
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier: ZHM2YfadsD66j2MVSg6wUsV5FIzLEj+YnEgJNYoWZ+0=
Subject key identifier: 36:35:0E:5A:3F:E8:B6:7C:DE:B8:9E:D2:69:30:3F:2D:64:DF:34:12
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 062C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number: 0625
Signing time: Tue 18 Aug 2026 23:06:07 +0000
Manifest this update: Tue 18 Aug 2026 23:06:06 +0000
Manifest next update: Tue 25 Aug 2026 23:06:06 +0000
Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: UMccLiSktKQ1QkyvkKopFSfPxSpx7CM5R2MgUDzCwKI=)
2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: y1fQwZPgOu336Lbyq8hEAWUDlZTJlYYK8G8/vltz1rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Aug 18 23:06:06 2026 GMT
Not After : Aug 25 23:06:06 2026 GMT
Subject: CN=6a84e55e-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:80:c8:d1:91:86:78:40:74:79:dd:e8:25:
c3:86:03:52:00:ac:ca:56:f6:4d:cb:c4:68:c6:c1:
5a:3e:b4:aa:de:44:60:0a:76:51:b4:18:88:5b:5d:
8d:74:b2:23:d6:a2:23:94:f8:18:47:05:8c:6a:3a:
87:69:2e:0f:d2:57:b8:71:09:87:df:0f:da:f1:f7:
95:ec:3b:a5:2a:70:13:a8:da:44:81:d9:59:76:39:
99:a4:04:c0:2c:0e:cf:c1:a5:09:da:44:9a:72:b0:
9a:42:4a:45:96:d4:b7:4e:e6:76:22:d5:5b:78:a5:
ab:3a:67:bd:ad:80:24:d2:88:2d:6b:f4:a6:c0:60:
bb:f9:a6:3c:63:8b:42:5d:4d:44:3e:58:b1:a8:a0:
37:c4:ed:07:12:75:9a:86:c3:5b:83:ab:7d:c6:01:
ef:2a:3a:a7:54:d2:19:fd:a1:2f:f4:6f:a3:b5:0c:
13:1d:5f:cf:49:36:c3:82:31:1a:4b:7c:bb:55:fc:
ad:b5:28:b1:e8:83:3e:db:4f:6a:8b:d2:89:82:1b:
d6:0a:2a:fe:4f:04:26:66:fc:b2:86:93:03:a2:03:
ea:20:87:75:5e:5c:09:f6:b3:5e:7d:0b:14:2f:0c:
4a:5e:8e:60:ac:89:52:33:4f:58:5e:ad:99:7d:2c:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:0E:5A:3F:E8:B6:7C:DE:B8:9E:D2:69:30:3F:2D:64:DF:34:12
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:91:5f:26:c4:f7:e7:fa:4d:27:1c:5c:3d:43:78:62:ce:
3a:b6:ce:eb:0c:51:c6:fc:1e:12:eb:81:11:2f:86:c9:9f:59:
21:33:e8:87:bf:bb:5e:80:ba:8a:a3:83:85:d6:b9:ff:92:6e:
97:d1:36:67:c4:4f:e8:ed:82:9e:73:60:9c:ae:5e:16:08:40:
e7:0b:77:fd:81:07:dc:69:14:6e:68:7e:e7:37:f8:73:b0:a7:
2c:b9:d9:1d:af:5d:6c:f8:f6:ed:51:2d:c9:0b:54:a5:c9:75:
9e:5a:a4:ed:fb:90:11:a4:5b:d1:1b:26:93:12:cc:cf:56:02:
f4:77:d4:88:89:1e:65:05:c3:15:ec:fb:7f:8a:03:51:d0:fc:
4e:54:e9:ab:68:0a:3a:5b:e4:42:68:66:a0:77:97:db:cc:bb:
50:1e:3d:39:0d:05:92:12:51:62:ba:0c:d6:84:57:3f:ba:89:
80:48:83:60:b1:ea:c9:9a:f1:a8:26:bf:c9:e0:a8:76:e1:81:
cd:be:7e:a7:bb:65:ad:e3:05:dc:e4:30:52:2b:c2:88:4f:6a:
0c:5a:82:ed:e1:04:c7:36:e4:00:16:dd:d1:e7:01:56:a3:fa:
d5:92:fc:c2:7c:a8:a7:b0:58:d2:69:57:e7:ac:d4:7e:8a:80:
d0:7f:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:30 2026 by rpki-client