
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: 1M0jqwXriPvgxzKrA/ULWp/jIzzld3myEhMvhDhtABc=
Subject key identifier: EB:01:5A:90:24:D4:A6:F0:E7:71:31:5D:D6:88:6A:D3:3B:E1:27:17
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 0485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 044A
Signing time: Wed 09 Sep 2026 00:17:21 +0000
Manifest this update: Wed 09 Sep 2026 00:17:21 +0000
Manifest next update: Wed 16 Sep 2026 00:17:21 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: bpwcblwkLIO1IlEOivsXkUAtrKEFESZVNSZyKUwlOF0=)
2: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: YnCZAx6Vfk4uiVS1odGK66l07BTuJZ1PvvCIcb6IGxU=)
3: E0AE0960457811EDA501504AC4F9AE02.roa (hash: DRwmAzweL4Ak2BD5SjTPzNdg10RjC2Co8/02Zwfk4E8=)
4: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: ZyJ9HBX0yGUnqABmPbxMrxF/SJbJK2wyjKSRKaAc5uc=)
5: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: +41red2tJMPOB/jumA+A/4ePkbLyzmti0kymWLM8jq8=)
6: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: HFuAlz1pB2WhoWwjkVWqpjZASIHDAofBkXq+bJlRjXo=)
7: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: xrhJ6oOtjqtoN4oZ8R45zvFsOJEMMHzVAd11yOFYLrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 00:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Sep 9 00:17:21 2026 GMT
Not After : Sep 16 00:17:21 2026 GMT
Subject: CN=6aa0a591-1593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:db:78:7d:87:f6:f4:c6:cf:0a:d0:ce:e8:
22:3b:4c:81:d9:2c:ca:ab:a4:2e:2c:54:e0:be:42:
2e:13:2e:d5:51:50:33:4d:a8:0f:91:e1:0e:4b:17:
67:48:54:a5:dc:6f:8d:d0:d3:5d:b3:ed:98:b1:75:
6b:5d:4e:31:7d:46:8a:34:9a:25:96:da:c8:bd:58:
be:2e:25:62:0f:25:08:28:0d:d0:6c:ff:b1:0e:7f:
fe:7e:71:5f:22:4f:af:60:41:94:6d:6b:29:73:4d:
e0:56:cf:fa:4e:75:14:32:2e:ba:f3:59:ec:60:c1:
8b:51:fe:55:29:67:75:c3:ab:a4:5c:fc:99:03:ff:
f8:bc:c3:83:73:b0:8e:f9:06:18:73:03:a7:18:4b:
85:c4:1f:8a:1f:40:93:46:94:92:6f:14:53:4d:00:
37:9b:14:1a:09:24:9c:79:44:00:12:04:54:ba:5d:
f2:f0:7b:27:5f:d7:f8:e7:af:21:17:39:2e:9c:3f:
3d:09:f1:5e:ba:49:2c:f5:e0:d3:a7:8e:ff:1b:51:
d1:4c:9b:3a:4e:bb:00:9a:27:f7:f0:2f:77:77:de:
b0:b1:56:72:9b:49:a9:91:19:0c:3b:ea:b8:7c:a7:
3b:65:3c:47:5e:c3:19:63:80:98:c1:91:0e:47:cd:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:5A:90:24:D4:A6:F0:E7:71:31:5D:D6:88:6A:D3:3B:E1:27:17
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:75:cd:ad:d8:18:16:6e:cf:cc:03:39:c2:71:d1:04:6e:
1a:f1:cd:5b:f1:91:8d:d2:8d:97:6d:02:ac:02:ee:5d:da:5d:
9f:1e:50:ef:14:0a:c7:74:01:25:a7:52:3a:74:07:81:1a:63:
c6:f4:51:36:50:a1:60:13:0a:31:4e:ac:29:38:d9:51:77:30:
62:4d:b3:1a:b0:c8:01:29:19:62:55:11:e6:41:de:96:99:d5:
56:a4:ff:58:9a:c0:ac:16:cb:5b:f8:b6:cd:de:b5:d8:b3:5e:
e8:19:f1:93:b9:a3:cc:5e:26:53:a5:2f:0f:62:30:d0:b8:3b:
1d:e1:8b:bf:80:52:31:87:2a:0d:2c:2a:ea:85:c1:d2:6d:19:
2f:36:dc:63:cd:9a:10:ee:3f:55:1a:35:65:e6:71:75:17:4d:
27:19:4b:e2:d9:46:90:db:56:84:42:5e:61:e6:f7:8b:1f:bb:
ca:bb:69:4c:f7:48:0c:60:50:e0:c0:de:7f:4e:bd:1a:e4:9d:
bf:10:58:51:96:b8:78:9b:3f:69:51:4d:70:d5:a3:00:2e:99:
7d:09:87:06:17:69:ea:dd:69:da:d1:76:53:91:c1:be:5f:6a:
26:09:b1:ae:d5:b8:7a:e4:c5:59:53:a1:58:b4:bd:32:55:19:
d9:78:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:45:59 2026 by rpki-client