
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier: cZJ3YMWJ1FKA/0m53FdMTL2zx3C/kcGsfJHT7VDU5TY=
Subject key identifier: C8:FD:27:30:05:70:C1:61:37:76:1C:A0:1B:80:D1:1B:97:4F:CE:BC
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number: 013E
Signing time: Fri 17 Jul 2026 07:00:02 +0000
Manifest this update: Fri 17 Jul 2026 07:00:01 +0000
Manifest next update: Fri 24 Jul 2026 07:00:01 +0000
Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: Wmv38tgtZOnBarI9RUnAUcgtPNmyaD8Ty0YDcmuAjWA=)
2: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=)
3: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: mX9JGCxXIviWOAPP6dNB7CFOQiild0OOwc3z6WAcYj8=)
4: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: eSNXNT3NWZ6GsZhGHaO1BXwN0Y2Sx0KnClUlxO8jfHM=)
5: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: 5Lek0/TY1VnVxY+8seA94qWb37v69wiqgc1rAck09Kw=)
6: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: Nl4kN6jm52cuyAkdi4em+9Vsp1W9ZdwhxrwVDXbPRaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Jul 17 07:00:01 2026 GMT
Not After : Jul 24 07:00:01 2026 GMT
Subject: CN=6a59d2f2-9c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:cf:4c:cc:dc:69:c0:aa:9b:e2:4f:5e:be:
6a:36:d0:53:42:a9:ed:bf:54:ae:dc:c3:62:a8:00:
d0:39:a8:ef:c1:dc:b4:a3:1d:bc:02:64:9c:78:1b:
46:f1:2b:2e:69:87:84:0c:8e:b6:6b:11:1f:f8:12:
73:a8:77:89:11:81:70:7c:0a:8b:f9:97:8c:d2:50:
15:d3:4c:b5:b8:c5:9c:f1:93:95:fb:d8:35:a1:fc:
e1:38:bc:65:8c:44:b7:02:49:a2:de:ac:26:6c:37:
4e:b0:23:64:d3:36:1e:51:a1:78:cc:2f:21:c1:ab:
f1:ed:9e:72:ce:b3:6d:ed:d3:9e:10:02:d0:33:f8:
f7:60:9b:c4:01:72:1d:f5:e7:12:a9:2c:5d:26:36:
53:d7:e5:b3:4e:d9:69:f5:8d:78:f4:8b:e5:ff:49:
14:e5:0b:98:28:22:2e:9b:0c:ff:87:a0:4c:3f:41:
fa:49:fc:79:26:ff:88:ef:d8:b5:79:c2:81:a9:5f:
4d:3b:ff:7f:92:5e:1b:18:7e:be:47:60:53:ee:57:
74:7a:fc:3d:ef:68:52:69:fa:9c:24:87:a2:22:f0:
aa:72:54:d2:80:eb:4a:8d:98:15:b0:97:28:62:26:
07:c6:d1:65:bb:e5:83:1c:7c:64:69:34:5b:96:31:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:27:30:05:70:C1:61:37:76:1C:A0:1B:80:D1:1B:97:4F:CE:BC
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:e9:ee:bd:e8:e2:7e:93:7f:61:fb:65:c0:a4:55:15:7d:bb:
19:54:58:b2:f0:66:51:8f:17:c8:b3:4c:1c:ae:83:02:10:80:
39:81:7f:8b:70:eb:f8:2a:cc:71:15:38:40:74:98:eb:c4:c4:
fe:ea:5d:75:c4:11:7b:4a:97:70:f5:fb:b2:6b:98:a9:8a:7d:
4c:75:22:62:4a:3f:43:e5:d2:69:e4:60:26:f5:c2:81:89:30:
aa:6e:7d:70:cc:fe:c4:93:67:0a:bf:f6:34:b7:e7:7d:ec:c0:
70:c1:09:08:b2:43:ed:27:55:67:6f:59:57:9d:ca:6c:fa:4b:
31:46:65:7c:d7:c4:b6:b6:ac:b0:b6:7c:0f:0c:bf:3d:dc:2b:
a9:e9:fb:a7:02:47:d0:09:b8:67:b8:38:aa:7c:e1:a5:df:86:
d7:a2:29:4c:09:4d:45:cd:f2:f8:4c:6a:21:0b:e6:3e:6d:e5:
e7:0d:cd:4f:e7:76:8e:9d:71:25:e9:d6:1c:3f:52:cf:da:08:
fd:80:71:48:cd:f0:ca:e4:d2:aa:f4:d5:06:3d:58:40:c5:fd:
f8:fd:c7:ef:b1:f1:33:7d:49:f7:64:98:f1:a1:a4:fe:51:00:
c4:b5:ad:c9:8d:82:03:80:53:cd:3f:af:01:c8:29:90:be:5a:
0a:9a:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:34 2026 by rpki-client