
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
File: 9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json)
Hash identifier: mdlHw554JwsXsCByv0JAQjzjoYs3vMHQ9BghvDs2+ng=
Subject key identifier: 8D:30:F4:1C:2E:14:25:A7:65:CC:BB:33:ED:7A:85:81:A7:96:F1:93
Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
Certificate issuer: /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
Manifest number: A0
Signing time: Wed 07 Oct 2026 07:50:50 +0000
Manifest this update: Wed 07 Oct 2026 07:50:50 +0000
Manifest next update: Wed 14 Oct 2026 07:50:50 +0000
Files and hashes: 1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: /ppGqmR8IsjKm9Hs2QJK+VKCRlXduB2+eoMzhDjpIks=)
2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: 6WkyvNNnzEKbhZLPxsCnSzPE8ILtaJ60SG7+lHKUE78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00
Validity
Not Before: Oct 7 07:50:50 2026 GMT
Not After : Oct 14 07:50:50 2026 GMT
Subject: CN=6ac5f9da-e873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:61:d4:34:d8:0d:32:73:6b:7f:cc:cd:ea:
bb:72:bd:e3:4a:24:20:e0:84:30:da:29:27:e2:52:
e3:e7:ca:aa:39:18:82:de:0e:ba:d0:19:23:0d:d8:
bb:d9:59:2f:02:18:08:1c:99:5f:65:07:1f:59:2e:
13:ab:2c:7c:1a:be:a8:25:b7:37:7c:07:07:4d:12:
e2:ee:27:b7:e8:dd:41:1c:50:c2:99:fe:ea:73:40:
23:fd:98:98:c7:cd:33:0b:44:f0:2c:5b:cb:cb:42:
e6:94:48:aa:79:c5:eb:24:3c:8d:9e:ab:9b:bc:dd:
97:37:91:bf:82:b4:1e:8a:43:88:15:b5:54:fd:fb:
35:b8:77:b2:41:82:25:62:e5:db:a2:7e:5f:0f:80:
a6:90:9b:05:26:6c:85:65:7c:4f:05:c1:b3:ea:b1:
68:b4:b9:d1:42:88:a3:50:f9:3e:f9:06:77:22:3e:
26:f6:6d:7e:09:ff:72:ff:e7:26:17:24:83:7b:7a:
59:f9:75:2b:b8:49:36:da:e5:5a:a2:f4:fb:4f:6a:
e0:e5:2f:9f:f1:9a:1e:35:1c:06:43:1a:8b:c2:47:
93:b7:93:f8:29:a7:d2:b6:2a:8f:74:c0:ac:3d:de:
e9:22:90:6d:2c:42:25:de:0e:2e:b4:b6:3d:56:db:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:F4:1C:2E:14:25:A7:65:CC:BB:33:ED:7A:85:81:A7:96:F1:93
X509v3 Authority Key Identifier:
keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:d2:e9:a0:92:a5:d8:05:8f:13:63:40:69:50:44:bb:08:f3:
3f:43:08:4b:4c:c7:02:6e:a2:71:67:88:95:c0:10:69:1e:c2:
90:e2:1d:cd:47:d2:ff:b5:da:30:0e:b2:66:84:65:ad:1b:5a:
e4:c6:5f:5f:9a:0d:38:a1:3a:d7:5d:b7:e2:22:81:1e:90:55:
e6:e8:9f:74:28:08:71:1e:97:0c:b1:fd:66:9c:a7:a7:9f:ed:
fe:a1:97:82:5f:b0:9f:e9:5f:63:b9:05:37:d3:58:fa:8e:bd:
7b:61:24:1c:fb:b6:40:c0:3e:9e:b2:37:de:a7:9a:36:8a:91:
79:4f:13:9f:97:4c:35:48:32:3e:5e:35:f2:07:f4:23:44:83:
01:7d:fb:52:4c:49:41:7b:e8:97:24:bc:7d:fb:1c:7f:ad:e9:
9c:50:89:c4:18:5b:c4:85:d3:d8:79:b6:b4:48:72:f3:76:93:
aa:02:d9:86:62:20:69:c1:1e:36:47:4d:18:e0:8c:00:e1:96:
26:7c:76:a7:6f:67:3f:28:50:75:d3:34:78:bf:1a:ea:e6:75:
ab:84:da:69:c5:55:c5:ff:cc:6a:7a:8c:10:a4:3e:6a:79:9e:
33:ff:6c:13:e5:27:41:90:bd:bf:61:4e:6b:5a:a7:b2:19:08:
9f:e5:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:28:22 2026 by rpki-client