
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier: fK+zvtzH4d1n4xhNf4kvoV+RpTkSeYU2vnnpTmEHVhc=
Subject key identifier: BA:F4:67:A3:98:D2:3F:B6:65:EC:9E:F7:E8:ED:5D:28:56:3C:5D:14
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number: 0197
Signing time: Sat 03 Oct 2026 04:59:22 +0000
Manifest this update: Sat 03 Oct 2026 04:59:21 +0000
Manifest next update: Sat 10 Oct 2026 04:59:21 +0000
Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: Ja19NiAL3XiudZvBvm3emXj5ysa88mT9ptThC2ApnpA=)
2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: pnNvJ0QcGVavN6ejXIRyXtFdc94Af5xYSFGkl4Uy/KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Validity
Not Before: Oct 3 04:59:21 2026 GMT
Not After : Oct 10 04:59:21 2026 GMT
Subject: CN=6ac08baa-cbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:0b:a6:bf:5d:5f:d5:16:d7:5f:fb:c5:d6:
64:98:df:7b:c2:06:7c:10:8c:58:45:23:ac:07:70:
f8:20:27:31:cb:85:65:2c:e1:e6:f2:85:76:cc:23:
9b:64:71:ef:a3:03:e6:d9:74:6c:fb:86:df:16:23:
0d:f0:66:6d:2b:7d:50:26:38:f6:bb:d9:b8:f3:20:
d4:2d:a6:05:b5:0e:b6:5c:dc:f7:fc:b6:a1:0f:7a:
63:e0:df:26:95:68:68:24:eb:f2:13:2a:04:43:a2:
c0:48:23:0f:14:81:09:ac:a0:39:a5:1e:df:9e:55:
0b:0a:f7:dc:f9:d4:6b:e5:35:eb:ae:b8:dc:17:87:
ac:04:db:10:2c:1f:7a:c1:ed:aa:e5:7e:35:aa:3c:
eb:67:dc:c1:5d:e4:f5:6f:69:4a:9c:0e:fe:3d:aa:
da:c5:c3:bc:17:2d:e7:fc:c3:ff:d3:0a:0f:15:ef:
3c:f9:da:4b:97:91:c5:cc:87:1c:b0:15:6b:7f:08:
bf:30:8a:96:8a:76:4b:29:0b:7d:b7:76:83:27:9e:
29:f6:a0:45:39:08:b0:8a:36:94:45:55:fd:4e:87:
64:dd:f3:33:3f:1d:51:05:34:ab:0d:0c:30:30:1e:
4f:79:df:cc:31:f6:a6:a8:c5:bd:0f:b8:99:46:a9:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:67:A3:98:D2:3F:B6:65:EC:9E:F7:E8:ED:5D:28:56:3C:5D:14
X509v3 Authority Key Identifier:
keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:83:ad:11:72:45:2b:46:fb:b5:58:bf:7a:03:9e:d7:e3:65:
47:e1:f8:c7:c0:5d:fc:a3:a6:d3:f8:d0:9b:3d:07:af:0a:88:
6e:21:55:6f:f2:03:de:bf:bc:3e:fe:46:6e:ca:ad:df:92:85:
4f:df:00:2d:3c:0e:59:0a:5c:49:e2:d0:c7:58:8e:60:3f:b3:
4c:37:8e:47:c4:de:c9:30:4f:fe:6b:8b:c8:77:fa:85:9a:87:
ac:7e:dd:46:e0:eb:89:6c:af:2a:11:f1:05:dc:6c:e4:89:93:
b4:5e:4c:52:94:ef:88:d9:f5:bd:d9:21:83:6b:ae:81:5a:b5:
6a:0e:6d:fe:16:9a:c0:f6:e6:42:1b:fa:0c:5c:a8:ef:d4:b5:
d9:2b:a1:64:b6:c1:63:22:45:f7:41:87:10:db:1a:60:0f:29:
0d:eb:8b:b9:be:be:e7:16:07:10:7d:54:bc:d1:cb:35:2f:df:
a6:0e:0a:b6:7b:66:12:f4:0d:01:6d:27:f9:ae:29:17:a6:37:
92:38:69:4d:7b:82:f4:30:d8:91:e6:97:ff:e1:ad:32:ed:76:
74:df:40:31:55:13:51:7b:b9:fd:ec:60:58:45:cf:a6:ee:01:
0f:65:d8:4d:1d:3e:dd:ae:73:4b:ea:79:36:bd:9d:25:ef:84:
3f:2a:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:39:34 2026 by rpki-client