:44:be:98:85:d8:43:10:
0c:91:34:90:04:57:d0:33:95:73:82:4e:4a:d5:c7:7d:23:f0:
6a:a1:a5:b7:da:f3:77:0c:11:83:68:7f:07:23:cc:82:f8:3e:
45:9d:b2:67:51:70:75:d1:a5:03:f9:fd:df:dc:16:80:2c:12:
6c:3b:39:09:7b:e3:29:40:cd:0e:f2:67:b3:1d:4e:ff:24:a5:
19:5e:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:27 2026 by rpki-client