
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: S7ShexOaqegrzEfcx+wFjEHScParJQYXVKrSr5/3Af4=
Subject key identifier: 35:0B:09:7A:31:C5:F7:C6:5D:3B:77:E2:9C:F7:8B:61:86:28:74:F0
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 19D1
Signing time: Fri 14 Aug 2026 16:23:13 +0000
Manifest this update: Fri 14 Aug 2026 16:23:12 +0000
Manifest next update: Fri 21 Aug 2026 16:23:12 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: hTC7CC9vt02Zm7GgJQKa2VBg2m9cuOdOtDKRE3+bK+g=)
2: 576081D48B3711F18ED45BC74111F970.roa (hash: nc/OgP4ZxQodvWUpKrJlHYLQ9UPsxnuWzZ5k09OqOjs=)
3: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 16:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6678 (0x1a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Aug 14 16:23:12 2026 GMT
Not After : Aug 21 16:23:12 2026 GMT
Subject: CN=6a7f40f1-7368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:a3:7e:44:ea:0c:dc:c2:3a:7b:08:51:fe:
c3:5d:40:7f:1a:3c:65:cd:98:ba:13:e4:64:b3:ed:
d8:f7:9d:4f:11:b6:d3:03:2f:10:a7:70:4b:58:13:
26:e9:64:27:00:ec:39:7d:74:5e:b4:bc:42:eb:94:
ad:65:4c:01:64:bf:e9:36:c6:73:ce:92:35:05:2b:
bd:10:bc:d2:92:a8:a4:52:e8:8c:b0:28:b9:28:ce:
35:17:b4:30:54:00:ed:13:cd:08:db:80:f4:f2:12:
40:5b:a9:fa:dc:7b:8b:1f:52:ee:bb:a1:93:2c:f9:
70:1d:3a:19:e9:21:f9:cd:08:7f:a8:94:1a:4a:26:
78:2b:b2:6a:8d:f5:54:aa:2a:9b:85:53:2e:d3:db:
fe:d4:64:f3:6a:01:6d:65:48:7b:d5:57:64:40:ae:
b9:cb:fd:e4:5f:df:bf:d2:f7:41:69:bd:1b:16:42:
31:60:80:b4:cd:ec:d1:a4:d5:61:18:6c:a9:4e:29:
dd:41:d6:b4:3b:47:0f:29:1f:74:a5:41:da:dd:1f:
05:80:ac:d7:be:36:af:14:46:ec:0d:25:1d:8f:64:
b2:a8:01:3e:7f:14:c2:67:81:00:2f:b4:ed:4e:e8:
ea:f2:22:9b:83:18:3f:fc:fb:4b:d9:03:58:70:1e:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:09:7A:31:C5:F7:C6:5D:3B:77:E2:9C:F7:8B:61:86:28:74:F0
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e7:c6:6c:38:f1:81:50:2a:11:50:23:83:62:43:1d:e6:52:
ac:44:11:f5:fc:82:36:fd:1f:a6:fe:8e:cd:aa:37:dd:d8:47:
68:4d:ee:fe:7b:db:47:7a:d2:9a:bc:f9:dd:b6:be:39:69:f7:
4e:f5:f5:44:9e:6a:4d:5f:4a:5e:88:b8:b7:74:07:dd:72:c4:
72:c5:1f:ce:ad:69:6e:18:2c:1e:47:66:4a:47:f6:b0:a8:c9:
af:8a:12:61:53:a2:a1:f3:3e:62:d0:90:81:11:3a:8a:8d:51:
0b:ef:2a:ff:25:7f:ed:a3:dc:b2:0f:d5:1a:aa:a5:09:41:db:
ad:ae:f8:96:bb:55:fa:8d:bf:77:62:07:d8:8d:0c:bb:44:b7:
a6:3d:99:64:ca:77:da:76:78:43:30:e1:4f:ee:91:4f:cf:4e:
5f:5a:fd:f4:18:19:66:69:39:7a:6f:00:0b:4a:9f:78:8d:d7:
fe:4d:73:2c:70:1d:71:5d:0a:0a:30:6b:17:c3:03:d8:64:ff:
1a:f9:7b:06:fc:3d:08:3f:b7:b6:d2:11:15:e6:0d:5b:53:17:
30:c7:38:c2:81:9d:bc:97:4b:59:c4:8c:0d:7b:64:76:94:42:
f6:5a:02:ea:64:96:fe:66:e7:81:23:d4:e5:4f:4f:3e:1d:b9:
b8:11:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:35 2026 by rpki-client