
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json)
Hash identifier: 33dZ+h5bt5gbeXsm3NpkGMSJwcuOaEEEiBGtJS8NBBQ=
Subject key identifier: D4:18:4B:90:45:3B:08:D1:B9:1C:82:80:6C:70:E0:CA:5E:78:D0:D5
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 1219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
Manifest number: 11F4
Signing time: Thu 24 Sep 2026 17:07:29 +0000
Manifest this update: Thu 24 Sep 2026 17:07:29 +0000
Manifest next update: Thu 01 Oct 2026 17:07:29 +0000
Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: 3RB9Qv+wQCbg+gN25PjVYEC9tCfgELgTP1VYoq41xec=)
2: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=)
3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=)
4: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=)
5: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Sep 24 17:07:29 2026 GMT
Not After : Oct 1 17:07:29 2026 GMT
Subject: CN=6ab558d1-0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:5f:74:a6:6c:a7:3f:1b:5c:11:c5:01:66:
e7:a0:aa:3a:01:c2:eb:c2:b1:45:ea:75:51:5b:5c:
ce:fe:e0:18:08:29:7b:02:b4:d8:e0:44:b8:22:ed:
f9:6a:05:4c:d9:49:20:5a:0f:09:34:e9:ad:57:12:
6c:35:77:f7:e0:8f:73:42:04:5a:dd:c9:96:18:25:
39:85:27:e8:d4:ec:a2:f1:b4:9e:57:f6:da:9f:74:
3c:66:33:40:43:45:ea:b9:38:40:e4:91:4a:5c:1a:
0f:e3:89:e2:98:3d:6d:7c:55:86:87:f1:ee:ee:3f:
37:52:f0:d4:af:5c:6c:eb:da:81:14:c9:77:9c:4f:
84:35:04:62:f2:aa:51:1f:6b:ba:55:8e:a3:06:d2:
82:dc:42:0d:03:16:ad:f6:5b:a0:c6:ac:83:b2:65:
d6:c7:ea:a4:a6:6b:59:e6:3d:b9:f2:6b:c6:a8:e1:
65:0d:68:3d:7c:7f:29:d7:1b:52:90:c4:a2:50:23:
92:ee:e1:2a:13:d6:59:5d:d3:f0:61:9d:2c:27:c6:
28:b4:ca:e4:45:84:39:95:94:90:9e:5b:66:a0:5d:
e4:6b:81:dc:e3:4a:18:79:7c:f2:24:ee:50:2b:2a:
40:99:9f:80:06:65:1c:16:a1:f8:0e:30:e5:38:a7:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:4B:90:45:3B:08:D1:B9:1C:82:80:6C:70:E0:CA:5E:78:D0:D5
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1f:ed:12:04:fb:19:26:99:55:b9:b7:d5:1c:fc:bd:c0:ef:
f4:79:8a:0d:30:db:ef:1a:7f:8f:27:04:0b:03:92:2d:08:5a:
cf:6a:a6:b2:de:19:8d:a4:02:77:d0:05:c9:78:c0:65:d2:4c:
c1:66:55:85:c2:71:f3:6e:63:07:ff:63:fb:d5:cb:b5:f9:95:
83:33:48:f8:7e:4d:e1:67:82:9d:81:fc:2b:39:19:8f:b6:ca:
93:7d:83:db:e3:66:1e:a8:24:0a:cf:38:93:40:1b:21:b8:5e:
2b:51:df:39:c4:ba:15:7f:9d:c1:76:fb:49:c7:ea:45:f1:e7:
33:c5:a1:62:50:22:56:fa:2e:12:59:a0:da:ec:1b:47:41:9a:
70:a5:d3:76:ab:a0:0a:66:35:35:87:59:85:ef:60:28:f2:6c:
19:f6:0d:3d:c2:f9:43:66:50:91:25:c9:f3:4a:e0:52:98:fa:
a4:8d:e0:59:a5:e1:52:f4:ce:dd:76:fe:b3:a5:81:3d:25:7c:
32:36:d0:cd:45:9c:18:3f:1b:93:aa:68:66:03:63:fb:ce:5c:
45:b8:69:47:27:5c:c6:1d:0e:e5:9f:35:e7:e9:d1:5e:22:31:
aa:6b:fa:6f:9d:86:81:5d:32:0c:38:b0:ea:41:24:2a:4e:83:
13:52:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:56 2026 by rpki-client