
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier: OU6FjAqoJ35cWf2+nrjBhHSR+3rvcrO8b7RSI9/+LQU=
Subject key identifier: C5:71:D0:90:C4:8B:64:C0:5D:6E:40:99:3F:BB:6B:62:E8:E6:9C:53
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial: 02DA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number: 02D4
Signing time: Wed 21 Oct 2026 01:35:40 +0000
Manifest this update: Wed 21 Oct 2026 01:35:40 +0000
Manifest next update: Wed 28 Oct 2026 01:35:40 +0000
Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: JCNzm8PzgYhH6QE/91dipBnEjm6Iw0Qj9lM3CW1N+VU=)
2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 01:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Validity
Not Before: Oct 21 01:35:40 2026 GMT
Not After : Oct 28 01:35:40 2026 GMT
Subject: CN=6ad816ec-340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:96:e9:46:be:d8:52:85:57:0e:2f:c5:7c:
0a:e4:7f:95:d1:41:3b:c0:83:fc:b6:14:11:40:8d:
53:e8:ef:09:a6:89:36:3b:62:28:fb:9f:a5:7c:38:
df:24:14:e8:5e:13:3d:0d:fd:30:7e:f8:b3:84:79:
e2:77:31:76:87:31:0f:fb:69:7d:ad:6a:d7:31:6c:
a4:cf:6b:61:c1:f1:73:2c:be:35:a6:0d:e5:7b:ca:
b8:c8:28:bc:8f:fd:f3:3a:bb:4a:24:75:9b:81:f4:
d3:df:50:4d:e9:1e:af:26:06:b2:98:9e:74:6e:dd:
75:2f:ca:c4:f3:05:c2:ca:c7:3b:a6:75:d9:83:48:
48:3e:ee:50:1a:94:24:ce:6a:26:b8:d7:fd:5f:9f:
2e:27:d6:b5:74:28:a2:48:da:e7:58:ab:b6:ef:b6:
39:8f:5a:f4:3b:5d:2a:b8:10:7c:41:89:72:e1:8c:
97:a9:fa:c9:cb:ba:3b:85:2f:69:31:5f:06:a6:e5:
72:88:cc:6d:6c:04:73:c9:d0:89:ae:2c:10:d2:f4:
d1:58:22:69:ff:a7:d1:0c:b2:0f:cc:43:5d:96:23:
75:56:1d:b9:23:63:ca:4e:9b:32:44:5d:54:2a:19:
5c:a6:4c:06:e2:91:74:9c:9a:70:db:84:0a:ca:86:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:71:D0:90:C4:8B:64:C0:5D:6E:40:99:3F:BB:6B:62:E8:E6:9C:53
X509v3 Authority Key Identifier:
keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:48:cf:27:3e:dc:9c:90:7c:95:09:42:ad:c2:7d:3e:04:
46:2a:13:ed:5a:ba:d6:16:4d:97:6a:53:bd:fd:30:d4:6c:77:
fe:c7:3b:1a:90:6c:98:41:38:83:7c:86:4e:79:a6:2c:7c:cd:
d8:c2:14:49:9e:25:6d:c2:da:05:7d:bc:15:11:e8:e1:c2:cc:
c9:d2:c9:3d:fa:a8:ee:fb:54:cf:db:0c:19:3d:58:d7:77:7c:
b6:38:a4:a6:52:1b:8b:ef:95:95:72:92:99:ec:c8:d0:f2:30:
93:97:36:fb:4d:a3:13:4c:a0:d1:e0:0f:c1:28:83:3a:91:fa:
86:f5:7e:35:ec:95:aa:ab:89:ad:28:e7:a9:b1:5e:20:6c:69:
5e:58:51:07:e1:c3:75:3c:5b:95:7a:28:ab:2c:50:1e:ea:4c:
fa:e2:c6:04:cb:2b:a2:e5:91:81:d4:c8:5c:30:67:34:b8:1b:
35:52:5a:8e:e5:7d:86:bd:71:4e:cc:b9:29:1c:9b:99:4a:07:
21:a7:83:e4:ab:da:67:7b:5b:8f:6f:6b:59:76:7d:7f:e3:e0:
6f:7c:ab:38:34:11:88:98:b4:59:34:af:7e:d0:40:1b:b9:21:
4f:0f:a9:1c:c5:1b:64:2f:dd:95:3a:c0:7b:a1:89:a2:7b:7a:
4d:6d:20:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjYxMDIxMDEzNTQwWhcNMjYxMDI4MDEzNTQwWjAYMRYwFAYD
VQQDEw02YWQ4MTZlYy0zNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGGW6Ua+2FKFVw4vxXwK5H+V0UE7wIP8thQRQI1T6O8Jpok2O2Io+5+lfDjf
JBToXhM9Df0wfvizhHnidzF2hzEP+2l9rWrXMWykz2thwfFzLL41pg3le8q4yCi8
j/3zOrtKJHWbgfTT31BN6R6vJgaymJ50bt11L8rE8wXCysc7pnXZg0hIPu5QGpQk
zmomuNf9X58uJ9a1dCiiSNrnWKu277Y5j1r0O10quBB8QYly4YyXqfrJy7o7hS9p
MV8GpuVyiMxtbARzydCJriwQ0vTRWCJp/6fRDLIPzENdliN1Vh25I2PKTpsyRF1U
KhlcpkwG4pF0nJpw24QKyoY92QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVx0JDE
i2TAXW5AmT+7a2Lo5pxTMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj
aWdVWkpIVFAtb2xydWFUcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAighIzyc+3JyQfJUJQq3CfT4ERioT7Vq61hZNl2pTvf0w1Gx3/sc7GpBsmEE4
g3yGTnmmLHzN2MIUSZ4lbcLaBX28FRHo4cLMydLJPfqo7vtUz9sMGT1Y13d8tjik
plIbi++VlXKSmezI0PIwk5c2+02jE0yg0eAPwSiDOpH6hvV+NeyVqquJrSjnqbFe
IGxpXlhRB+HDdTxblXooqyxQHupM+uLGBMsrouWRgdTIXDBnNLgbNVJajuV9hr1x
Tsy5KRybmUoHIaeD5KvaZ3tbj29rWXZ9f+Pgb3yrODQRiJi0WTSvftBAG7khTw+p
HMUbZC/dlTrAe6GJont6TW0gPA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:35:32 2026 by rpki-client