
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: onxW9s26bRL+OtivxiciB7xvZUB7i48c9y0rC/hK9JI=
Subject key identifier: B0:B7:9A:7F:42:75:A5:33:16:52:22:DE:ED:43:F8:53:83:97:72:CC
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: 021C
Signing time: Wed 07 Oct 2026 03:20:41 +0000
Manifest this update: Wed 07 Oct 2026 03:20:41 +0000
Manifest next update: Wed 14 Oct 2026 03:20:41 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: BzAW4lcZLwgnC+4AafCcbvYsURD2LPNfc7F1/vO/ia0=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: lgyx7/qafkJCguA9zUl+91jAGWqg8OIrfv5N1bTHWnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: Oct 7 03:20:41 2026 GMT
Not After : Oct 14 03:20:41 2026 GMT
Subject: CN=6ac5ba89-4c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:89:ee:7c:7a:da:7e:d6:96:84:d0:de:53:52:
20:9a:ec:94:cb:a4:83:da:51:8c:53:3b:89:ef:da:
a1:52:10:01:18:bd:5a:00:2c:62:69:17:ae:36:b7:
d3:9b:97:7a:e6:ac:8a:f5:df:38:da:ab:89:9d:82:
bc:8f:eb:77:c2:a4:45:6e:9b:f3:5a:ed:92:da:07:
e8:11:27:e5:21:72:f0:f2:e9:82:33:db:71:29:59:
1f:53:d9:ca:e7:76:1f:56:77:16:78:b4:46:a2:8d:
09:fd:8f:fa:35:d2:e9:b2:24:80:69:12:07:c1:f5:
b9:73:8a:4b:09:bd:93:d6:52:7c:e9:cf:59:8c:ea:
e0:43:eb:94:22:e6:1a:f5:18:af:19:97:b0:06:48:
6d:ef:85:27:23:fe:8a:ef:76:9f:42:6a:5d:9a:70:
b8:05:b0:b5:af:dc:a8:29:06:fc:bd:78:1b:df:6e:
33:09:f0:e9:96:6b:6d:eb:fe:0c:4e:5a:f2:d4:9c:
37:17:94:22:78:f9:3f:32:80:7f:79:61:2c:e8:8e:
bf:c7:53:9f:fd:1e:a4:63:94:7a:9d:85:57:67:d3:
06:dc:31:dd:f4:f6:cc:94:67:de:43:14:b7:34:1f:
08:ca:17:d6:bd:5b:ec:0b:f2:e9:bb:c9:c3:b0:57:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:9A:7F:42:75:A5:33:16:52:22:DE:ED:43:F8:53:83:97:72:CC
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:5d:15:09:ba:cf:f9:e5:a3:5d:3b:42:4c:dd:8b:0a:31:
fb:c6:59:34:6b:d0:c4:cf:30:12:3f:90:70:06:24:74:a3:8f:
3b:4a:8e:fd:fe:42:8d:6a:05:c2:8f:59:05:24:6c:7a:21:af:
a9:09:10:ca:08:0f:61:54:ad:8a:ce:26:92:f6:a8:2f:e6:72:
0d:9b:ee:54:77:cd:2d:6b:ce:e7:ad:eb:5f:29:28:a2:cd:65:
c6:2e:7c:78:18:1e:82:7d:84:91:e7:a0:35:cb:50:da:19:ed:
51:4f:2e:94:ae:69:e8:e3:e6:53:17:36:a6:11:4c:cf:87:ef:
e7:83:d5:54:82:17:77:98:5d:68:dc:a0:56:9f:4f:60:a9:3b:
52:d2:95:d0:36:ab:4e:e7:97:92:c2:0d:e6:fb:30:49:b3:d0:
6d:90:2e:8a:2e:3d:36:ce:6d:00:a6:b2:8c:5b:30:1f:39:df:
92:13:f5:62:30:aa:3c:61:1a:17:f0:b2:d2:90:e6:ee:ae:54:
02:de:3e:70:27:e5:b2:c2:4b:c2:98:28:df:fc:14:08:ed:43:
50:87:8d:a1:cf:1c:dc:49:ac:5f:04:57:80:96:3a:68:d8:01:
b4:ad:09:76:05:52:7f:a4:b7:0e:44:d6:5b:00:47:8a:6e:75:
8e:98:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:24:20 2026 by rpki-client