
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier: YYtA0arezcOq5HAeNT+to/F1JoAt9wC8+SiSzIFv+vg=
Subject key identifier: AF:25:86:0A:E2:24:DC:1C:91:D2:8E:57:0A:23:A6:D9:A7:7A:67:E4
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number: 014D
Signing time: Wed 23 Sep 2026 05:08:41 +0000
Manifest this update: Wed 23 Sep 2026 05:08:41 +0000
Manifest next update: Wed 30 Sep 2026 05:08:41 +0000
Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: zof3bKojlhTlUW42Y3wm+QIhsAtcp5tVcoMCPE/M3rg=)
2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: sOyNPxScuSAhxypChzwUczRXPq4WV5UpffavEeD3qNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Validity
Not Before: Sep 23 05:08:41 2026 GMT
Not After : Sep 30 05:08:41 2026 GMT
Subject: CN=6ab35ed9-a981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:8e:f2:18:97:82:24:1a:94:34:0b:ee:4d:
ff:00:fa:c1:be:35:ec:d0:b8:3c:e6:d8:ce:52:12:
56:f5:66:c8:fa:bf:89:31:38:e1:cc:c4:43:d8:34:
1d:85:dd:ff:34:98:c4:fe:2a:4e:71:da:1d:83:67:
85:42:50:ff:74:5e:3e:51:15:71:b9:ae:82:6a:31:
2a:63:e8:bd:27:84:ba:08:fb:00:35:0b:0f:78:b3:
61:88:ea:69:db:03:c9:10:d6:a5:b8:71:2a:0d:97:
03:00:65:24:62:15:6e:26:f5:9e:71:0f:3b:68:41:
00:30:09:4e:25:69:3a:d7:c4:ad:e0:fb:c4:71:2d:
d2:af:9f:de:54:50:8f:a2:2e:36:73:44:cf:aa:2c:
ab:83:73:48:81:fe:46:57:92:fb:f0:13:1c:ab:64:
78:11:3e:83:be:eb:f0:8a:1e:91:2d:27:7d:3f:e8:
75:ec:77:15:3d:09:09:2f:12:b0:fe:28:11:e1:1e:
b8:7d:db:2e:0e:54:c6:90:9c:5b:fc:37:47:e7:41:
2d:ef:6e:85:cd:62:0c:8f:d1:5b:8a:95:1a:9f:7b:
91:66:e5:09:54:bc:43:23:2c:e9:a9:0f:fa:2f:16:
99:aa:82:af:03:5c:74:ca:09:e1:74:7f:ef:4a:85:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:86:0A:E2:24:DC:1C:91:D2:8E:57:0A:23:A6:D9:A7:7A:67:E4
X509v3 Authority Key Identifier:
keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:e6:06:32:3d:57:a9:6d:36:5d:34:94:b4:6d:ff:ff:b6:4d:
12:87:2f:8b:2b:89:49:3e:df:40:36:5e:dc:05:c3:4c:1f:d6:
b2:18:e0:08:f4:c4:38:1e:b5:3b:71:60:c5:a6:02:06:bb:a6:
75:f6:67:92:f6:f3:9b:67:56:9a:4c:90:32:7e:95:ca:89:3a:
51:0a:8c:a4:b6:43:5e:c9:70:f9:e7:e8:3d:77:13:2b:55:71:
c8:7d:f5:4b:04:7c:29:d9:2e:5b:f3:05:9b:92:39:38:67:29:
97:8a:c3:09:a9:fd:f8:32:40:12:bb:7c:16:31:f5:c4:b1:06:
c1:4c:a9:c0:3f:0e:ac:2d:cd:d6:d6:61:ec:e9:52:77:29:63:
ca:56:ee:30:12:b9:c7:60:cb:45:01:b9:35:7b:91:d9:4c:d0:
f3:53:69:65:01:34:a7:68:f7:d5:7d:46:03:d6:ca:ae:75:57:
7e:3f:36:4a:08:93:04:e2:de:42:8a:40:27:80:0a:da:14:23:
ae:5c:c5:c3:3d:bf:a9:fb:b4:d4:a4:91:45:03:5f:17:51:67:
0e:3f:47:e0:88:f8:bc:51:a9:44:b0:c9:3e:2f:de:6b:cb:13:
f0:9f:09:30:ee:d2:ac:cd:7e:42:ef:d8:6e:46:ed:41:4e:7b:
a1:49:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:53:12 2026 by rpki-client