
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier: SGspPfwupZAPh+H2SvumTPZ2Ir6s5zAyIk7C/+BGE+M=
Subject key identifier: 7A:24:F8:1C:A5:4D:F6:CF:5C:39:47:5A:A7:56:23:68:0F:B9:09:96
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number: 0232
Signing time: Wed 25 Mar 2026 02:02:20 +0000
Manifest this update: Wed 25 Mar 2026 02:02:19 +0000
Manifest next update: Wed 01 Apr 2026 02:02:19 +0000
Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: hhPdBR2TbrBSwR5D/5Hk/V8cF1+XeTeJ+p9asqPYBok=)
2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Validity
Not Before: Mar 25 02:02:19 2026 GMT
Not After : Apr 1 02:02:19 2026 GMT
Subject: CN=69c3422b-eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:c0:31:5e:54:c4:c1:e1:8c:9d:bc:e2:1c:
3b:41:43:88:7a:52:fc:57:c6:b3:f3:f3:03:45:fb:
c4:67:9d:85:d5:c8:24:44:0f:d2:13:76:2d:5c:cc:
2f:79:94:88:41:54:49:26:b6:2e:22:18:2c:a3:df:
18:85:f1:dc:3a:7e:fe:cc:13:b4:14:74:1c:89:79:
97:58:2a:77:85:2d:55:52:cb:e6:68:0e:91:51:f4:
d1:1d:d9:74:15:e9:72:f8:6e:44:01:f3:14:9d:8b:
9a:ce:f0:b1:fc:cf:f5:6a:4c:a5:8d:31:b6:83:86:
70:51:c3:fc:b8:72:81:64:b0:2d:bd:a1:eb:00:6d:
5b:86:23:f5:57:aa:37:d6:a6:c6:38:39:7b:0b:cd:
53:d6:83:6f:e7:f3:56:72:03:b7:ab:3a:6b:e7:44:
63:eb:83:84:bb:92:6c:5a:56:a5:29:4b:60:a2:13:
af:b3:fe:14:3f:91:1b:3d:2a:f9:bd:70:f5:00:b1:
33:4f:ca:9b:28:8a:0f:05:5b:49:29:2b:9d:9e:48:
63:92:7a:6e:3d:06:3e:67:c4:b0:15:7b:7c:83:6a:
3d:3f:ca:9c:9d:16:be:9d:b3:b9:04:a1:a1:87:58:
c9:04:2e:64:cd:b6:81:58:8f:30:f9:82:fa:6b:3f:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:F8:1C:A5:4D:F6:CF:5C:39:47:5A:A7:56:23:68:0F:B9:09:96
X509v3 Authority Key Identifier:
keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a0:fc:1c:35:c0:e2:5c:6a:2c:96:fc:d3:8a:f2:73:2d:e6:
7c:59:01:62:03:8e:f4:75:7e:d7:31:b4:7b:34:27:e3:b8:64:
68:5c:b3:74:09:9e:1f:70:fb:c6:f1:9f:5e:50:1c:9c:87:3a:
4a:3c:fa:77:ec:31:94:c1:a8:97:78:c7:b4:2d:46:bf:1c:55:
aa:cd:d6:22:e1:fa:46:fd:a5:dd:dd:e2:0c:07:7a:90:a9:31:
1d:55:fd:f9:05:98:9f:ac:d7:64:a6:24:48:37:3b:4c:c5:38:
db:c9:22:d2:41:3f:a2:bd:a7:2b:04:32:8a:28:fe:d8:07:af:
09:75:82:70:fb:da:59:9f:35:16:e9:bf:e3:d7:b8:89:a0:79:
85:34:6f:be:1e:08:67:55:d6:37:4d:e7:44:99:1d:be:70:87:
18:2a:9d:b8:39:2f:c5:8a:a9:c9:c8:59:b3:5d:8a:25:37:83:
42:be:f2:d7:b2:26:79:3e:5c:69:db:a1:ad:2c:84:91:e2:b8:
87:f1:33:37:2e:63:57:50:72:66:4f:13:46:8e:dd:8a:72:4b:
ed:da:6f:d6:74:26:fb:4b:9d:bc:fc:ac:98:e8:8b:e4:91:60:
b3:98:17:c6:01:32:30:8d:f9:46:c4:c7:41:62:b7:fe:d5:16:
5d:4f:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:40 2026 by rpki-client