
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: V/O1IPnXSaS6jj2OGuCTqjormDBK61z91/IVGt/nRQg=
Subject key identifier: 1B:B1:7B:BC:21:5E:19:F2:B4:32:0A:F7:E0:42:08:A9:CF:94:62:DD
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 19EF
Signing time: Sun 04 Oct 2026 16:24:42 +0000
Manifest this update: Sun 04 Oct 2026 16:24:42 +0000
Manifest next update: Sun 11 Oct 2026 16:24:42 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: r/O5+FZtb/0k11mJolYxmDy/Bns+xOu6tvCjVMn2gok=)
2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: /shRGgwZ3mbHAgKktUyEwuWZHd2hVreg4D00pNYllXE=)
3: 576081D48B3711F18ED45BC74111F970.roa (hash: 6+87EP/7A4r0I8YjA4nzc2PDir7tQmWtumF+t0fLhuI=)
4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: CxnjJlPVJYgkZHfx3lMqWC7qbUOJonF6D4YbcSkU640=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6711 (0x1a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Oct 4 16:24:42 2026 GMT
Not After : Oct 11 16:24:42 2026 GMT
Subject: CN=6ac27dca-4c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:81:5c:d4:13:e3:28:b3:38:97:50:53:04:
c4:52:e6:93:bb:81:20:d4:52:25:0a:03:7d:c6:c4:
d2:0b:29:ef:2d:f4:07:65:00:5c:28:98:2f:92:f1:
da:83:60:97:d9:fc:ad:26:3c:24:68:10:7c:04:82:
fb:87:80:ce:2f:c2:2c:39:aa:c8:75:8d:d0:b7:40:
61:66:b3:e8:5f:c6:8b:79:f9:c4:c7:1e:e3:68:5f:
ea:6c:0f:07:b0:02:d4:1f:5f:39:d3:42:bb:0d:6c:
a1:92:4f:31:60:f2:58:90:52:4e:47:d6:21:ad:e2:
64:26:ad:34:51:c4:bb:aa:2d:83:f6:17:10:e4:b4:
dc:66:ce:7e:4d:4b:4c:da:2d:c9:12:6c:e5:97:43:
39:37:eb:2f:34:32:73:e1:0f:83:29:ec:01:15:07:
26:09:26:fe:58:14:b8:da:cd:af:51:e2:fc:13:a9:
1e:72:79:2a:4b:73:f4:e7:40:fe:70:1d:1e:e8:81:
95:15:ef:7e:e8:04:1a:8f:e6:25:2c:ff:70:8a:51:
3d:bb:64:c3:83:19:48:57:5e:da:24:46:7d:84:bf:
85:1c:46:cc:0e:60:8f:1a:ff:43:16:2f:49:7c:05:
33:d0:d9:49:62:c5:e6:d4:14:ce:9c:62:22:d2:34:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:7B:BC:21:5E:19:F2:B4:32:0A:F7:E0:42:08:A9:CF:94:62:DD
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:eb:30:e0:59:2b:7b:be:11:7e:1d:29:d3:62:11:7e:fb:27:
b8:48:7f:ab:19:1d:67:ef:46:6f:74:24:e1:c4:6e:bb:3d:ee:
c7:af:59:a6:65:5c:2f:2a:63:4e:e3:0d:6d:93:53:47:94:53:
7e:f0:39:6f:f4:af:a3:88:f9:6f:c7:cd:51:c1:10:9b:93:94:
4d:b7:a9:a8:b1:6a:2d:5c:54:c5:aa:f9:d2:fb:a6:1a:39:e4:
e5:63:24:09:b3:25:ac:82:a3:7d:0e:86:cf:62:ba:ec:54:db:
c3:ff:c3:f2:f5:f4:b8:4d:f3:fc:ef:37:78:62:8b:1f:e9:c0:
1d:35:0f:e8:87:90:26:c9:56:8d:8f:e2:99:69:73:55:1d:f6:
26:2b:b8:ff:fb:19:37:ba:4a:80:24:8e:44:d8:d5:bb:7a:d4:
b9:4d:b1:c2:10:18:49:5f:8d:65:ea:e3:e2:a7:a9:fe:ad:f2:
71:b7:2e:d7:af:a9:5a:a1:06:c5:30:ba:94:9e:29:65:a2:ad:
66:f9:c4:0f:8f:ce:d8:e9:1f:13:82:7b:7b:c2:6e:10:f1:f0:
c7:fa:48:a5:1c:17:10:e0:0b:98:c7:2a:1c:77:2a:9e:09:aa:
66:51:db:1d:bf:0a:e7:a4:d8:bd:9a:28:48:c8:8d:c2:0d:96:
4e:2e:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:44:24 2026 by rpki-client