
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json)
Hash identifier: 50i1NYm/aWes/MtIB6kQ5jIP14hIA/xHjshsjki3Js0=
Subject key identifier: 66:F4:A6:72:09:1E:6D:86:FF:18:7C:35:80:51:13:E6:AE:F8:5B:E0
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
Manifest number: F4
Signing time: Thu 21 May 2026 06:33:39 +0000
Manifest this update: Thu 21 May 2026 06:33:39 +0000
Manifest next update: Thu 28 May 2026 06:33:39 +0000
Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: vg86kFmLBJb0xtC4FtP2GdN+fK8e+ePBBGiGNLN9taE=)
2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: fhUltqKS7ZF6Pkb9VSsVCiWn8eSyjmU/5PMkOGkbij8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Validity
Not Before: May 21 06:33:39 2026 GMT
Not After : May 28 06:33:39 2026 GMT
Subject: CN=6a0ea743-caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:66:c1:b7:41:09:19:23:ef:03:5d:40:33:
1c:6e:1c:d6:47:04:ab:98:7d:93:8f:84:8b:be:c1:
13:ce:93:f4:ca:53:68:0c:a8:a3:80:cb:0b:02:ce:
1d:eb:7c:00:4a:0a:72:31:40:64:9d:74:c3:89:8f:
39:6c:bf:a9:22:c2:dd:cd:76:73:35:87:fb:ad:8f:
f1:ab:c7:6c:6b:df:c1:73:ef:fa:03:88:e6:90:c7:
7f:c1:3e:57:d6:6b:3f:5a:e2:7d:8e:f0:e8:07:b4:
1a:cc:f7:ce:5e:99:09:42:b5:ef:ee:1e:13:0a:b1:
4d:7c:6c:53:93:fe:ac:6a:42:d9:48:78:f2:24:ee:
6e:bf:2d:3b:86:54:25:6e:dd:c2:ec:3c:82:71:e5:
2b:f3:03:c9:a9:5b:ea:f8:62:c9:67:37:29:26:88:
7b:99:8a:16:26:39:fc:44:bc:02:1c:0f:1c:dc:cb:
39:38:b8:5a:d7:6e:47:c4:6b:25:5e:05:44:70:30:
2b:fb:3e:b4:9d:d8:ef:fc:db:40:e1:22:d6:f3:6d:
9a:70:dc:60:95:7b:93:fc:25:91:e4:ab:68:5e:7d:
fd:86:7e:f5:0e:5d:c1:a6:9f:6d:4e:5f:67:29:44:
e8:1f:bd:18:3f:99:11:e9:30:cc:fa:37:90:aa:b4:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:A6:72:09:1E:6D:86:FF:18:7C:35:80:51:13:E6:AE:F8:5B:E0
X509v3 Authority Key Identifier:
keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:15:e7:18:9f:d3:84:2d:be:fa:66:d4:f6:45:2a:31:59:
0f:13:4b:8c:94:66:5a:2e:2e:27:35:c8:46:0b:28:cc:6c:13:
0f:87:99:71:0f:8a:0d:f7:8d:0e:29:63:48:8f:bd:9b:83:e4:
ea:a8:e3:c9:29:0c:22:e2:e1:a8:0c:0f:14:72:2e:ab:da:cd:
a3:7f:fb:2c:6c:5c:fe:31:54:1a:03:0c:3f:f8:d4:ab:95:66:
4d:16:75:33:4e:90:78:3a:88:66:ce:c4:a8:fb:88:21:97:0a:
d1:cc:a1:cc:e2:a4:52:48:f5:82:35:b3:b1:1a:d9:1b:0a:a0:
c7:32:c5:68:03:45:82:e2:0e:c3:5a:f3:68:6c:5c:0e:17:47:
52:a9:2c:7f:b3:33:cf:dc:5a:6a:95:b9:bb:8a:96:13:fd:a6:
25:e0:3c:07:fb:99:83:e5:e1:bf:8e:30:37:b2:8d:5c:ee:a2:
dc:c5:70:4c:0c:42:1a:e8:10:50:41:9d:6f:bb:b8:7c:ae:d3:
e1:6b:67:d7:32:be:ff:48:13:b6:11:07:cf:41:ae:f7:38:e8:
7c:cc:5d:94:16:b2:af:9d:73:87:ec:65:a1:ed:5a:c6:e5:b4:
43:64:26:8e:af:3e:77:c7:6a:ff:55:c0:45:cd:27:ff:73:b8:
8a:fa:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:35 2026 by rpki-client