
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier: GAhpGPSD0NXrTo3C/9UI8USoLf17DwHs88N+jUgmSNY=
Subject key identifier: 82:49:69:9F:BD:A4:C3:A0:04:35:74:18:E3:BC:4F:76:A5:AE:C3:C4
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial: 0CF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number: 0CE5
Signing time: Tue 24 Mar 2026 18:06:57 +0000
Manifest this update: Tue 24 Mar 2026 18:06:56 +0000
Manifest next update: Tue 31 Mar 2026 18:06:56 +0000
Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: hQD+78mCI0wytUGpN86shAYImituWFlX85LcF5FcW+k=)
2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: 3NtaFMmRSGiQ779f2aTB3zcvMfuQOTWoqKAG2Y4TQQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Validity
Not Before: Mar 24 18:06:56 2026 GMT
Not After : Mar 31 18:06:56 2026 GMT
Subject: CN=69c2d2c1-6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:74:47:37:fd:c8:4f:d7:ba:84:9d:25:74:
9c:b6:9b:58:5c:28:93:c6:0b:ab:ca:7b:a0:5a:b1:
35:d4:b2:2c:85:70:aa:d8:41:d4:f9:55:c8:48:6a:
bf:06:ad:33:6a:8b:1a:16:37:17:5b:e8:ea:13:72:
d9:81:62:28:ab:30:df:fa:fa:bd:72:0f:fb:99:82:
bc:3d:cd:cf:80:55:d4:f7:ad:f0:95:d9:1c:71:47:
51:61:36:b4:0f:a0:9f:0c:e4:19:5b:66:27:4c:77:
39:f4:42:2f:c6:85:e2:7b:bc:29:fa:d4:eb:ec:b0:
43:64:a2:9f:43:54:5c:65:4f:91:78:18:94:91:ae:
df:7f:62:0b:6b:a4:5d:c0:9a:c2:08:81:99:36:72:
3c:ae:00:41:02:6f:56:05:c0:de:f7:7c:6c:60:33:
8a:20:bf:b1:50:0c:c4:d0:65:25:86:f9:01:65:82:
e6:cb:ec:f2:1a:62:20:65:02:86:6a:f7:03:58:1a:
90:47:c5:3d:68:df:69:f6:b1:e2:2a:8c:29:6a:77:
79:fd:e6:7d:2f:d7:92:53:d9:44:87:8a:c9:8c:3e:
bd:71:49:79:69:34:3e:34:86:81:c7:74:fb:36:ac:
dc:7d:b6:19:33:a3:04:b8:e5:b8:ed:fb:81:d1:2a:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:69:9F:BD:A4:C3:A0:04:35:74:18:E3:BC:4F:76:A5:AE:C3:C4
X509v3 Authority Key Identifier:
keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:fc:bb:f9:3b:47:e6:77:3a:ef:68:5a:6d:58:06:28:e6:16:
18:d2:0b:64:46:45:fa:ae:62:a7:1d:a0:e2:23:a0:01:93:af:
cc:fe:a3:e2:3d:86:d4:69:53:0d:0e:38:3c:25:ba:f1:d9:32:
c8:ec:7b:c9:d0:7a:35:9b:02:4f:d0:7d:ad:16:03:65:5d:49:
a0:88:25:54:1e:4b:36:1d:df:1a:a4:29:33:db:eb:52:25:d1:
05:26:24:32:09:9e:b7:a3:9e:0b:ef:8b:5d:42:62:33:26:22:
aa:3f:02:d2:f5:90:19:35:7b:3e:b4:8e:f0:90:1c:ba:ff:eb:
c5:ef:45:a9:7b:b0:ca:4a:1d:79:d9:5e:25:15:67:9a:65:9b:
e5:ec:ca:4d:ec:a0:3a:d6:51:6d:1e:4a:6a:3e:05:a2:4d:8e:
36:53:2a:e8:54:5a:ff:2c:d3:21:a1:7a:89:aa:26:5e:f6:f1:
81:27:fa:bc:6d:71:23:28:fd:1a:29:f7:20:be:16:21:aa:1c:
91:d0:15:27:c0:f3:a1:3c:85:7c:c6:37:ec:9a:b0:87:af:76:
b1:2b:a5:be:25:c6:b1:ca:06:e0:6b:af:c2:c8:5a:b3:d4:9f:
30:d6:10:00:a4:f5:54:f2:64:b2:05:78:86:ee:fd:bc:97:33:
c0:0c:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:03 2026 by rpki-client