
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier: BV/eRy+3A4tZ6dm0YbVN7/nsHsfDm2FMkxd7pqVeq/o=
Subject key identifier: 0C:3C:49:A7:D2:EB:0F:46:AE:A6:62:BE:1A:BA:59:FA:B2:1E:2D:C5
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial: 137D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number: 1374
Signing time: Thu 24 Sep 2026 16:56:29 +0000
Manifest this update: Thu 24 Sep 2026 16:56:28 +0000
Manifest next update: Thu 01 Oct 2026 16:56:28 +0000
Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: o81ZU126CBaXAYNXDkkiNKCLRNDtsalebXXartOM9Ro=)
2: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: sFjuCeK0cCGXi+GkdmGnHvDeHOKZWdP9M+7beoSSfAw=)
3: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=)
4: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: TXksggudhoYnYZG8XJQZOjMGiQeEQ88l8YGg9Asd64Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4989 (0x137d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Validity
Not Before: Sep 24 16:56:28 2026 GMT
Not After : Oct 1 16:56:28 2026 GMT
Subject: CN=6ab5563d-eae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:76:d3:96:e1:4c:7b:15:bb:6e:41:26:b0:
a0:9f:ce:f3:90:08:aa:04:ca:de:34:ee:6a:30:65:
8e:ad:3a:17:60:28:9a:e1:67:65:1b:50:c5:11:f3:
e2:ef:ae:b2:c1:ae:63:f6:47:be:4d:5d:97:ce:7f:
0b:07:d7:25:f5:17:ed:b1:b4:93:ee:3d:86:50:52:
0f:fd:01:86:7c:a0:af:59:e1:5f:27:8b:1d:5c:8f:
a7:db:91:c5:3b:b8:39:00:82:ea:f1:e3:9e:30:07:
f8:1d:05:35:a3:d0:73:8b:8c:ac:66:0c:f9:f4:1e:
f1:27:34:da:bd:04:a9:bf:6c:a1:dc:2a:97:3e:56:
ad:6e:90:84:f5:d5:9d:43:d1:cb:0b:b6:8c:9f:cd:
09:58:a7:02:c1:2e:f7:6f:16:ba:29:bc:fc:93:3e:
98:ca:f1:c0:94:eb:de:36:6f:f7:b8:45:c1:71:24:
3b:91:76:8f:32:fd:e9:e6:5c:93:59:8d:a8:38:0b:
7a:97:61:75:73:e4:ee:49:d1:5c:90:8b:4c:19:5e:
65:e8:40:53:9c:07:52:52:30:91:b4:cd:8d:1a:dc:
a3:2e:a4:0e:da:01:ec:09:2f:78:ec:c7:5e:61:bc:
cf:51:91:5f:b5:a6:95:27:7a:72:43:f2:7f:81:94:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:49:A7:D2:EB:0F:46:AE:A6:62:BE:1A:BA:59:FA:B2:1E:2D:C5
X509v3 Authority Key Identifier:
keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:98:b5:a6:28:a3:01:77:c6:84:14:ce:a8:90:c5:83:f5:d3:
ac:d0:00:3b:32:84:a9:86:ad:02:9b:35:99:72:dd:be:6a:6a:
a5:ba:7c:a5:e1:05:37:87:9c:cd:e8:9a:63:b3:1a:59:b7:72:
04:49:40:70:bf:27:14:18:a1:a1:8f:c8:a0:cc:25:7e:70:c9:
3c:f8:38:8b:45:7b:6c:48:85:62:cc:00:0b:c5:e0:71:8f:c7:
37:d5:7d:a9:a7:6f:6b:6d:9b:45:01:d0:a2:f3:50:1b:34:ac:
df:26:7b:d3:16:74:bb:7a:f7:6d:73:1d:ab:bf:84:c0:d3:83:
09:f3:b1:e4:27:0f:fd:56:97:34:0d:48:4d:c9:7e:a0:5f:ad:
b2:70:4c:67:46:96:36:df:82:42:92:2b:0b:15:d6:2c:b8:61:
66:a6:69:9d:17:01:3c:c8:d8:8c:1d:1a:e3:17:3a:2a:44:c4:
81:58:ca:8a:fa:30:6c:f2:dc:bd:f1:d0:f6:d7:b6:72:dc:06:
0b:65:26:72:b4:d3:62:de:c0:d6:07:a7:af:e5:7f:79:e7:fd:
8b:98:cf:46:3e:b9:ff:e9:32:29:9c:bc:95:17:be:14:8b:80:
d1:9c:98:6d:b0:d4:c0:02:22:61:1e:8f:dc:9c:3b:65:62:37:
41:48:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:22:27 2026 by rpki-client