
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier: vKeZpjqEOAxxWN18lZx3/N8NpzNDdSSigoQ7DDDlaQk=
Subject key identifier: 71:5B:A4:B8:B2:69:BF:4D:0B:38:20:BA:C3:06:AA:06:39:E2:5D:98
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number: 0124
Signing time: Mon 11 May 2026 05:49:34 +0000
Manifest this update: Mon 11 May 2026 05:49:34 +0000
Manifest next update: Mon 18 May 2026 05:49:34 +0000
Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: LLuksnW9z3yUKWCatTz0FY4d+jwoqa9n6dmmG061uTc=)
2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Validity
Not Before: May 11 05:49:34 2026 GMT
Not After : May 18 05:49:34 2026 GMT
Subject: CN=6a016dee-1522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:44:f3:db:4d:5b:59:2b:56:ba:50:fa:5b:
0c:cd:ba:07:06:69:be:42:bc:37:18:c7:f0:5b:3c:
e5:d9:96:ea:9b:d2:3b:51:00:69:29:44:2d:50:5c:
80:35:90:3a:ed:f5:34:f3:9a:9c:15:47:bb:67:f9:
26:ea:a0:01:72:bf:b4:33:30:ef:c7:91:34:71:4d:
b9:b6:2d:fc:8c:56:32:b9:6f:8b:62:78:a9:88:9f:
1e:00:c5:fd:d3:08:3b:a7:31:16:ec:93:0f:73:96:
ed:5d:b8:85:3a:8c:56:ec:c9:a2:33:e5:88:91:7a:
6c:4e:93:0b:16:91:ce:bf:de:2c:cd:31:dc:8c:ea:
75:35:30:04:74:d2:35:f5:09:42:40:46:8a:6c:c0:
6c:c2:1d:3d:a2:e7:27:cc:31:61:bd:b3:68:fc:b5:
87:c2:9e:cf:eb:7c:5d:bb:8a:a4:44:b4:13:81:52:
71:7d:f7:9a:5e:fc:57:3f:f1:36:5c:c1:03:5e:38:
28:45:2c:51:06:07:5e:ee:8e:7f:04:f0:ff:60:b8:
08:dd:fe:b0:e5:db:6b:b9:cc:88:ee:1a:c4:28:64:
8c:a6:da:68:0f:74:75:ce:52:5f:2b:f2:ac:f6:73:
e9:1c:07:51:8a:b2:86:6a:8a:ca:d6:bc:f1:50:7c:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5B:A4:B8:B2:69:BF:4D:0B:38:20:BA:C3:06:AA:06:39:E2:5D:98
X509v3 Authority Key Identifier:
keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:43:b1:89:fa:ae:72:8c:a7:97:ba:e3:f5:2f:6b:97:18:10:
ec:89:87:91:68:dc:63:f9:3f:ac:a7:eb:62:2b:6a:3f:03:4f:
b7:84:cb:12:4f:20:97:ed:ee:5e:70:16:53:73:3a:aa:d9:21:
8c:06:86:e0:d0:7a:95:d7:19:c4:3f:67:53:c1:97:67:aa:a8:
a5:33:83:2e:5e:0f:45:78:42:06:2b:8d:ca:e0:51:00:e9:d5:
9d:14:ef:95:84:09:a0:fd:bf:1f:b7:0c:b9:76:44:3d:58:3a:
5b:7a:63:2b:56:5f:e0:73:d3:b9:82:9d:1b:35:27:10:d4:21:
0c:4d:67:5e:d6:61:bb:36:08:50:cc:13:02:c1:ae:c8:30:92:
19:e8:f7:a0:be:aa:d3:97:64:75:4d:54:27:13:ae:f7:30:74:
5e:df:ba:8c:e1:6e:fa:d9:f4:a3:71:e1:f1:9a:30:cd:39:55:
ae:c3:cb:0d:9c:19:f4:9c:29:51:94:94:56:59:69:44:64:a5:
75:50:24:7f:8c:1d:a1:50:fd:ed:bb:c2:66:1c:a9:af:f7:e1:
98:56:86:4e:79:25:c2:ed:39:7d:95:54:c5:0a:20:1a:8e:18:
7f:36:d3:73:ae:28:c0:3e:dd:a8:51:af:70:4e:40:06:92:e3:
3a:a3:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:10 2026 by rpki-client