
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier: w3Zt/NHVWTOeElPkdwA5lcgXSqns7Pe+WloqD21WSt4=
Subject key identifier: 41:C2:9E:CF:4A:D6:EE:35:7D:3A:4E:17:46:33:9F:81:89:97:50:29
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 07D16DDCBF8A0F0EB6BDAE08404805B058D2B874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number: 0304
Signing time: Thu 23 Jul 2026 15:11:09 +0000
Manifest this update: Thu 23 Jul 2026 15:06:09 +0000
Manifest next update: Fri 24 Jul 2026 15:23:09 +0000
Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: zawFSkORPDDIpb/1rLXIBnsD35thKplPaVMwimC61cM=)
4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
5: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
6: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d1:6d:dc:bf:8a:0f:0e:b6:bd:ae:08:40:48:05:b0:58:d2:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jul 23 15:06:09 2026 GMT
Not After : Jul 24 15:23:09 2026 GMT
Subject: CN=41C29ECF4AD6EE357D3A4E1746339F8189975029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:0d:d8:e5:9e:66:87:ea:bc:29:5f:18:6d:
63:31:3e:89:1b:b4:eb:bf:04:f3:35:47:7f:8a:1d:
2d:4a:83:6b:cd:02:4b:8e:ba:42:09:60:dd:ea:12:
85:38:54:5b:92:69:7a:93:44:e0:ed:0f:ef:89:11:
3b:85:cf:df:3e:16:f2:12:36:13:18:66:80:54:e2:
07:7d:25:f6:f2:ab:1a:95:33:5e:87:04:9c:c7:18:
9a:55:e3:fa:dd:e9:80:2d:63:f6:0b:c3:38:db:b2:
cf:26:40:eb:fd:3d:28:6d:78:c8:be:f3:f8:a8:0d:
5d:28:c3:a5:0c:27:42:c4:55:18:0b:96:37:36:29:
22:45:25:d9:6d:ee:fa:6b:87:0b:45:35:50:90:be:
df:97:92:f8:d1:ae:5e:fd:dc:f8:87:c5:92:36:b5:
5f:a8:ee:df:d2:da:30:38:ec:73:47:76:ac:93:1e:
86:bf:b9:5c:53:bf:a7:98:16:02:ee:22:22:e8:64:
1c:36:fe:4d:c4:b3:b9:9f:17:b9:98:11:b8:c4:e1:
94:ec:86:b7:fe:fe:7a:b1:98:5e:e5:85:51:67:82:
f4:b9:4c:ce:d4:22:8c:7c:69:24:18:32:f6:3f:dc:
d3:7e:61:09:6a:f3:ee:73:96:ae:e9:08:aa:90:83:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:9E:CF:4A:D6:EE:35:7D:3A:4E:17:46:33:9F:81:89:97:50:29
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:68:b4:b7:52:20:b0:70:df:9f:6e:cc:61:3e:40:4b:91:
94:ad:80:42:e8:04:a0:70:94:bd:e9:fa:7b:7f:7f:7d:e4:70:
48:9f:b2:a0:35:fe:a6:50:69:38:d6:05:11:58:02:51:15:79:
3a:52:f0:5d:f8:af:33:82:a3:8d:01:b6:db:97:82:82:00:04:
04:0f:4b:d2:36:6d:18:3e:45:a4:af:f9:68:c7:e1:be:ef:45:
b3:2c:a2:b4:9b:4d:86:5f:67:58:75:ea:29:b8:83:ba:cb:f1:
03:ad:9f:06:c6:a4:5e:72:ed:0b:de:ce:54:12:73:7b:af:31:
cf:27:05:53:75:60:8f:11:86:1d:44:62:88:85:5c:2e:5c:27:
d2:3b:6c:e4:39:d9:8a:06:9a:3c:b6:b0:12:4f:d2:8d:99:22:
15:96:fc:50:b9:e9:9d:b8:10:ba:39:36:d2:90:c4:16:dc:bd:
cb:bf:06:16:da:be:61:bd:f5:d1:c6:8f:e9:f7:e1:80:ca:f9:
a1:d1:3d:78:89:03:03:11:9d:c4:de:c9:9c:33:fc:d3:2c:31:
b3:87:ef:52:27:59:07:49:ed:91:cd:4f:04:cc:16:f8:a7:69:
7d:61:ba:2d:af:54:10:e9:90:a8:64:97:70:5a:3a:84:35:8c:
fe:d7:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:31 2026 by rpki-client