
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json)
Hash identifier: BhzATa1lqwFkLBQwtEyM+lzx3LYfL0FfYitxr1Kt1xY=
Subject key identifier: 8B:0B:85:53:67:A7:24:21:6C:F5:26:D1:10:B5:44:2A:F3:00:6C:E0
Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
Manifest number: 6F
Signing time: Wed 19 Aug 2026 08:44:47 +0000
Manifest this update: Wed 19 Aug 2026 08:44:47 +0000
Manifest next update: Wed 26 Aug 2026 08:44:47 +0000
Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: XakNj1VXpaNe/Lut+Pk5tS8t4gOXf+6VZbr2XhJgBEA=)
2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Validity
Not Before: Aug 19 08:44:47 2026 GMT
Not After : Aug 26 08:44:47 2026 GMT
Subject: CN=6a856cff-628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:dd:30:85:51:bd:b5:ad:b2:a6:57:c2:97:
91:57:80:38:2e:09:ca:76:f3:c9:d3:8a:ea:9b:9a:
0b:12:7d:52:3d:89:33:18:bc:ba:4c:63:21:8b:fb:
6a:a6:02:a3:67:f0:b3:d3:4b:e8:22:f7:56:37:07:
50:e7:89:87:86:a3:37:ad:52:a3:d2:cf:6a:a0:48:
0e:60:0e:82:b7:69:fc:0b:78:9a:ce:d7:aa:4a:f3:
3f:58:2d:4e:0c:99:5b:83:5f:de:57:c9:b8:75:b1:
47:33:91:5c:8b:75:c0:73:63:ed:09:fa:6d:0f:d4:
ca:07:cf:d0:ad:dd:44:2c:33:28:da:fe:3d:78:59:
82:ce:26:bc:71:be:31:27:29:9d:0a:c9:4a:80:b0:
26:24:8d:59:f1:cc:f3:a9:1e:c7:fe:5d:ad:48:5a:
46:12:11:36:fd:1a:e2:e7:d2:15:9c:c4:74:15:77:
3c:1e:15:0d:35:f1:29:d6:cb:bd:40:d7:58:71:b3:
1e:64:61:ba:cb:05:69:6a:5a:8e:ef:4e:7c:37:f0:
83:65:5e:27:36:05:57:9f:81:52:88:33:29:85:9d:
48:bc:ce:eb:f1:6b:fc:76:73:8c:6b:85:99:55:92:
95:07:04:4c:4d:0d:7a:4b:49:b5:b5:58:32:2c:cb:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:85:53:67:A7:24:21:6C:F5:26:D1:10:B5:44:2A:F3:00:6C:E0
X509v3 Authority Key Identifier:
keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:85:d5:a2:dd:f1:af:2d:73:b4:63:c8:60:92:84:e9:c3:3e:
c7:9f:ab:a7:b9:b5:a5:50:2d:55:4e:cb:7a:f9:65:07:c6:bf:
bc:5b:48:b2:b6:cd:77:3a:81:e5:cf:c3:c1:4a:76:c7:3c:b5:
02:fb:e4:22:4f:56:6f:69:27:12:e5:5d:48:cf:5f:3d:20:bc:
b8:23:f5:7e:e0:97:41:32:b0:8a:8d:87:67:54:48:b7:bc:8d:
fa:33:aa:6e:b8:c5:12:7e:03:37:a9:eb:28:1d:e3:0d:a2:94:
f3:8e:73:37:90:55:ff:1f:50:1b:22:f3:d8:31:1a:bf:b8:99:
cd:e2:7b:75:d1:5a:42:d2:ad:68:9b:97:67:44:25:78:f7:f6:
f7:54:e2:4e:77:68:d7:e5:a2:95:39:f0:80:ad:2d:e8:eb:95:
5f:d2:90:50:7f:4e:cf:88:73:a3:1e:68:25:12:13:64:a9:4f:
04:d5:91:bd:01:61:f1:44:54:bf:cd:e4:18:cf:48:27:93:1c:
da:2a:74:d8:b8:3d:70:d3:c0:dc:c6:58:e2:0b:7c:44:22:7d:
ee:3f:f6:d8:64:40:25:ce:10:68:28:55:e7:45:ce:a1:06:d5:
e5:3d:36:84:ff:28:6a:c6:e5:79:4e:64:f2:92:9f:e6:a3:80:
16:b6:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:46 2026 by rpki-client