
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.mft
File: 9HY0eqIgHU4uBkYUQ2iBglxsxYA.mft (raw, json)
Hash identifier: 75KcT2QNfp1Ex+NJDiOiqiEt6zmS3IS+HGYt760SFi8=
Subject key identifier: EF:B7:3C:E8:7D:01:5B:F3:46:8D:38:9B:36:23:BC:84:7D:31:C6:29
Authority key identifier: F4:76:34:7A:A2:20:1D:4E:2E:06:46:14:43:68:81:82:5C:6C:C5:80
Certificate issuer: /CN=A9165D75/serialNumber=F476347AA2201D4E2E064614436881825C6CC580
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9HY0eqIgHU4uBkYUQ2iBglxsxYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.mft
Manifest number: 07
Signing time: Mon 05 Oct 2026 09:45:00 +0000
Manifest this update: Mon 05 Oct 2026 09:45:00 +0000
Manifest next update: Mon 12 Oct 2026 09:45:00 +0000
Files and hashes: 1: 9HY0eqIgHU4uBkYUQ2iBglxsxYA.crl (hash: lIZsNQL2bQ62BrN9fsy5a49W71B1CHhr07WZen2CU5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.crl
rsync://rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9HY0eqIgHU4uBkYUQ2iBglxsxYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D75, serialNumber=F476347AA2201D4E2E064614436881825C6CC580
Validity
Not Before: Oct 5 09:45:00 2026 GMT
Not After : Oct 12 09:45:00 2026 GMT
Subject: CN=6ac3719c-ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:60:32:39:71:3b:1b:b0:80:23:cc:f3:b3:
0c:de:3e:c5:70:65:df:c4:58:46:08:e9:ac:1b:9d:
bf:85:c1:44:1c:ab:d1:fe:7a:7d:dc:07:14:99:29:
4d:30:29:34:36:0c:46:a5:00:a5:54:ff:39:f9:f7:
6a:bf:a5:86:b8:a1:05:bc:09:5a:c4:35:be:af:96:
5c:32:da:05:2e:75:ad:88:e2:6d:f2:f3:53:f8:04:
0b:99:b1:1e:c0:15:b8:51:52:08:45:02:bd:e6:c7:
8d:2d:10:de:e7:64:2c:1e:73:c3:64:39:0d:1f:dd:
ee:ce:2a:e9:b1:17:43:7d:b7:29:43:b5:71:81:d7:
7a:62:32:53:d5:b3:6c:37:36:ae:df:09:54:13:42:
0e:a8:86:84:dc:e0:4a:e9:c7:3f:cb:77:b4:d7:59:
5a:21:7c:59:df:00:0f:99:49:0d:c8:86:dc:8d:e7:
41:c4:75:59:ed:f1:75:b7:f9:0d:22:27:16:97:3f:
b5:8d:72:46:71:1b:0c:73:21:41:87:c6:fa:a5:96:
f6:64:67:c2:33:64:67:f8:31:6d:e9:44:15:11:59:
2c:0e:98:d2:0f:ab:57:65:46:a2:c1:59:67:2b:17:
97:35:74:db:b1:aa:bc:b9:94:b9:20:2f:0d:24:93:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:3C:E8:7D:01:5B:F3:46:8D:38:9B:36:23:BC:84:7D:31:C6:29
X509v3 Authority Key Identifier:
keyid:F4:76:34:7A:A2:20:1D:4E:2E:06:46:14:43:68:81:82:5C:6C:C5:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9HY0eqIgHU4uBkYUQ2iBglxsxYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D75/A8B00762B8D211F1BDCDB98F3311F970/9HY0eqIgHU4uBkYUQ2iBglxsxYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:ee:c8:a6:6c:3b:a5:29:6b:e7:7c:a1:77:3d:a8:f5:ac:
ba:38:55:40:40:7d:e5:84:0e:3e:d1:83:12:6a:d4:34:21:db:
16:31:b4:ad:37:9c:58:64:7c:cc:5c:d9:64:8b:a3:4d:ab:a9:
00:5a:ac:c1:f3:79:48:83:d4:f1:86:a8:59:9a:9d:02:9c:98:
1d:2c:34:3a:8a:84:6d:7f:05:8e:cd:ca:74:f8:d2:27:70:67:
c2:3a:6f:1c:fb:2f:6c:7a:24:bc:eb:67:7c:bf:93:8e:8e:b4:
27:9b:f2:03:31:be:9f:6b:c4:dc:e9:fd:9f:42:19:27:2b:da:
bd:ac:08:ba:41:dc:df:9c:a4:82:cf:3c:2a:b2:98:cc:57:89:
07:c7:f9:6d:71:8b:8d:54:6d:21:e5:a5:9a:da:96:bf:99:f6:
ec:34:e1:c3:ed:76:ac:eb:47:2e:cf:6a:f8:18:e8:28:20:76:
c1:20:2a:c9:3a:26:6b:8d:36:a1:e9:41:2e:dc:15:c5:db:ce:
ff:c0:58:29:aa:30:60:8f:e3:d2:ea:23:54:9f:d7:14:7f:73:
c0:36:9e:f4:67:9e:39:21:d0:7a:7e:17:3b:42:8e:cf:f5:cc:
10:2b:e9:29:ce:4c:b6:d2:6e:bd:82:3c:af:fa:06:8b:87:47:
a0:71:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:23 2026 by rpki-client