
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier: YD7BI1dzIZYHaEElh/WVjwCjCmawjKs9iSNfyOyIJKc=
Subject key identifier: 9A:8C:6D:D7:4E:C0:5A:0C:37:4D:94:85:64:83:F1:4D:09:A4:79:B2
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number: 01F6
Signing time: Thu 03 Sep 2026 03:25:42 +0000
Manifest this update: Thu 03 Sep 2026 03:25:42 +0000
Manifest next update: Thu 10 Sep 2026 03:25:42 +0000
Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: RYgOveSwyN4p+yozbshxqOdYkf2dI3Rlkh4/lHMLLYE=)
2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: 9ihywTWH8D0AsKW3lVgSJVrGmFJI4l3WNEZsqdCL8R8=)
3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: 7i/+pU2Et59KGbh7B5+qqFDZaAktF1/YoczW2JWdHFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Sep 3 03:25:42 2026 GMT
Not After : Sep 10 03:25:42 2026 GMT
Subject: CN=6a98e8b6-d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:12:e8:b9:99:5f:9d:96:89:8f:19:19:6f:
1a:06:8d:d2:24:ef:d3:3b:60:54:19:6c:83:08:ba:
50:91:6e:d7:da:64:81:e6:5d:5c:8f:e4:b1:ab:b4:
84:70:43:ed:19:df:f5:8b:d9:79:99:5f:a5:7f:01:
95:81:ce:61:8b:df:48:ac:a8:04:fe:c7:e4:4d:b2:
16:ed:75:65:b1:1f:36:60:48:be:31:8f:c9:0e:17:
22:3e:2e:88:3f:cd:e6:b5:f2:a3:20:33:77:d3:16:
f3:95:85:7c:f5:90:70:c1:e5:07:a1:de:f6:1c:ce:
b1:40:7d:58:23:8b:e1:87:49:64:24:70:1c:36:b1:
67:f7:91:07:ce:83:cb:1f:26:b4:4a:00:3e:5a:84:
8b:b1:6d:3c:10:a0:d4:c8:b0:8c:b7:d2:28:e8:c2:
9f:71:33:99:9c:b6:4c:00:6b:e4:98:07:04:c9:5c:
bf:85:f8:41:28:be:56:24:42:de:2b:e4:fd:74:1e:
90:3a:7d:ca:aa:15:e1:3b:68:25:99:aa:da:cd:ec:
b4:ae:da:ad:a1:10:52:25:be:75:9b:91:7a:3d:97:
db:7a:8a:69:71:1c:f8:50:94:69:0b:a2:61:74:5f:
fa:fd:12:0a:87:3d:09:19:12:6e:f3:20:84:7e:7f:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:6D:D7:4E:C0:5A:0C:37:4D:94:85:64:83:F1:4D:09:A4:79:B2
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ea:40:bc:51:29:c7:e0:ff:d1:28:06:ed:7b:dd:12:c6:85:
f8:e8:b8:e7:48:11:a7:23:6c:f0:37:67:ea:d2:15:f8:30:fa:
eb:7a:c8:f1:9e:cc:7b:0e:7f:18:a4:d5:10:99:32:6b:b2:2c:
ef:88:2a:71:b6:7c:9f:78:17:53:cb:c6:2a:b5:1e:c8:22:ff:
81:0d:69:d8:da:88:86:92:5c:16:4d:81:0e:d9:8d:42:7d:68:
e8:83:db:b6:8b:33:3e:2e:da:5c:dc:5f:97:f1:5a:ea:a1:d7:
f5:7b:6f:3a:0d:a3:a5:b1:4a:d1:9f:24:a6:2a:75:63:42:1a:
e6:68:ff:6d:34:bf:1b:f5:e3:ba:72:c5:27:2e:7e:dc:34:59:
a1:77:72:1a:3f:2b:fe:b3:23:47:4c:6c:ed:c9:ea:04:51:6b:
45:95:26:6f:2c:46:a0:3f:d6:9f:54:e1:69:37:f4:9e:04:a8:
2e:31:cd:d3:bb:9d:c7:27:a7:88:83:98:a4:33:6d:d0:f2:31:
ac:66:98:8a:df:0b:d9:e4:1f:bb:71:66:e6:ff:45:83:4a:9e:
87:76:bb:d7:43:78:06:fb:dd:36:e8:0f:51:1d:39:2f:f4:84:
ec:09:35:0e:83:f7:09:47:d9:3e:54:72:b9:86:ae:fe:26:81:
8c:fd:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:58 2026 by rpki-client