
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File: R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier: YQldq4pV6JqKFoTCoRrInAtN8avV+g1qXPQOdWupWMQ=
Subject key identifier: BB:45:E4:07:7A:12:94:85:45:82:7D:32:6B:A9:99:DA:3E:18:73:7C
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial: 1226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number: 1211
Signing time: Tue 12 May 2026 17:09:59 +0000
Manifest this update: Tue 12 May 2026 17:09:58 +0000
Manifest next update: Tue 19 May 2026 17:09:58 +0000
Files and hashes: 1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: MJA68AJIyUXF3mNB4SX4nEyalq/xw0rKdJ5scD+tivs=)
2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4646 (0x1226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Validity
Not Before: May 12 17:09:58 2026 GMT
Not After : May 19 17:09:58 2026 GMT
Subject: CN=6a035ee7-2092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:c8:5f:de:c1:de:df:14:9b:ed:31:66:df:
56:85:46:e4:e8:76:cb:13:e2:b9:f8:a9:4f:bd:b4:
f2:f9:7b:7e:71:ae:74:c0:01:cf:af:20:59:63:e4:
51:55:21:96:23:cc:73:b2:9c:ba:78:24:0d:fa:03:
0d:0c:05:6f:ab:aa:2f:11:39:9f:ed:d4:6f:ff:41:
18:79:dd:ca:76:20:cc:5d:f5:0a:1d:ac:5c:62:b1:
7f:0e:23:6a:1d:96:6d:8a:0a:46:6b:ea:08:b0:a2:
d7:2d:85:1f:f9:c7:b5:53:49:fd:73:9a:2e:e0:95:
47:36:9c:c8:b0:a1:51:af:72:49:14:31:97:e9:a6:
f7:5c:6c:73:ba:c5:7b:b9:56:cb:24:f2:7b:49:78:
23:8d:76:65:07:6f:bc:ff:c9:59:4b:a3:59:82:4d:
23:c7:05:81:54:5c:4b:e0:ad:a1:94:ee:9f:d2:17:
7b:00:1b:9a:7c:4b:10:29:72:18:14:65:bb:d3:95:
a6:10:88:cf:c8:6b:71:c1:a5:58:17:ec:68:7d:a6:
4e:ad:a9:20:72:66:13:aa:86:25:20:81:5b:75:46:
ab:ac:e5:87:f0:d3:da:51:69:88:51:93:b4:45:66:
4b:64:87:93:c0:14:8a:97:2b:4d:4c:5b:d6:b2:02:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:E4:07:7A:12:94:85:45:82:7D:32:6B:A9:99:DA:3E:18:73:7C
X509v3 Authority Key Identifier:
keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:ad:8b:de:ca:1d:ae:00:25:b0:2a:77:07:11:3a:b1:75:
bd:f3:d2:13:3b:12:7b:81:03:99:7f:fa:04:be:97:f0:97:93:
ab:c5:e6:88:49:d8:56:dc:43:78:b3:36:ce:cf:07:ff:55:a7:
e7:21:b2:28:1f:bf:a6:1e:5d:04:63:6b:cd:37:27:7a:75:7b:
4c:6b:d7:49:c2:95:5c:24:7d:cc:da:87:46:8d:0d:d5:1a:cb:
aa:67:b6:81:cc:1c:67:40:5a:81:e8:98:aa:67:6e:fa:51:b8:
9f:c4:44:73:46:8f:82:c6:fe:62:51:5c:1e:e5:57:20:c5:95:
6a:e5:ba:d3:dd:96:5f:15:b5:d7:95:b0:f5:8d:3e:41:6a:42:
55:a3:99:02:a8:b9:d4:77:6e:43:00:35:05:21:01:94:83:22:
34:00:c8:40:17:65:85:ef:79:00:3c:db:d7:48:d6:4f:13:99:
7f:c4:ce:48:6a:cb:7a:ec:a3:7c:31:64:4a:c6:40:05:7c:97:
27:ab:26:14:22:2a:11:78:5c:fd:5e:39:8e:f8:75:97:1d:e3:
1d:58:bd:e6:4b:23:e5:70:9d:b1:f5:41:2f:7d:c9:fb:6e:d7:
af:5f:64:7a:08:a9:bf:27:2a:8b:d4:62:7b:ef:7e:f4:1b:a9:
86:c8:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:48:16 2026 by rpki-client