
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier: fLgLkuGJf0dbHq6vD9osogdLgalPSZODrSCWpZAbwP4=
Subject key identifier: 96:71:61:A7:AC:C9:A3:62:DC:2A:1B:C8:4D:15:67:24:B9:26:30:07
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial: 0D11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number: 0D05
Signing time: Tue 06 Oct 2026 18:29:28 +0000
Manifest this update: Tue 06 Oct 2026 18:29:28 +0000
Manifest next update: Tue 13 Oct 2026 18:29:28 +0000
Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: abSTC+ZF/DCpbf/SDf/3OouqUaD6Pzsvx8SQcLKD1mQ=)
2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: DsKu4442/br0EbE+8Yf4uge1/Q3JD1svVRXWBph3WbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Validity
Not Before: Oct 6 18:29:28 2026 GMT
Not After : Oct 13 18:29:28 2026 GMT
Subject: CN=6ac53e08-291b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:b2:28:90:86:84:30:8a:af:b8:4f:7d:dc:
36:85:a5:b8:1c:9d:92:92:77:b3:71:f9:a1:c7:75:
0c:2f:0c:6a:2a:51:7c:8c:07:7a:90:e2:03:43:7e:
1f:3f:69:3f:29:a2:be:5b:01:52:0c:e9:a4:9b:1d:
60:a2:3e:fb:34:fe:50:96:66:1b:c6:48:7b:e6:20:
56:fe:7f:49:4c:35:78:ce:8e:2b:b3:74:a3:84:9e:
d7:36:d9:1e:ff:9a:e8:5b:1d:82:f9:be:01:a7:24:
e6:63:f6:6d:1b:e6:4c:88:8f:28:6c:dc:87:76:5e:
eb:af:a9:28:b8:0c:4d:99:f4:28:3a:6a:e1:90:47:
8f:fb:cd:e6:99:5e:3e:03:09:19:80:12:49:06:68:
36:e0:e6:3c:3c:76:25:ec:9a:5c:d2:2c:52:00:18:
25:3f:db:a9:07:e5:4d:b1:4e:25:df:bf:d0:ab:49:
5f:36:c9:30:31:ff:ac:b3:a2:5a:a1:6c:2a:df:cd:
1a:f1:19:84:df:b2:be:15:29:a0:0c:91:6d:1b:30:
ed:10:66:bc:aa:7a:53:17:d5:9e:b1:b3:b2:9f:b5:
30:b4:af:a1:b7:35:50:e3:c6:ac:3a:08:43:df:a8:
19:c4:e3:2b:23:41:f0:e7:7c:ac:ab:e7:76:b4:f8:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:61:A7:AC:C9:A3:62:DC:2A:1B:C8:4D:15:67:24:B9:26:30:07
X509v3 Authority Key Identifier:
keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:e8:57:05:ca:d8:fc:56:00:31:5c:b2:d0:24:e9:7b:60:
e8:61:7b:3f:07:69:8f:a4:74:80:7e:e6:62:ab:28:f3:61:34:
cf:23:7b:58:02:2d:10:27:5a:1a:bd:31:a1:a7:73:ee:24:3f:
b7:8c:12:ef:0a:81:58:2b:84:c3:c1:0c:89:4e:fd:5a:46:46:
06:5a:3c:04:7b:19:43:2d:9a:b1:bc:c7:e0:91:e3:47:0f:99:
c6:65:77:fd:5a:40:dd:4c:0e:1d:04:29:fb:b9:cd:3f:80:f2:
96:ad:13:ed:55:b8:21:71:a0:c9:19:51:ec:e0:ae:bd:e4:c3:
a4:51:ef:17:be:9d:69:c9:60:09:c7:b6:92:d8:6d:e4:41:9b:
22:8d:da:bb:06:d4:1c:ad:60:1f:55:68:e4:f9:fe:e3:50:a0:
69:2d:a1:57:6b:6f:9f:c8:d6:9e:67:0b:74:d3:5d:9f:27:e8:
b8:6c:3e:97:4c:5d:1d:a4:f5:6d:6e:13:38:3e:75:03:60:51:
22:c2:ef:41:42:37:b5:6b:d0:0e:6c:59:58:ba:f5:3e:ce:a3:
49:4e:e8:17:3d:5f:a5:1f:d5:eb:6f:19:97:72:2e:af:5f:9a:
ab:86:87:18:26:43:e1:f5:99:6f:ae:52:45:8c:de:98:46:4f:
fe:bf:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:43:12 2026 by rpki-client