
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier: nyi3hGLzWUVJeJfTK3qfB9g0x5sQVfc3jA6Rq91kukM=
Subject key identifier: EC:6B:75:C4:BF:92:E2:CF:58:9F:1C:B4:97:F1:53:03:30:5F:0B:6F
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number: 029F
Signing time: Tue 27 Oct 2026 01:50:29 +0000
Manifest this update: Tue 27 Oct 2026 01:50:29 +0000
Manifest next update: Tue 03 Nov 2026 01:50:29 +0000
Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: O6mXjuEujJo/9lJEH4qshs8exjlQIx9Xp4RVEt9Wgbw=)
2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Validity
Not Before: Oct 27 01:50:29 2026 GMT
Not After : Nov 3 01:50:29 2026 GMT
Subject: CN=6ae00365-bf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:5b:8a:b1:ab:4e:ab:6f:49:d5:6b:69:34:
eb:01:15:b6:20:d1:34:0a:56:d0:36:74:38:f0:9d:
83:fa:92:ce:fd:57:1e:b9:c0:71:3b:71:85:26:ee:
de:4d:64:d0:6c:87:22:d2:67:ef:73:4a:05:34:ac:
0a:c0:8e:fe:3d:8d:e3:ff:5e:41:99:93:74:4b:97:
a1:b5:a8:fd:d3:33:24:85:de:e1:11:52:1f:cd:0c:
c4:1c:f9:54:27:78:64:9c:8a:7a:e0:d8:f0:3c:99:
91:66:75:87:c8:c8:d0:74:af:2f:4c:76:16:29:a6:
b8:62:3e:f0:47:96:96:65:7b:a6:9d:a0:f3:c4:a9:
cf:78:3f:34:87:61:4e:4f:ae:46:4f:e0:36:24:98:
ad:17:be:c8:26:94:5a:ac:18:41:b7:dc:74:e3:ca:
a8:1e:72:b6:ae:dd:41:54:21:48:d0:38:e9:c6:0c:
38:8f:01:70:f7:9b:1a:e5:7b:71:3d:98:57:0b:e7:
1a:77:81:4a:a0:86:8e:62:87:8d:2e:5d:8a:2a:70:
1d:5e:79:71:0f:9c:f4:52:a8:3c:9e:0d:ae:94:a9:
ba:79:0e:af:1e:29:8f:ce:29:24:4d:d5:f4:0f:a8:
57:be:3f:bb:ed:90:17:50:eb:55:76:2e:78:c5:8a:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:75:C4:BF:92:E2:CF:58:9F:1C:B4:97:F1:53:03:30:5F:0B:6F
X509v3 Authority Key Identifier:
keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e9:e4:49:5a:66:aa:c1:35:62:c6:77:8c:b7:69:a9:1f:71:
ba:16:c5:c3:d5:e3:3c:92:39:c4:5a:84:36:f5:a0:20:49:2b:
d8:99:c4:e3:75:32:fe:dc:69:15:0c:47:13:68:2e:82:96:d4:
f4:ff:f3:20:a8:57:15:3b:6a:b9:c4:32:ca:40:a0:57:58:5b:
8b:08:7f:62:16:6b:98:dd:c9:11:64:89:6e:36:9d:85:65:08:
b0:0c:9c:b9:8c:d6:81:b5:42:c1:79:bb:0d:62:92:68:c5:99:
e6:5d:4f:fc:01:ff:f6:22:0b:d8:9c:5b:de:c9:84:70:bf:9d:
2b:eb:5e:90:9a:4e:50:14:93:6d:89:b3:90:ac:99:4f:e3:78:
a1:bd:c5:dd:b5:70:a5:57:ee:a3:1a:35:e8:d3:c2:60:50:d2:
7e:6e:62:e1:82:0b:fa:30:97:88:ac:fa:eb:03:95:8b:10:f5:
b1:4a:77:ef:f7:21:74:b3:ca:02:21:45:4d:f3:4e:e8:71:ef:
e2:b5:14:4c:75:12:40:e7:2f:27:df:dd:40:46:ca:6a:94:87:
11:0e:90:92:84:6c:1f:f7:a5:9f:8b:b9:2d:e0:55:f2:7b:44:
cb:6d:00:d7:6f:cb:67:2d:a2:b9:fd:48:70:27:b4:38:d6:24:
4f:69:da:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx
NDI4MjU1MkUwHhcNMjYxMDI3MDE1MDI5WhcNMjYxMTAzMDE1MDI5WjAYMRYwFAYD
VQQDEw02YWUwMDM2NS1iZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5opbirGrTqtvSdVraTTrARW2INE0ClbQNnQ48J2D+pLO/VceucBxO3GFJu7e
TWTQbIci0mfvc0oFNKwKwI7+PY3j/15BmZN0S5ehtaj90zMkhd7hEVIfzQzEHPlU
J3hknIp64NjwPJmRZnWHyMjQdK8vTHYWKaa4Yj7wR5aWZXumnaDzxKnPeD80h2FO
T65GT+A2JJitF77IJpRarBhBt9x048qoHnK2rt1BVCFI0Djpxgw4jwFw95sa5Xtx
PZhXC+cad4FKoIaOYoeNLl2KKnAdXnlxD5z0Uqg8ng2ulKm6eQ6vHimPzikkTdX0
D6hXvj+77ZAXUOtVdi54xYoRVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxrdcS/
kuLPWJ8ctJfxUwMwXwtvMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy
OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3
R3ptU1lmdkxrRTRVS0NWUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALunkSVpmqsE1YsZ3jLdpqR9xuhbFw9XjPJI5xFqENvWgIEkr2JnE43Uy/txp
FQxHE2gugpbU9P/zIKhXFTtqucQyykCgV1hbiwh/YhZrmN3JEWSJbjadhWUIsAyc
uYzWgbVCwXm7DWKSaMWZ5l1P/AH/9iIL2Jxb3smEcL+dK+tekJpOUBSTbYmzkKyZ
T+N4ob3F3bVwpVfuoxo16NPCYFDSfm5i4YIL+jCXiKz66wOVixD1sUp37/chdLPK
AiFFTfNO6HHv4rUUTHUSQOcvJ9/dQEbKapSHEQ6QkoRsH/eln4u5LeBV8ntEy20A
12/LZy2iuf1IcCe0ONYkT2naaA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:32 2026 by rpki-client