
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier: 6qsmlaJLREMNyrcq+oON1nmv8PnKt/rEmnRk9f1npQE=
Subject key identifier: 75:8A:C9:94:2F:1A:D9:46:56:04:AF:56:EC:66:B4:F6:60:33:0C:7C
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number: 0211
Signing time: Wed 25 Mar 2026 02:17:03 +0000
Manifest this update: Wed 25 Mar 2026 02:17:03 +0000
Manifest next update: Wed 01 Apr 2026 02:17:03 +0000
Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: OzL2PLLJaAzmMRR9nHqGwJU1LTx82tQlGp4kO8fj15I=)
2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: yqtXxu6K8/SJ810590/3CfsacSmByFqUd6TVJx9QLFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Validity
Not Before: Mar 25 02:17:03 2026 GMT
Not After : Apr 1 02:17:03 2026 GMT
Subject: CN=69c3459f-f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:8c:2b:e6:ac:60:50:41:12:d1:dc:0e:28:
04:78:de:a2:64:30:55:86:53:fe:14:76:25:de:50:
69:27:63:14:97:b2:52:18:67:94:1f:e5:1a:ef:0c:
ab:d5:30:cb:de:70:44:70:22:4e:ef:1d:9f:3a:9e:
d6:c2:1b:76:28:0c:e5:e4:bb:e8:8f:40:53:d2:b6:
7d:93:09:8e:e4:12:bc:44:08:e5:68:36:ef:eb:b8:
4e:4e:09:5f:96:a2:a9:27:ab:bd:a5:ee:4c:3f:a7:
8b:a4:e0:4f:0e:88:c7:98:8c:67:b6:15:06:18:77:
ee:f7:0e:ff:5d:c8:e8:4b:bd:9f:76:26:26:3a:91:
91:2d:c3:6a:8b:d2:34:01:ef:55:6f:86:65:db:16:
ee:7e:4d:2b:5c:52:4b:61:fc:de:32:6a:49:bf:52:
14:10:9c:55:25:e4:6e:c5:a7:d3:09:b9:d3:ec:a0:
44:91:3f:47:d3:21:c9:73:16:1c:ed:fd:0b:5f:58:
06:80:8b:b4:99:a7:56:f1:0e:7d:38:f5:17:5a:7d:
04:ad:34:ab:c2:1c:3f:63:4b:63:ed:ac:24:4e:3f:
ae:14:63:8a:20:d5:12:77:e4:85:d8:0a:71:d0:41:
49:b3:aa:cc:16:72:6b:9b:ce:a8:11:71:0a:70:11:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:C9:94:2F:1A:D9:46:56:04:AF:56:EC:66:B4:F6:60:33:0C:7C
X509v3 Authority Key Identifier:
keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:45:a5:83:08:af:22:2a:80:0e:78:e5:f9:1f:89:d6:65:ba:
ee:64:32:7d:46:3b:83:f5:84:59:5d:19:07:17:51:86:96:e4:
9c:09:ca:4d:25:49:c4:81:a0:c4:7c:e6:7e:5a:f0:8c:40:76:
ea:86:76:7a:73:a9:d0:7f:c5:54:2b:13:3a:a1:27:f9:1e:ed:
96:42:13:30:15:17:a7:3f:c2:fb:01:18:44:8c:3d:1e:21:5a:
70:cb:2b:b0:4d:6e:fe:5d:7e:29:be:f8:07:0f:ef:b7:19:58:
26:d3:6f:35:b9:cc:6e:ad:38:54:67:12:e7:b4:2d:5d:da:b1:
2c:5f:c7:72:29:23:86:ed:26:61:c0:3c:8c:21:aa:b1:4c:bc:
c8:71:80:7e:a8:fa:83:1f:fd:c5:4c:d8:c8:ee:72:24:15:b8:
c9:61:f1:e1:80:f9:26:ed:09:e3:91:47:b0:ea:51:56:d3:e9:
9d:f5:dc:39:c6:7a:06:3b:6e:b2:8d:cd:16:45:a7:4d:48:c7:
88:9f:e2:e6:d1:31:c9:13:eb:4e:1b:5f:37:4e:4f:bc:eb:cf:
b2:d6:4e:07:8e:72:e9:21:2e:f9:c4:a1:b4:a2:dc:6c:9c:4a:
9f:1d:5f:54:47:79:1d:1a:78:04:2c:5a:6e:9b:fc:f4:f1:e8:
10:86:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:06 2026 by rpki-client