
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier: uwPJcXMmpRMyvGjwFM9V++DTI0OwvWAohK7sNs6rj+E=
Subject key identifier: 24:91:E9:7A:5E:BB:E1:ED:5F:B1:07:93:09:27:48:0E:D9:CB:EC:C7
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number: 9E
Signing time: Sun 05 Apr 2026 06:42:27 +0000
Manifest this update: Sun 05 Apr 2026 06:42:27 +0000
Manifest next update: Sun 12 Apr 2026 06:42:27 +0000
Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: KBDMy8PZdGYVEOf0l1u7D6Z8Oh9KCtOZDoKTlQoSmIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Validity
Not Before: Apr 5 06:42:27 2026 GMT
Not After : Apr 12 06:42:27 2026 GMT
Subject: CN=69d20453-1e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:73:26:f9:ce:28:39:d0:98:71:03:05:96:
4e:52:6d:c6:cd:71:c4:b7:ba:fe:e8:86:89:f7:cb:
32:83:50:96:20:a5:01:06:32:49:2e:ff:50:12:7c:
d1:21:31:bc:c4:be:85:31:ea:c8:4c:dd:e2:f0:8f:
1e:52:47:ef:90:32:9d:f2:e3:1e:3e:b4:02:b2:27:
d0:51:88:ee:23:1f:60:ca:21:4e:97:8f:cf:56:db:
99:0a:ee:0a:fc:af:e8:c7:76:82:aa:84:41:9c:cd:
76:83:a8:45:c9:b3:1e:92:76:45:38:8e:53:e7:98:
11:71:c8:ee:14:08:b0:f4:fb:bc:96:7c:48:5d:e2:
d1:43:9d:73:35:7b:c5:b3:e3:cc:b0:10:b9:88:26:
b0:30:cc:05:b4:c4:ac:7c:d9:d7:3c:39:fb:de:aa:
5a:38:71:85:21:2c:a5:9e:9a:40:7f:1b:10:6c:29:
b2:77:ab:1b:f3:99:ea:02:d1:a7:47:35:17:cb:39:
24:f3:29:04:f6:25:66:34:e9:1e:c8:dd:fc:f0:55:
d4:3b:87:a5:3d:e9:4c:77:d1:fa:03:fe:07:d6:2e:
55:c8:e4:3f:3f:e8:5f:37:e6:95:70:ae:e8:83:ef:
1a:7b:29:85:1c:68:0a:84:fc:64:4a:c5:c5:0a:e0:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:E9:7A:5E:BB:E1:ED:5F:B1:07:93:09:27:48:0E:D9:CB:EC:C7
X509v3 Authority Key Identifier:
keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c2:0f:4a:d7:82:0d:1f:b9:b0:fa:ea:0c:dd:48:86:16:97:
80:85:da:06:d3:33:08:ab:2f:96:b1:bb:5e:0c:d9:05:4d:40:
78:13:57:45:69:b9:95:73:98:32:63:88:68:47:f5:fe:04:b4:
56:30:b4:33:71:9d:77:13:a5:ab:f6:49:7a:ff:d8:e4:cb:9a:
d2:9b:b4:df:ad:a8:8c:89:07:d0:84:e8:ff:3d:23:34:93:ea:
af:b9:20:63:21:a5:69:28:37:26:e5:a5:63:b2:cf:19:07:c6:
ff:bc:ca:32:c2:3e:9b:d2:51:04:88:03:f3:7d:24:8d:30:ee:
ac:09:c1:14:4d:a1:7c:2d:4e:98:2b:e3:fb:ab:6a:d9:17:6d:
f9:39:f4:d7:c0:f5:c4:f2:61:fc:38:d3:16:75:7e:c7:30:1a:
d8:83:21:f6:f1:9a:a0:4a:25:39:36:2c:fc:cb:9e:e9:4f:9a:
ad:5c:a0:c9:71:93:a4:e2:bb:15:60:05:c1:c7:91:b2:8e:d8:
c8:66:b5:98:4b:44:ac:1c:37:d7:8d:44:54:ca:e0:b3:df:9d:
e5:56:c4:45:d5:71:31:a4:91:2d:d4:ca:ac:2d:bd:27:34:23:
9a:7a:c2:b1:04:e0:2d:ec:35:2f:47:0b:eb:e7:ed:b9:99:fa:
24:c0:f9:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDN0ExMTAvBgNVBAUTKDA5MTExMTZGQzM4RTk1REY1OTE2MzdEOEM2NjRCNDVG
QjE2RjRCREEwHhcNMjYwNDA1MDY0MjI3WhcNMjYwNDEyMDY0MjI3WjAYMRYwFAYD
VQQDEw02OWQyMDQ1My0xZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7wtzJvnOKDnQmHEDBZZOUm3GzXHEt7r+6IaJ98syg1CWIKUBBjJJLv9QEnzR
ITG8xL6FMerITN3i8I8eUkfvkDKd8uMePrQCsifQUYjuIx9gyiFOl4/PVtuZCu4K
/K/ox3aCqoRBnM12g6hFybMeknZFOI5T55gRccjuFAiw9Pu8lnxIXeLRQ51zNXvF
s+PMsBC5iCawMMwFtMSsfNnXPDn73qpaOHGFISylnppAfxsQbCmyd6sb85nqAtGn
RzUXyzkk8ykE9iVmNOkeyN388FXUO4elPelMd9H6A/4H1i5VyOQ/P+hfN+aVcK7o
g+8aeymFHGgKhPxkSsXFCuBvxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSR6Xpe
u+HtX7EHkwknSA7Zy+zHMB8GA1UdIwQYMBaAFAkREW/DjpXfWRY32MZktF+xb0va
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80REYxNkREMDQw
NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9DUkVSYjhPT2xkOVpGamZZeG1TMFg3RnZT
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEM3QS80REYxNkREMDQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9DUkVSYjhPT2xk
OVpGamZZeG1TMFg3RnZTOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhcIPSteCDR+5sPrqDN1IhhaXgIXaBtMzCKsvlrG7XgzZBU1AeBNXRWm5lXOY
MmOIaEf1/gS0VjC0M3GddxOlq/ZJev/Y5Mua0pu0362ojIkH0ITo/z0jNJPqr7kg
YyGlaSg3JuWlY7LPGQfG/7zKMsI+m9JRBIgD830kjTDurAnBFE2hfC1OmCvj+6tq
2Rdt+Tn018D1xPJh/DjTFnV+xzAa2IMh9vGaoEolOTYs/Mue6U+arVygyXGTpOK7
FWAFwceRso7YyGa1mEtErBw3141EVMrgs9+d5VbERdVxMaSRLdTKrC29JzQjmnrC
sQTgLew1L0cL6+ftuZn6JMD5Hw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:29 2026 by rpki-client