
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: NXWGicXSxWbM6glPkf4jbHpbF6waYC9BrQxacAhZ+es=
Subject key identifier: A5:F6:17:AA:1B:E4:44:0A:42:A2:39:C9:D0:97:FD:E4:9B:94:53:95
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 150D
Signing time: Fri 18 Sep 2026 16:48:08 +0000
Manifest this update: Fri 18 Sep 2026 16:48:07 +0000
Manifest next update: Fri 25 Sep 2026 16:48:07 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: NPMWZE1mcWdUpU+vvppn7/vi05BjXKJy3W91RPji510=)
2: 983A5536450611F093EC3A65C4F9AE02.roa (hash: rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=)
3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: vb+PgKr3CsY3jfH+MFyFgbnwnwtfBrgXKUjCdpIDvJ8=)
4: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: NqFw3mgMpkOvoVPWGjo2SvS7iIeakeWssWWni91l9EM=)
5: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=)
6: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: jZuSh+WR7sCoYoKT4uhJCvNVaW6YZAz1ccOdtL1PD1o=)
7: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=)
8: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=)
9: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5442 (0x1542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Sep 18 16:48:07 2026 GMT
Not After : Sep 25 16:48:07 2026 GMT
Subject: CN=6aad6b48-ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:30:13:ae:cd:5b:83:ac:65:7a:44:5c:f6:
62:9a:52:dd:af:ce:17:0f:70:6a:7e:43:f7:1f:7b:
8e:9e:d3:57:e0:e7:1c:f8:1b:c0:11:98:df:3d:b7:
db:3b:7a:d7:9f:46:d0:48:8d:f3:9a:1a:cf:bd:6b:
ea:bd:86:2e:9b:12:8f:91:4d:1b:39:2a:ef:88:25:
ff:f1:3b:40:c8:e4:a4:c4:54:bb:cc:ad:f5:b1:df:
ac:8e:88:eb:5f:dd:00:ae:0b:19:0f:86:81:37:6a:
c4:a1:1e:0f:a2:8f:e4:9f:ac:75:6b:7a:9b:c8:b3:
56:d5:c2:75:d9:80:10:9b:13:5c:6f:62:12:59:66:
6b:f4:7b:6b:ab:63:50:63:4e:53:ef:c7:8a:76:37:
bf:d8:b6:13:76:ad:06:cb:3b:e9:97:91:c9:09:1c:
70:22:b9:94:d6:bc:78:ea:8d:d5:7d:a4:96:fc:f0:
42:d8:03:3a:ad:31:62:6d:f0:bb:f0:ee:31:9e:7d:
d5:47:7e:18:bc:4b:a7:0e:0f:d3:2e:3c:39:3f:65:
ae:dc:e3:c7:53:7e:0f:e8:b7:28:15:7e:46:70:4b:
86:f6:e9:c9:1c:fe:dc:17:30:83:f1:b0:19:0c:77:
ff:fb:4e:42:24:91:25:6a:d7:18:6a:2b:4c:f1:5d:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:17:AA:1B:E4:44:0A:42:A2:39:C9:D0:97:FD:E4:9B:94:53:95
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:67:4f:99:a5:00:8d:c3:ea:52:fd:62:f6:db:26:b6:05:
b4:3e:bf:ae:64:22:15:0c:91:aa:2f:47:07:b9:66:0d:bb:af:
97:0b:3e:4e:ce:f8:75:4d:96:60:63:b7:1e:19:ae:ca:53:f7:
ce:3b:c1:ca:78:e9:7f:2d:17:64:a1:4a:bd:20:1d:fc:28:ac:
bb:b6:18:22:f2:a7:e1:c4:ba:76:77:04:1f:6a:f7:26:fa:51:
98:81:ac:74:fb:05:77:25:5a:a2:cb:2a:74:1f:72:cf:e5:7e:
f1:02:5f:e9:81:de:3b:f6:48:2f:4c:e3:dc:49:f1:6f:86:a5:
b4:04:25:ef:6a:4c:6b:d4:0c:95:5f:fe:e6:bb:6e:52:06:f2:
f4:ba:f8:98:9f:7e:78:06:1d:7c:b6:b1:41:86:8a:c9:f9:33:
a2:3d:5d:1c:1c:e5:3e:26:5d:8e:4a:0b:8c:1c:3e:3e:c2:dd:
99:58:5d:5d:81:1e:8f:69:cd:1d:9a:97:9a:b6:d0:29:2b:b1:
2e:eb:af:1b:63:63:34:c8:06:fd:13:0f:97:d3:56:0e:5b:a3:
47:c7:47:85:31:59:cc:f7:97:64:b7:fc:10:b1:bd:48:8a:70:
12:a6:5d:b5:42:f4:eb:65:a5:d0:95:95:5f:a6:62:66:4c:ad:
59:b7:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 00:22:11 2026 by rpki-client