
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier: 9dea5YXi0p+KdzVL6qxPZyZ/tYOiofZG5HttBVVX6OM=
Subject key identifier: 38:56:0B:19:EE:4F:69:58:CD:CC:F5:56:51:E0:49:49:35:6D:28:28
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 0A4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number: 0A39
Signing time: Tue 24 Mar 2026 19:32:25 +0000
Manifest this update: Tue 24 Mar 2026 19:32:24 +0000
Manifest next update: Tue 31 Mar 2026 19:32:24 +0000
Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: KdO4h7d4U1EoqrGQn9HdPNy0dEy1l1J4HRH7pa1uUFA=)
2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 8Im/zm3jvYg6x17xxxV1bfF2mu5a90mnM/wSlnRSAPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Mar 24 19:32:24 2026 GMT
Not After : Mar 31 19:32:24 2026 GMT
Subject: CN=69c2e6c8-98a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:4f:bf:8b:c2:67:5c:0d:a5:a9:b8:83:86:
f7:3a:32:c9:b1:67:04:21:9f:73:8a:c9:24:ca:ec:
06:83:7d:5d:c6:29:a1:c4:4b:f6:68:76:2c:60:a0:
fd:4f:bd:3f:60:f0:af:1b:98:ab:bf:fd:34:75:1f:
d6:f5:0c:c2:4a:d6:1b:c7:34:74:59:04:6c:4a:44:
fb:d5:8a:69:0e:7a:6c:3d:4b:71:0b:d9:b5:14:04:
51:ae:6d:68:0a:8d:52:d8:c9:a5:37:3c:b2:86:f4:
58:31:74:8f:da:0b:e9:68:7e:17:7f:29:c1:bc:00:
8f:5d:0e:f5:d8:16:bd:9e:cc:0f:b6:44:a4:c4:fd:
44:a9:ce:42:0a:37:ec:92:77:64:05:fd:c3:bd:78:
e4:d7:2e:69:d8:79:bb:ef:a1:03:86:d4:23:ac:4a:
11:5c:5e:1f:34:ae:66:dc:ae:f5:30:75:07:b4:9d:
53:4e:5e:d1:d7:99:67:4f:7d:12:ad:6e:3f:e8:ed:
26:7e:62:fe:9c:90:b9:26:4f:6b:20:e2:86:68:df:
e9:4f:40:f1:b0:27:26:5e:a3:56:77:d8:a1:ba:cd:
9a:a9:a9:b7:6f:92:4f:23:82:48:5b:f6:85:2e:7e:
11:13:d0:fd:7f:e6:82:05:ba:09:be:c5:0f:76:07:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:0B:19:EE:4F:69:58:CD:CC:F5:56:51:E0:49:49:35:6D:28:28
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:e2:cc:7d:74:7f:c1:cb:a6:c5:27:c3:3f:cd:a2:e5:f5:
39:08:d7:fe:f1:b2:78:72:51:fc:75:89:c1:d5:d4:61:a0:ca:
0d:97:dd:0c:4c:d1:f3:e3:e7:15:5e:94:15:bf:ed:1e:b8:ac:
7a:46:ad:05:3a:79:c5:09:b4:89:e5:4f:77:4a:bb:94:c1:29:
fb:d6:4a:00:25:fd:42:17:09:cc:87:fd:9e:de:f7:04:87:c5:
5c:62:c0:2d:2d:b4:dd:50:68:06:52:e7:4a:5b:6e:f3:8e:6d:
ed:6b:30:6f:f1:3e:b7:52:47:83:61:ce:1e:c5:2d:d2:cd:ec:
08:3b:d1:18:09:b2:cb:39:62:ff:f1:d1:42:09:2a:40:56:7c:
94:01:8c:ca:b0:cf:2b:7d:da:73:e5:2e:85:63:96:26:ce:40:
75:b1:ce:b8:a6:ad:8c:17:d6:5b:7c:ff:51:7f:0b:34:18:80:
1d:08:3b:d5:60:56:4c:1d:cb:e2:ec:35:2c:cc:b6:ac:41:d3:
d9:77:39:76:04:89:37:76:10:e4:a3:cf:bb:0a:84:72:81:56:
67:ba:af:4d:7e:a2:e9:00:46:00:f1:9f:c6:83:2c:04:8a:27:
57:16:49:ce:1d:9b:5d:12:8a:2b:30:70:68:ae:aa:9b:ab:ae:
66:d4:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:46 2026 by rpki-client