
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json)
Hash identifier: a7YOTPcS1layP2XASKdwGeQG4+mbbhN57YJaUulonOE=
Subject key identifier: 43:64:41:FA:51:5F:28:00:B7:37:BE:99:6D:4E:12:0F:E6:34:71:95
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
Manifest number: 06C2
Signing time: Tue 24 Mar 2026 22:00:41 +0000
Manifest this update: Tue 24 Mar 2026 22:00:41 +0000
Manifest next update: Tue 31 Mar 2026 22:00:41 +0000
Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: IThK5MpnILZMkyL0o5vMUtwqbpAFWV1NnGSB9FpsLyQ=)
2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: 7bAHqSURIiKCX8JL6i6RFjWyK7ibVK3tQ3NZMmImLwY=)
3: 7C096C200C1C11F19C04CE1F053D8C67.roa (hash: RkRaiVCTpjJJZa8MOGmUBLNFfFmUDLlSadHk0mOMr8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Validity
Not Before: Mar 24 22:00:41 2026 GMT
Not After : Mar 31 22:00:41 2026 GMT
Subject: CN=69c30989-f8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:6f:bc:36:6b:ff:01:09:55:93:24:13:45:
80:2f:e5:4f:90:07:6a:06:89:07:b2:d0:a0:c5:94:
6b:d2:d6:35:3a:93:5d:e0:2f:71:92:60:29:02:55:
8c:9a:33:d5:d1:0c:8b:bd:8d:3f:ab:ee:57:30:6f:
85:48:0a:eb:ea:bc:cd:7e:87:81:45:e7:d8:86:d9:
8d:e8:2b:47:dd:eb:bd:68:9f:eb:56:83:be:fb:74:
fa:20:a9:99:85:2c:6c:57:32:dd:0e:57:89:b2:4e:
53:9d:d0:c4:80:62:ac:e1:e6:33:dd:47:c8:10:eb:
a9:20:a5:82:c7:73:f2:88:5e:b2:39:01:19:f4:9a:
87:e5:2a:0e:f7:25:98:a3:22:0b:0d:f4:db:9e:46:
6d:c6:33:6f:cf:bd:e2:14:b8:92:be:46:a7:4a:4d:
90:e4:70:d3:3c:b2:d0:ef:eb:fa:aa:76:5c:e5:e0:
4d:57:da:aa:ca:53:a8:6b:98:95:aa:fa:44:a8:65:
43:43:a3:a0:d6:ea:71:80:63:92:92:af:5c:9d:7e:
9b:53:f2:7d:07:c7:21:7c:fb:f2:24:ed:38:4d:11:
66:49:17:65:7b:b9:cc:c2:4f:e6:30:21:38:71:65:
a3:8c:7d:64:ff:a8:1e:b1:8c:11:8c:05:a4:1b:d8:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:41:FA:51:5F:28:00:B7:37:BE:99:6D:4E:12:0F:E6:34:71:95
X509v3 Authority Key Identifier:
keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:7f:9c:0b:35:45:e3:97:69:19:27:d5:12:52:74:c5:44:
90:ae:ff:56:79:09:97:0f:aa:49:a9:6c:0e:06:54:79:7c:b5:
ac:68:14:dc:48:19:f7:38:bb:a2:05:bc:c9:43:c3:24:03:81:
fc:30:b6:d4:f7:72:3c:51:36:cb:bc:64:72:19:dc:2a:0e:25:
06:54:fe:50:a3:3a:a8:38:30:72:82:72:33:5d:3a:b0:4f:9c:
61:0c:52:1e:06:bc:ce:e6:34:45:29:29:f2:a5:8c:e3:04:73:
fa:0e:0a:de:2f:81:3b:03:7c:64:55:13:3c:11:81:61:4d:3f:
7f:28:df:c7:e3:df:fc:9e:4c:17:f1:cf:cc:dc:50:6a:00:db:
a9:78:c0:1d:63:51:d8:f0:b7:5c:2e:d1:81:d9:b3:a4:c5:dd:
1d:9c:c3:9c:66:6d:9c:5a:c0:63:10:60:41:57:2b:6c:05:df:
1a:17:70:12:00:8c:1b:22:e9:ca:91:47:2a:e5:76:51:48:b6:
ee:94:ab:ea:0e:83:dc:de:28:70:3c:bd:66:9c:05:14:b5:ec:
a3:4c:99:72:b6:65:94:a7:b2:c7:17:8d:46:ca:25:2c:50:4c:
0d:fa:18:b5:1d:52:68:f5:f5:72:c6:3a:bc:40:51:ed:26:44:
ac:4b:1a:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG
NzU4MEJFRDYwHhcNMjYwMzI0MjIwMDQxWhcNMjYwMzMxMjIwMDQxWjAYMRYwFAYD
VQQDEw02OWMzMDk4OS1mOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmNpvvDZr/wEJVZMkE0WAL+VPkAdqBokHstCgxZRr0tY1OpNd4C9xkmApAlWM
mjPV0QyLvY0/q+5XMG+FSArr6rzNfoeBRefYhtmN6CtH3eu9aJ/rVoO++3T6IKmZ
hSxsVzLdDleJsk5TndDEgGKs4eYz3UfIEOupIKWCx3PyiF6yOQEZ9JqH5SoO9yWY
oyILDfTbnkZtxjNvz73iFLiSvkanSk2Q5HDTPLLQ7+v6qnZc5eBNV9qqylOoa5iV
qvpEqGVDQ6Og1upxgGOSkq9cnX6bU/J9B8chfPvyJO04TRFmSRdle7nMwk/mMCE4
cWWjjH1k/6gesYwRjAWkG9iRmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENkQfpR
XygAtze+mW1OEg/mNHGVMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5
NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243
b2xSX3VPT0gyQVAzV0F2dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAATR/nAs1ReOXaRkn1RJSdMVEkK7/VnkJlw+qSalsDgZUeXy1rGgU3EgZ9zi7
ogW8yUPDJAOB/DC21PdyPFE2y7xkchncKg4lBlT+UKM6qDgwcoJyM106sE+cYQxS
Hga8zuY0RSkp8qWM4wRz+g4K3i+BOwN8ZFUTPBGBYU0/fyjfx+Pf/J5MF/HPzNxQ
agDbqXjAHWNR2PC3XC7RgdmzpMXdHZzDnGZtnFrAYxBgQVcrbAXfGhdwEgCMGyLp
ypFHKuV2UUi27pSr6g6D3N4ocDy9ZpwFFLXso0yZcrZllKeyxxeNRsolLFBMDfoY
tR1SaPX1csY6vEBR7SZErEsavQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:45 2026 by rpki-client