
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json)
Hash identifier: zvenj8FYAyOZw2L1O6OWaapwSm5eg6QPdCbDeFtsiWc=
Subject key identifier: CA:DF:B8:BF:88:03:B1:60:BD:82:8D:6C:46:9F:30:2D:5A:09:E2:58
Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
Manifest number: 01D8
Signing time: Wed 07 Oct 2026 04:04:35 +0000
Manifest this update: Wed 07 Oct 2026 04:04:34 +0000
Manifest next update: Wed 14 Oct 2026 04:04:34 +0000
Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: opgc8oGgmmhpk8U42s7IyHo4Owb3b/+LrZ2f13OVO8Y=)
2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: mPrHeMfy08cq9aVZC9AR3g74pMKSKrpAT05D5o1XUwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Validity
Not Before: Oct 7 04:04:34 2026 GMT
Not After : Oct 14 04:04:34 2026 GMT
Subject: CN=6ac5c4d3-c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:3c:50:27:27:8b:ed:f5:7a:cf:9b:a2:58:
af:60:52:31:0c:31:b6:6b:f9:d4:0d:1b:a8:d7:52:
20:7f:dc:12:40:74:ac:a7:4a:aa:f2:0c:65:bc:0c:
80:49:4d:a3:ca:17:98:10:fc:4a:fd:c7:2f:1a:eb:
33:2a:18:51:fb:86:9a:38:bf:47:20:43:a5:2d:b4:
44:ad:46:9b:e9:42:a0:1b:73:f9:5b:76:7f:f5:e2:
41:8d:6f:fc:db:fb:88:64:dc:32:cb:77:49:e7:3a:
ea:01:69:96:70:da:08:41:26:b9:fe:45:6c:ca:a3:
8a:7e:8e:65:f0:62:8d:2a:15:01:f9:dc:7e:22:30:
25:90:8b:bc:68:c4:e4:61:41:a4:8a:aa:1c:49:2e:
f2:fa:bb:29:e0:60:47:89:3d:39:0c:91:a8:a3:96:
14:18:08:cf:80:c3:b2:92:22:48:7a:f3:0b:58:a9:
bc:20:0d:cf:37:b0:c0:28:f0:33:c8:19:7c:2f:ab:
aa:42:e3:33:fa:b3:35:cc:b7:31:67:2c:17:5a:bc:
82:f7:41:fd:fa:f5:69:7d:fd:5a:36:51:cd:06:1c:
ad:b5:84:36:71:73:24:ae:db:c8:6c:52:f8:fb:91:
47:ab:c0:41:d6:aa:cc:f3:b8:ad:c7:c4:06:5e:0c:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:B8:BF:88:03:B1:60:BD:82:8D:6C:46:9F:30:2D:5A:09:E2:58
X509v3 Authority Key Identifier:
keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:52:90:59:e8:c1:0c:9e:de:1a:95:d4:fb:a5:ca:f7:13:
2f:86:1c:07:0f:64:f5:9b:aa:a4:a2:a2:ce:22:62:52:14:b6:
ee:1d:ff:23:7a:a2:01:9e:67:68:d8:24:7a:2c:22:90:5b:02:
1f:49:d5:ce:28:f9:ac:60:f4:26:3f:97:44:a4:dd:31:c1:f3:
75:c7:ae:8f:74:ae:e2:8d:bd:ed:5c:4a:20:9e:d8:76:b7:65:
7f:10:a6:a4:e9:b3:95:05:a3:c4:64:4f:91:1d:a9:dc:84:12:
a9:72:b2:f9:04:a8:a7:aa:e3:cd:b7:5a:f6:c0:2a:9b:ce:a3:
66:a8:0b:d5:76:4b:e2:c7:41:8c:3c:6f:5b:40:c8:88:38:c3:
8b:b3:d3:66:d4:7f:ac:33:c9:28:c8:f2:ad:0e:76:48:3b:3b:
36:39:10:06:90:6b:2f:f3:0d:16:31:8b:c8:b0:a2:cc:1c:12:
41:c5:cc:69:d8:66:b4:f7:05:b0:b3:a4:e5:72:d6:be:90:9d:
73:21:3f:5d:95:25:00:f2:24:bd:2d:fd:0a:ea:cb:40:64:d2:
ad:9f:ac:68:55:fa:00:22:88:03:cb:fd:8b:c5:82:4e:00:c3:
9c:ca:84:1e:61:da:5f:8b:7c:7b:0e:dc:ef:80:c1:06:de:b8:
b9:1f:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:59:58 2026 by rpki-client