
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier: koEYRZPWdgYmDsAgGwNwmenpXKqkbB8eFmcm9xthm8A=
Subject key identifier: 58:B7:4B:04:9C:48:CD:FA:76:F5:27:F7:D8:A6:F8:C5:95:0E:E8:88
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number: 0CCD
Signing time: Tue 24 Mar 2026 18:13:18 +0000
Manifest this update: Tue 24 Mar 2026 18:13:18 +0000
Manifest next update: Tue 31 Mar 2026 18:13:18 +0000
Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 5KW7yiEI76R8E2Z//qiCtKZ+GcyMYQS2dNOGWszDxNg=)
2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Validity
Not Before: Mar 24 18:13:18 2026 GMT
Not After : Mar 31 18:13:18 2026 GMT
Subject: CN=69c2d43e-fb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fe:ad:f4:67:82:c8:91:b8:5a:fb:c9:4d:42:
74:cf:aa:af:7a:94:2d:9b:e7:95:18:ec:ba:60:f3:
51:dd:da:e5:65:7c:37:45:6b:fa:f3:92:85:30:7b:
21:ad:0a:cb:77:0c:46:8c:9a:5a:1c:27:5f:28:c8:
fd:af:17:04:43:65:d6:e9:87:f0:bd:7f:a8:ac:f2:
96:61:c4:16:70:3e:0b:22:99:93:68:bc:75:28:9e:
c6:9b:1e:c7:f5:96:23:2a:4b:2e:ae:1e:36:2a:bb:
0a:ee:c7:eb:6b:c8:67:17:f1:5c:2b:f8:72:f2:36:
4b:db:b9:d2:21:51:8e:fe:f6:6a:48:1a:bb:6c:ee:
7e:76:eb:ef:87:04:24:ca:bd:9e:69:bd:e8:de:5b:
f5:22:c2:d3:26:b9:09:ee:a2:85:45:1f:b0:53:8e:
ae:e6:3f:ed:33:0c:35:42:30:fb:60:82:e9:41:2d:
c1:29:dd:ac:ea:28:60:27:35:44:9c:9f:4d:bf:d5:
d1:39:03:3c:a2:6a:fa:53:61:12:89:5a:e8:02:36:
57:16:ff:55:0d:ed:6e:ed:8d:af:62:6e:0c:a5:b8:
7c:7d:59:1a:04:ff:94:43:86:cd:e6:a3:73:c2:47:
43:cb:6a:90:6e:b4:a1:97:2e:13:19:6a:44:c8:b4:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:4B:04:9C:48:CD:FA:76:F5:27:F7:D8:A6:F8:C5:95:0E:E8:88
X509v3 Authority Key Identifier:
keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:bc:81:46:ab:0a:91:85:27:08:e8:dc:bc:8e:36:b1:61:
ae:09:76:58:eb:c9:2c:95:7f:00:cb:8f:3f:6e:85:78:43:04:
b6:a3:3f:89:ed:62:60:c0:32:88:a4:e0:24:da:96:de:64:d2:
77:1a:d8:4a:43:b4:d3:59:c5:36:ad:ed:07:99:e4:18:04:52:
0e:42:ef:d9:82:52:e3:b6:50:09:10:3b:ab:77:77:d4:9f:ce:
77:99:96:cc:b5:e0:33:9b:a2:c5:a2:f3:46:59:96:00:6e:28:
6c:26:e7:e1:bb:18:e1:c5:cd:0e:28:eb:cb:9a:73:80:ca:41:
b3:83:f4:1f:13:b7:0c:c2:d1:45:06:de:49:97:76:b9:a6:4f:
7a:5f:06:80:ba:b8:4d:4a:c8:ff:39:14:da:e0:6a:a4:72:8b:
46:60:70:b8:0c:74:67:f8:ab:93:0a:19:20:6d:f3:11:b0:5c:
aa:19:99:20:e9:80:76:cf:31:29:6a:98:4b:03:aa:4c:6b:87:
f9:aa:28:cb:84:2a:d1:84:51:e1:9f:98:02:78:99:5f:43:43:
c3:43:a1:ce:ef:84:1c:89:64:8e:43:aa:0a:1f:d8:c9:b0:d3:
25:04:98:c1:c4:d4:97:51:1e:67:8a:61:03:ca:24:cc:76:73:
7d:67:38:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx
NzA3ODIwNzQwHhcNMjYwMzI0MTgxMzE4WhcNMjYwMzMxMTgxMzE4WjAYMRYwFAYD
VQQDEw02OWMyZDQzZS1mYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhP6t9GeCyJG4WvvJTUJ0z6qvepQtm+eVGOy6YPNR3drlZXw3RWv685KFMHsh
rQrLdwxGjJpaHCdfKMj9rxcEQ2XW6YfwvX+orPKWYcQWcD4LIpmTaLx1KJ7Gmx7H
9ZYjKksurh42KrsK7sfra8hnF/FcK/hy8jZL27nSIVGO/vZqSBq7bO5+duvvhwQk
yr2eab3o3lv1IsLTJrkJ7qKFRR+wU46u5j/tMww1QjD7YILpQS3BKd2s6ihgJzVE
nJ9Nv9XROQM8omr6U2ESiVroAjZXFv9VDe1u7Y2vYm4Mpbh8fVkaBP+UQ4bN5qNz
wkdDy2qQbrShly4TGWpEyLTTxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFi3SwSc
SM36dvUn99im+MWVDuiIMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5
RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY
NFZnNUFxanZudVVYQjRJSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdL+8gUarCpGFJwjo3LyONrFhrgl2WOvJLJV/AMuPP26FeEMEtqM/ie1iYMAy
iKTgJNqW3mTSdxrYSkO001nFNq3tB5nkGARSDkLv2YJS47ZQCRA7q3d31J/Od5mW
zLXgM5uixaLzRlmWAG4obCbn4bsY4cXNDijry5pzgMpBs4P0HxO3DMLRRQbeSZd2
uaZPel8GgLq4TUrI/zkU2uBqpHKLRmBwuAx0Z/irkwoZIG3zEbBcqhmZIOmAds8x
KWqYSwOqTGuH+aooy4Qq0YRR4Z+YAniZX0NDw0Ohzu+EHIlkjkOqCh/YybDTJQSY
wcTUl1EeZ4phA8okzHZzfWc4rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:30 2026 by rpki-client