
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier: HhZx0EI5AJzCuQWzzguD85d1g4Zj0QI4xKMI5YiDKtA=
Subject key identifier: AA:3F:FA:90:C9:3D:99:89:EF:19:63:17:F6:64:84:67:E2:23:7C:D7
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0EA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number: 0E84
Signing time: Thu 22 Oct 2026 17:46:47 +0000
Manifest this update: Thu 22 Oct 2026 17:46:46 +0000
Manifest next update: Thu 29 Oct 2026 17:46:46 +0000
Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: 3JxesoAKX5YAQkGU9KSfauPz6wwTc5vwCzTjbXc8Yq8=)
2: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
3: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: Hpcf4lgDgZQzXJtpEHpaQml11q/y16dSr2w1HCLRatk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 17:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Validity
Not Before: Oct 22 17:46:46 2026 GMT
Not After : Oct 29 17:46:46 2026 GMT
Subject: CN=6ada4c06-e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:a9:6f:d3:ed:e0:c2:58:7b:b9:19:ca:76:
9c:fa:cf:d0:9d:ff:15:ce:7d:da:10:a4:b2:56:b0:
e9:ce:0e:e7:f2:ff:ea:9b:c0:58:27:24:c9:1f:ea:
a3:85:38:f0:04:75:97:80:36:c1:35:e9:b6:59:1d:
3c:ce:b1:03:ab:07:a5:5e:fb:fb:10:71:2f:5f:09:
dd:a6:bc:89:0a:01:d3:e9:1a:70:e0:4e:05:dd:e7:
75:33:b3:38:ee:5d:4e:8b:75:c5:2a:36:39:b0:c2:
1f:bc:9d:13:88:43:e1:42:89:06:06:0f:e3:8c:38:
de:f0:bd:ac:8e:56:e3:2f:0d:cc:e8:9a:3e:a9:65:
0b:91:57:79:4e:ae:a8:e5:e4:42:9b:ed:ff:74:57:
60:14:cd:20:7a:63:0f:31:b6:68:36:b2:df:9f:3f:
7c:52:02:3c:02:43:4e:f3:95:8b:d7:81:33:2a:91:
71:9c:fe:45:9c:2c:48:a2:57:81:8a:54:e0:54:3c:
4b:3b:c2:3b:fb:26:af:d5:da:01:a3:ff:80:a9:c2:
ca:75:7a:6f:3c:9e:e3:0a:81:28:56:4e:02:f1:a6:
e6:4c:d4:7f:e7:a6:43:fe:dc:2c:1a:bd:b9:b5:01:
7d:f0:1d:78:66:ae:14:91:e1:6e:1d:8b:ec:30:6e:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3F:FA:90:C9:3D:99:89:EF:19:63:17:F6:64:84:67:E2:23:7C:D7
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:44:96:f2:61:f7:64:cd:4b:9b:84:28:1e:27:e4:b8:50:92:
1b:ca:8b:f9:62:ed:f4:5f:98:6a:b2:27:30:39:88:71:98:24:
80:10:6a:ff:ad:1a:6e:45:fc:54:45:7c:bb:08:4d:f2:9c:a8:
9b:c9:0a:81:41:30:6c:6b:bd:86:df:43:7a:e7:29:68:1e:e0:
99:68:1e:68:a6:7d:83:9c:41:dd:d3:39:2a:83:ff:ed:c1:bc:
6a:9b:c2:9c:f7:ed:bc:59:18:e0:68:d6:77:a6:0c:23:73:a1:
b8:eb:f3:7e:e9:61:a7:29:76:e9:04:0a:dd:03:cd:44:be:ce:
9d:90:55:76:78:0e:aa:fe:4a:46:e5:67:fb:cd:e5:f8:e2:8c:
40:de:4f:23:2f:bb:af:16:94:54:89:33:aa:5c:36:01:07:12:
94:04:6f:03:b4:98:2d:e3:46:62:5a:8a:49:04:5b:22:ec:3f:
b2:b5:5e:95:e0:0e:f3:35:f5:02:6b:76:7a:b6:73:df:eb:29:
7e:27:53:2b:3f:0e:50:56:fe:9d:d8:87:e0:4c:9f:4e:4a:25:
a4:85:03:4a:2f:78:71:8f:28:98:7d:22:3b:13:05:93:c3:f9:
76:7e:87:21:e7:e5:0e:81:9f:cc:49:5e:eb:61:21:fd:6a:0b:
8b:04:57:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4
OTFFNEY0NEUwHhcNMjYxMDIyMTc0NjQ2WhcNMjYxMDI5MTc0NjQ2WjAYMRYwFAYD
VQQDEw02YWRhNGMwNi1lNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4apb9Pt4MJYe7kZynac+s/Qnf8Vzn3aEKSyVrDpzg7n8v/qm8BYJyTJH+qj
hTjwBHWXgDbBNem2WR08zrEDqwelXvv7EHEvXwndpryJCgHT6Rpw4E4F3ed1M7M4
7l1Oi3XFKjY5sMIfvJ0TiEPhQokGBg/jjDje8L2sjlbjLw3M6Jo+qWULkVd5Tq6o
5eRCm+3/dFdgFM0gemMPMbZoNrLfnz98UgI8AkNO85WL14EzKpFxnP5FnCxIoleB
ilTgVDxLO8I7+yav1doBo/+AqcLKdXpvPJ7jCoEoVk4C8abmTNR/56ZD/twsGr25
tQF98B14Zq4UkeFuHYvsMG6y/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKo/+pDJ
PZmJ7xljF/ZkhGfiI3zXMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB
MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP
elprUmFOajNNUGVKSGs5RTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt0SW8mH3ZM1Lm4QoHifkuFCSG8qL+WLt9F+YarInMDmIcZgkgBBq/60abkX8
VEV8uwhN8pyom8kKgUEwbGu9ht9DeucpaB7gmWgeaKZ9g5xB3dM5KoP/7cG8apvC
nPftvFkY4GjWd6YMI3OhuOvzfulhpyl26QQK3QPNRL7OnZBVdngOqv5KRuVn+83l
+OKMQN5PIy+7rxaUVIkzqlw2AQcSlARvA7SYLeNGYlqKSQRbIuw/srVeleAO8zX1
Amt2erZz3+spfidTKz8OUFb+ndiH4EyfTkolpIUDSi94cY8omH0iOxMFk8P5dn6H
IeflDoGfzEle62Eh/WoLiwRXKQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 15:43:30 2026 by rpki-client