
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier: ANaecTgc22wZ5Z5N2Ps+4G3MCc/6DgMDt2OrqCxkVyg=
Subject key identifier: CC:F4:00:B2:B5:23:32:74:16:A2:C2:4D:45:F7:D3:25:47:E0:77:08
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0DBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number: 0D98
Signing time: Thu 10 Sep 2026 17:54:01 +0000
Manifest this update: Thu 10 Sep 2026 17:54:01 +0000
Manifest next update: Thu 17 Sep 2026 17:54:01 +0000
Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: 17hWaGsnw5HYxTHtJU0yMBaVEs3u4MuLS2RID1FGru0=)
2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
3: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
5: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3516 (0xdbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Validity
Not Before: Sep 10 17:54:01 2026 GMT
Not After : Sep 17 17:54:01 2026 GMT
Subject: CN=6aa2eeb9-e2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:d9:23:97:56:4e:96:cd:a4:06:3f:59:48:
71:eb:cd:b5:4d:ce:8e:01:24:56:d9:fb:a7:39:b4:
17:e0:dd:c4:1d:40:c6:6d:09:49:b1:f9:75:34:cc:
94:b2:01:3d:4b:6d:60:d9:23:88:ba:fa:fd:f4:18:
bd:6e:0e:cd:ba:58:4d:11:85:d8:e8:2b:d8:02:42:
1c:74:f5:7d:6e:a0:09:8c:e1:15:49:17:97:92:24:
70:66:e8:29:92:02:1c:41:fc:58:bd:32:b3:5e:64:
e3:6e:fa:89:65:88:4b:c9:ca:3f:94:ed:5d:69:13:
43:d6:74:57:51:93:85:5a:85:6e:a6:6d:21:b3:b7:
67:85:0b:60:11:c1:7b:cd:b0:b5:ea:81:08:ce:91:
9c:43:1f:2d:85:99:74:d7:61:18:79:44:60:f0:7a:
aa:74:77:a0:2d:27:b4:a6:25:35:e2:c8:52:bb:ff:
d8:49:09:8f:e6:68:4d:be:0e:9a:52:62:59:f9:8b:
a1:e7:47:5a:4f:47:ce:29:95:17:e7:50:6e:39:26:
6d:2c:b3:56:41:e1:0f:8b:f2:61:87:96:9e:dd:97:
1c:df:30:bb:27:21:3f:70:c0:5e:64:23:1a:ce:c7:
21:ed:56:28:ab:00:58:02:34:bc:77:e1:e9:bb:41:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:00:B2:B5:23:32:74:16:A2:C2:4D:45:F7:D3:25:47:E0:77:08
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:10:7b:de:2b:c1:9d:5d:5c:1c:89:de:d3:8c:fc:6b:37:
1a:d2:8a:7e:2b:07:0b:fd:91:e2:ba:22:56:c6:6e:14:21:91:
e6:09:92:f0:9c:f8:63:d1:5f:76:c4:97:23:f9:66:bf:97:b0:
10:8b:34:a9:42:d3:df:41:12:3e:e3:e9:60:b9:d2:5d:01:f1:
62:8d:e0:e8:50:7f:d1:94:bb:f2:0e:31:a7:87:ca:cd:3f:4d:
1c:5f:c6:44:ba:9d:1e:b0:6a:1e:8c:e8:f3:26:ae:75:c6:b2:
f1:a5:22:71:7d:1c:1a:eb:2f:b1:83:8d:cd:c5:85:3b:d6:82:
98:8b:2b:08:29:69:d8:1b:37:58:d4:3f:e3:1e:fc:74:d2:6e:
3e:70:0e:95:06:8f:51:f6:90:3b:ee:6a:3a:b5:64:e7:0c:78:
5e:27:a6:89:09:d4:ae:9f:c7:8c:b2:ff:94:40:7a:72:4d:d6:
a5:51:99:89:71:14:e5:f2:20:94:b6:95:46:89:39:89:b5:15:
d9:a0:77:6d:eb:70:9b:d0:aa:c7:5e:7e:c7:26:82:cc:f8:9d:
99:b8:90:ee:1d:39:49:02:ac:dd:c9:ec:bd:ed:11:ea:b9:49:
4c:b5:2e:e4:f5:65:45:e3:67:b6:e5:d6:86:96:3f:1b:63:d0:
fa:4c:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:11:39 2026 by rpki-client