
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: oIl28LVsfXFEuDnXN4bl/VxUCNlFDp72raIkMuvVMtU=
Subject key identifier: 5B:72:D6:67:92:40:01:BD:6F:3B:AC:ED:E2:15:18:74:83:3E:A9:2F
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 04EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 04E3
Signing time: Tue 08 Sep 2026 23:45:09 +0000
Manifest this update: Tue 08 Sep 2026 23:45:09 +0000
Manifest next update: Tue 15 Sep 2026 23:45:09 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: sqMonN93UF0TAElcSHIaFnRyqHhLVkW7LeyDDTde3ko=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 23:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Sep 8 23:45:09 2026 GMT
Not After : Sep 15 23:45:09 2026 GMT
Subject: CN=6aa09e05-74e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:12:7d:90:5b:02:f9:54:90:04:9a:f3:b1:
00:e8:98:c3:c4:a8:0b:92:89:4b:bd:f6:9d:d2:5f:
8f:24:74:b2:a5:a5:f2:ae:24:34:78:32:54:9d:6d:
cb:0a:4b:21:b9:f2:a8:66:b8:fc:e9:46:d5:74:9f:
52:6d:d1:87:b8:10:e0:dd:86:7d:62:83:40:c9:0d:
ac:90:da:48:7f:05:c7:f3:aa:4e:d8:84:7a:02:7d:
ff:8c:3a:79:9a:13:bb:de:d1:38:60:c6:75:75:a4:
3e:45:71:88:10:35:81:8d:e1:6f:00:29:bc:2a:0f:
35:17:71:35:48:d3:7a:d0:8c:4c:21:13:3a:b3:de:
47:f1:96:21:54:64:00:c6:fa:65:2e:04:ea:fe:05:
e7:3f:5e:d9:49:58:6d:f2:96:9f:bb:8b:50:6f:5b:
96:2b:60:85:e9:f9:43:58:0c:66:e1:b4:27:d7:5b:
c1:89:f3:dd:b7:2c:97:cd:bb:a6:50:27:06:5e:fe:
d8:07:a9:5a:ec:5a:89:95:be:9b:10:c3:2d:62:7b:
1a:bf:79:cb:0a:8a:9e:49:d1:30:66:28:17:04:3f:
16:89:12:57:28:21:94:72:35:d7:45:77:32:ae:56:
2a:c3:82:7f:7e:c1:b8:1e:aa:26:c9:36:0e:1a:3e:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:D6:67:92:40:01:BD:6F:3B:AC:ED:E2:15:18:74:83:3E:A9:2F
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:18:12:44:84:7b:40:0b:d9:db:59:46:bf:46:47:92:0d:fd:
73:78:cd:77:3a:99:f7:1f:17:f1:f3:1f:91:5d:ab:50:40:da:
d3:38:a9:c7:ee:ea:26:e0:a0:6d:7b:84:a0:31:58:54:90:79:
8d:e1:f7:47:38:20:c5:1a:46:ee:4a:c0:76:27:47:e1:b0:15:
25:72:6d:b5:8d:a5:cc:b4:1b:37:8d:1c:8a:d4:08:ee:2f:7d:
8d:50:47:a4:f0:14:5d:fe:48:83:bd:d2:00:c1:c4:39:ed:f4:
df:0f:23:23:9e:15:f9:9d:b1:b1:c6:f7:b7:6c:fb:71:2e:f9:
20:1d:05:1e:1b:da:2e:f6:dd:b3:81:c8:0b:c8:64:d3:2a:65:
fe:66:d4:88:63:6c:e9:4b:04:cb:79:e9:2f:53:c8:59:03:15:
8e:bd:49:92:96:5b:03:70:d7:97:e9:35:52:29:4a:20:01:15:
e0:d6:2f:ca:78:e2:03:36:97:3b:f1:a4:01:b2:f3:79:84:23:
8e:9f:ec:d7:69:8c:64:1e:e8:79:80:c7:ad:80:15:0e:1b:4c:
b8:3a:df:d4:2a:8f:56:4c:8d:d6:2c:eb:72:f6:26:a6:3a:0a:
67:ea:1f:1d:e5:d6:19:02:d0:f5:2b:7e:e0:0f:fc:37:60:c2:
63:c3:35:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCQ0ExMTAvBgNVBAUTKEY0Q0M0MzA0RTE3OTBFMDhGNUVDOTI5QTg3MzcyMjY5
RDA4RkI2ODEwHhcNMjYwOTA4MjM0NTA5WhcNMjYwOTE1MjM0NTA5WjAYMRYwFAYD
VQQDEw02YWEwOWUwNS03NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutASfZBbAvlUkASa87EA6JjDxKgLkolLvfad0l+PJHSypaXyriQ0eDJUnW3L
CkshufKoZrj86UbVdJ9SbdGHuBDg3YZ9YoNAyQ2skNpIfwXH86pO2IR6An3/jDp5
mhO73tE4YMZ1daQ+RXGIEDWBjeFvACm8Kg81F3E1SNN60IxMIRM6s95H8ZYhVGQA
xvplLgTq/gXnP17ZSVht8pafu4tQb1uWK2CF6flDWAxm4bQn11vBifPdtyyXzbum
UCcGXv7YB6la7FqJlb6bEMMtYnsav3nLCoqeSdEwZigXBD8WiRJXKCGUcjXXRXcy
rlYqw4J/fsG4HqomyTYOGj6tZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFty1meS
QAG9bzus7eIVGHSDPqkvMB8GA1UdIwQYMBaAFPTMQwTheQ4I9eySmoc3ImnQj7aB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0JDQS82MkJDRDVERTdB
OUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURnajE3SkthaHpjaWFkQ1B0
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNeERCT0Y1RGdqMTdKS2FoemNpYWRDUHRvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0JDQS82MkJDRDVERTdBOUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURn
ajE3SkthaHpjaWFkQ1B0b0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6BgSRIR7QAvZ21lGv0ZHkg39c3jNdzqZ9x8X8fMfkV2rUEDa0zipx+7qJuCg
bXuEoDFYVJB5jeH3RzggxRpG7krAdidH4bAVJXJttY2lzLQbN40citQI7i99jVBH
pPAUXf5Ig73SAMHEOe303w8jI54V+Z2xscb3t2z7cS75IB0FHhvaLvbds4HIC8hk
0ypl/mbUiGNs6UsEy3npL1PIWQMVjr1JkpZbA3DXl+k1UilKIAEV4NYvynjiAzaX
O/GkAbLzeYQjjp/s12mMZB7oeYDHrYAVDhtMuDrf1CqPVkyN1izrcvYmpjoKZ+of
HeXWGQLQ9St+4A/8N2DCY8M1/w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:33:10 2026 by rpki-client