
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json)
Hash identifier: R8ALMv2dlPWS4Y2HMgesRa79/IGaax0Bo9bcBxXMl04=
Subject key identifier: 09:78:E6:14:73:97:63:AE:5C:6E:63:3C:2C:AC:12:99:7A:DA:7B:EA
Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Certificate serial: 098C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
Manifest number: 097B
Signing time: Mon 22 Jun 2026 20:05:45 +0000
Manifest this update: Mon 22 Jun 2026 20:05:44 +0000
Manifest next update: Mon 29 Jun 2026 20:05:44 +0000
Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: TooVE3XV33pnz/OxgVyZ2DXR9DQLSu0fydO87gB4WFA=)
2: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: NwQGIFAATHh4qnUFk70n9aQ78O4/bONv+lkYJMLHi/I=)
3: 46106B5077E811F0B822833AC4F9AE02.roa (hash: hVi8R5MoEeImI8jjWziXAy2bRDHXtAtcy1qMeWpfzVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Validity
Not Before: Jun 22 20:05:44 2026 GMT
Not After : Jun 29 20:05:44 2026 GMT
Subject: CN=6a399599-d942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:14:a0:31:98:49:36:4c:27:61:7a:8d:62:
db:5e:f0:fb:ba:71:b6:79:d3:70:1a:7a:cb:e0:33:
09:c0:61:25:e4:1f:55:a6:d7:b6:8b:c0:d6:c4:fd:
c4:a8:19:17:44:5c:ba:97:bf:34:15:ba:d0:42:5f:
8d:45:76:a6:fc:77:86:6b:ff:6e:46:1d:06:b4:d4:
c5:ac:a8:c2:e0:4a:fd:ce:a9:6d:f8:4a:51:c4:d2:
d4:c0:c1:6e:6d:07:c7:d1:46:b3:86:af:27:dd:d0:
41:53:c8:14:f2:0d:3b:3f:e3:ea:22:13:8a:ff:09:
b5:6e:02:12:45:91:cd:f2:0b:4e:90:4b:77:f6:2e:
4e:fe:d9:e5:a8:3a:98:e1:98:71:2b:c3:fb:bf:fc:
03:7e:7b:94:a9:b0:50:48:33:86:79:ae:57:da:76:
80:e1:fc:da:36:18:03:2f:61:b7:19:20:85:dd:d4:
5f:f2:d1:e9:1f:b5:64:52:8e:39:05:f5:cb:96:7c:
85:67:79:c0:8b:83:0e:78:28:f6:7a:78:2f:ba:7c:
7a:41:4d:ec:06:2a:50:b1:b1:74:fa:17:c4:a9:55:
55:61:c5:01:26:61:17:9b:9f:32:84:47:44:39:1e:
08:c7:aa:f9:74:47:0c:58:c6:91:37:5b:b2:fd:a7:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:E6:14:73:97:63:AE:5C:6E:63:3C:2C:AC:12:99:7A:DA:7B:EA
X509v3 Authority Key Identifier:
keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cd:6e:36:44:df:b5:e3:39:e3:c8:09:2c:0d:14:26:ea:37:
32:1f:b5:40:e5:6d:b7:65:15:06:24:7f:9e:1e:5e:49:ce:80:
67:82:c2:35:2d:06:dc:dd:84:0f:3d:a4:71:1b:9a:3f:8d:d8:
44:19:c5:ce:a9:50:7b:0a:dd:2a:e8:35:6f:7a:a0:90:d6:1b:
0e:ae:15:5a:21:97:99:ae:41:b2:35:9b:1d:cd:7b:44:74:7a:
de:54:37:d9:06:be:7e:67:34:7c:f8:bb:56:ba:5e:fa:e1:b7:
de:9d:1e:72:c0:b5:a7:de:fc:22:81:e9:22:06:87:ce:02:d4:
03:8f:ba:ea:17:3d:72:35:03:e5:0b:50:92:ee:69:cc:0c:e5:
13:f8:90:23:5d:ff:86:91:94:fc:f0:3c:bc:04:29:5e:8c:4d:
84:a0:93:6a:a8:33:e7:4f:f0:f9:d9:31:5d:bc:7d:c9:64:93:
98:2f:64:88:84:8a:c7:cf:ba:61:92:61:b7:37:25:8f:6b:86:
25:3d:b4:96:51:9e:50:cd:53:0c:c5:a4:4a:18:39:30:de:28:
24:62:86:6f:a9:10:00:85:09:1d:26:8a:a9:af:fb:6b:af:cb:
a6:11:19:bc:fd:e0:7a:63:d1:a4:dd:34:be:e5:4e:83:a1:45:
2f:c5:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:29:50 2026 by rpki-client