
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
File: 9b6dYfb-pOZW1P0BVPgkg5zAExo.mft (raw, json)
Hash identifier: z0am7AeNEzsE8Mmg/OysRilz90FeMeWwrCWn4UKo+NI=
Subject key identifier: 5E:83:FA:42:63:7A:98:92:89:02:2D:63:1E:4E:30:8B:3C:FE:D2:57
Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
Certificate issuer: /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
Manifest number: 55
Signing time: Wed 21 Oct 2026 08:49:40 +0000
Manifest this update: Wed 21 Oct 2026 08:49:39 +0000
Manifest next update: Wed 28 Oct 2026 08:49:39 +0000
Files and hashes: 1: 9b6dYfb-pOZW1P0BVPgkg5zAExo.crl (hash: hy/r70KB+xZcY5l/0iAjSmhyqptbTpL4IlRDdKU8YNA=)
2: 6C5753D84AB911F18A4D3DF6BB833773.roa (hash: kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Validity
Not Before: Oct 21 08:49:39 2026 GMT
Not After : Oct 28 08:49:39 2026 GMT
Subject: CN=6ad87ca3-ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:d1:9a:71:33:46:63:13:f2:d6:ee:58:39:
3e:5b:c8:a8:50:d6:dd:dc:50:f0:c0:54:e1:61:f8:
b2:2d:da:ea:87:a2:0c:50:be:4c:d9:a7:90:e6:66:
e2:48:1e:67:3d:89:ce:d1:c9:13:e2:37:98:1c:dd:
2c:56:17:7d:ce:8c:44:c0:3e:b8:4e:38:53:71:f6:
1a:21:5b:5c:ec:dc:46:1a:ad:47:fc:03:d3:39:bb:
d6:d5:65:9f:02:74:ca:09:c2:65:f9:a7:a7:aa:43:
4f:44:67:0b:0e:84:48:ad:30:04:f7:19:58:65:3f:
84:24:bb:2d:9c:c1:57:9e:ce:f7:f6:7b:82:50:33:
06:90:1d:0d:c7:08:d2:b3:bb:16:c7:ba:bf:b4:ac:
55:5f:4b:c1:21:09:55:6f:4a:49:99:bf:2c:6d:5a:
26:46:67:68:da:1d:51:a9:8a:d5:96:b4:b3:f9:f9:
dd:d3:38:56:2d:c2:4f:05:e0:6d:81:e3:bd:97:a1:
90:38:7a:38:d2:09:25:00:66:b6:c8:94:e7:ed:07:
b8:ef:85:92:3c:12:73:fc:e2:90:cd:0d:6b:bd:40:
2a:fd:c5:25:65:f6:d9:35:29:3a:ff:28:fd:80:b7:
11:e9:64:95:02:30:49:6f:19:11:4b:f9:74:34:fb:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:FA:42:63:7A:98:92:89:02:2D:63:1E:4E:30:8B:3C:FE:D2:57
X509v3 Authority Key Identifier:
keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ce:f4:1d:b2:0e:4f:b6:d7:4f:13:30:0b:ab:03:2a:2c:bd:
00:ee:88:f3:dc:9a:90:19:07:2d:04:0c:47:aa:d9:35:6a:17:
86:35:3d:13:c5:75:8a:c7:3d:03:46:93:92:ac:d6:73:0f:7a:
83:21:04:1c:e9:34:31:49:63:b1:b1:e6:53:85:fe:be:81:b7:
b6:5e:31:c1:41:1c:15:32:0f:7b:b3:cd:0a:0e:9c:f1:3c:43:
1b:06:6e:29:23:6e:b4:77:80:bd:ef:41:a3:1a:2f:25:42:ab:
66:2b:6d:15:dc:6c:ac:cc:74:36:3f:93:35:d3:09:4b:2a:3e:
ed:74:9e:98:96:5d:60:e8:d6:30:0e:4e:0f:82:be:27:7f:b0:
50:ee:43:dd:4e:7d:56:e2:51:c5:df:3f:ce:f0:22:b9:7e:76:
9a:92:42:9d:df:16:bc:18:cd:3b:6c:85:e7:2e:44:3a:70:7f:
f6:58:a2:ad:4d:8b:0d:39:14:0d:48:55:93:1a:ad:54:3e:53:
d0:ad:99:a5:f4:14:e6:1c:f1:c6:67:64:8d:84:08:f8:ca:10:
53:2e:75:62:b3:36:91:71:36:12:40:36:4d:ad:aa:e8:b1:27:
12:4c:ac:1d:25:ec:24:17:49:72:f4:56:4a:4b:1b:36:2b:91:
37:1c:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:06:07 2026 by rpki-client