
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
File: 9b6dYfb-pOZW1P0BVPgkg5zAExo.mft (raw, json)
Hash identifier: N/nEJrcpq7DqCwrfCUD2myDYlV3lO6BozLt8pU7hAzg=
Subject key identifier: 6C:E4:8D:E6:BC:3E:DD:1F:7A:76:20:40:96:C0:64:56:9A:1C:D6:B4
Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
Certificate issuer: /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
Manifest number: 20
Signing time: Tue 07 Jul 2026 10:11:30 +0000
Manifest this update: Tue 07 Jul 2026 10:11:30 +0000
Manifest next update: Tue 14 Jul 2026 10:11:30 +0000
Files and hashes: 1: 9b6dYfb-pOZW1P0BVPgkg5zAExo.crl (hash: /4yRNXkbzaVOMc4eY5xmfth5imTLmDx0z9+YHHJGwVI=)
2: 6C5753D84AB911F18A4D3DF6BB833773.roa (hash: kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Validity
Not Before: Jul 7 10:11:30 2026 GMT
Not After : Jul 14 10:11:30 2026 GMT
Subject: CN=6a4cd0d2-7d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:93:38:ad:68:d4:df:34:1a:a9:4d:9f:fd:
ac:ee:aa:de:60:3d:a8:c4:a0:2e:73:db:dd:d0:e9:
fb:79:69:f5:bf:d5:87:5c:7f:3e:21:f6:03:f5:26:
af:a6:4d:3e:78:3c:1d:ad:58:8d:f3:4a:b7:66:84:
f0:6a:94:a2:49:f4:78:98:d2:e1:b6:5d:2a:2c:4e:
e6:99:6a:88:55:9f:30:95:6e:63:ba:5e:33:06:b2:
f2:a5:3b:da:3d:64:6d:9a:62:cf:43:37:09:47:2e:
d5:7a:5c:f2:d0:fc:d0:db:f0:ea:b0:c7:23:77:24:
46:20:15:53:7e:1d:45:be:93:19:48:5f:d0:9d:97:
8a:31:7f:37:66:f9:6c:e7:c3:11:1e:0e:7d:ce:42:
89:e9:cb:53:3a:e6:88:af:a7:a3:54:41:61:e1:1c:
3b:0d:17:5b:5d:bc:a9:c1:09:5c:1e:d4:4b:3a:d2:
6a:e2:12:8f:e8:37:32:88:a0:e4:a0:d2:ae:7c:79:
58:c1:12:f3:60:96:ae:76:f4:d8:18:54:19:97:7d:
60:e6:e0:22:66:4d:88:08:80:6d:a5:a7:63:06:a1:
99:82:cf:26:dc:48:5b:b2:e8:11:2f:1c:ea:b2:6b:
0e:b0:69:1e:a0:81:e7:fa:00:3b:45:f7:97:da:90:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:8D:E6:BC:3E:DD:1F:7A:76:20:40:96:C0:64:56:9A:1C:D6:B4
X509v3 Authority Key Identifier:
keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:cb:3e:92:af:65:d9:54:6f:b4:4c:9a:08:e3:b0:6d:f5:57:
ee:b3:c2:02:b1:9b:cd:58:12:2f:62:5e:e2:03:b8:7c:3b:2d:
26:c8:29:a0:ac:4d:d8:c9:66:05:f7:d8:26:7c:df:2a:6f:17:
d9:89:25:b4:a6:35:31:70:e9:a1:eb:d2:3e:4f:79:fa:79:35:
f0:20:24:c6:d1:e5:5f:75:da:ce:2a:9a:d8:b4:41:fb:4b:0c:
e8:ba:f1:70:ef:99:1a:38:56:7d:e8:c7:18:95:a7:be:b1:8f:
44:ba:ce:b9:81:b0:8f:cb:e6:d3:d9:b3:a1:5c:84:16:76:66:
3a:d3:62:1e:10:f9:b8:48:6f:fa:6a:6b:8e:f4:f9:ee:1e:b4:
45:e9:22:fd:df:ff:07:06:29:b1:a9:a2:b4:a7:8e:e7:fa:b2:
02:73:6d:c7:3f:48:71:bd:bb:4b:bc:d5:01:4a:fd:5f:d1:2c:
cb:41:f1:9c:f0:44:5a:9b:d1:14:9a:0f:8f:21:7c:6a:7a:60:
ad:0d:e0:11:d6:54:c5:2c:25:91:e1:3c:3c:ac:20:0f:42:28:
89:18:83:b6:18:91:a4:c4:a4:d3:2a:b7:4e:cf:82:e6:77:43:
7b:8a:31:2b:79:8e:ca:32:1b:79:51:17:93:a7:f7:95:57:a5:
03:72:5a:f3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjlDMzExMC8GA1UEBRMoRjVCRTlENjFGNkZFQTRFNjU2RDRGRDAxNTRGODI0ODM5
Q0MwMTMxQTAeFw0yNjA3MDcxMDExMzBaFw0yNjA3MTQxMDExMzBaMBgxFjAUBgNV
BAMTDTZhNGNkMGQyLTdkNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCur5M4rWjU3zQaqU2f/azuqt5gPajEoC5z293Q6ft5afW/1Ydcfz4h9gP1Jq+m
TT54PB2tWI3zSrdmhPBqlKJJ9HiY0uG2XSosTuaZaohVnzCVbmO6XjMGsvKlO9o9
ZG2aYs9DNwlHLtV6XPLQ/NDb8OqwxyN3JEYgFVN+HUW+kxlIX9Cdl4oxfzdm+Wzn
wxEeDn3OQonpy1M65oivp6NUQWHhHDsNF1tdvKnBCVwe1Es60mriEo/oNzKIoOSg
0q58eVjBEvNglq529NgYVBmXfWDm4CJmTYgIgG2lp2MGoZmCzybcSFuy6BEvHOqy
aw6waR6ggef6ADtF95fakBb/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbOSN5rw+
3R96diBAlsBkVpoc1rQwHwYDVR0jBBgwFoAU9b6dYfb+pOZW1P0BVPgkg5zAExow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGOUMzLzc4OEU3QzQ2NEFC
NzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9aVzFQMEJWUGdrZzV6QUV4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWI2ZFlmYi1wT1pXMVAwQlZQZ2tnNXpBRXhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
OUMzLzc4OEU3QzQ2NEFCNzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9a
VzFQMEJWUGdrZzV6QUV4by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3yz6Sr2XZVG+0TJoI47Bt9Vfus8ICsZvNWBIvYl7iA7h8Oy0myCmgrE3YyWYF
99gmfN8qbxfZiSW0pjUxcOmh69I+T3n6eTXwICTG0eVfddrOKprYtEH7SwzouvFw
75kaOFZ96McYlae+sY9Eus65gbCPy+bT2bOhXIQWdmY602IeEPm4SG/6amuO9Pnu
HrRF6SL93/8HBimxqaK0p47n+rICc23HP0hxvbtLvNUBSv1f0SzLQfGc8ERam9EU
mg+PIXxqemCtDeAR1lTFLCWR4Tw8rCAPQiiJGIO2GJGkxKTTKrdOz4Lmd0N7ijEr
eY7KMht5UReTp/eVV6UDclrz
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:04:23 2026 by rpki-client