
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier: S7SzcpRtMrKoGwj37xIcSbm3oqkIzdk2YJBnlA7A5YY=
Subject key identifier: 7D:65:98:CF:14:38:CD:CD:5F:D6:89:F5:78:6D:16:BE:75:42:67:F8
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number: 01B0
Signing time: Tue 21 Apr 2026 03:47:39 +0000
Manifest this update: Tue 21 Apr 2026 03:47:39 +0000
Manifest next update: Tue 28 Apr 2026 03:47:39 +0000
Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 9czwgkJkUJqv8Ntxopvh+MgBI8AVUaO/cJ4jOlwB7fA=)
2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: +LlWfDPiKDdUCs+xHkkWz7phXd+8+cijStN/OwLrfmY=)
3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: QyH6dxXjokhnXxiQxLvd1TdbejtHEOfwUUHqYEjI6K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Apr 21 03:47:39 2026 GMT
Not After : Apr 28 03:47:39 2026 GMT
Subject: CN=69e6f35b-1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:02:53:b6:93:75:01:43:0b:d4:a1:df:0b:
7a:14:04:15:5b:b6:8b:54:17:5e:af:4b:1e:b2:00:
01:06:39:97:ae:b6:bc:36:d8:9e:9a:63:33:07:16:
d3:94:8b:e9:5d:1e:7e:4d:78:59:6e:af:bd:b2:c2:
f6:aa:8d:e3:0e:44:1c:99:d5:01:c3:07:38:c5:1b:
62:f4:b1:25:72:c0:72:ed:ba:5d:7b:d3:dc:88:07:
45:20:f0:6a:90:ee:8a:fc:1b:f0:5f:53:76:d0:4a:
f6:d8:75:42:4d:1f:0f:a9:94:f2:da:72:ef:81:c3:
30:30:bd:66:56:e8:ed:e7:5e:ee:94:c0:7b:48:df:
7f:65:f3:db:3e:5b:7d:ae:b4:ec:00:ab:fc:88:b1:
49:a8:0e:c6:7d:8d:2a:c3:19:81:61:bf:27:3a:0b:
55:04:e4:9a:49:97:e4:3c:81:67:5e:d9:f7:66:f2:
ba:68:1b:ac:72:cd:d3:3b:b3:d3:d9:d1:16:6f:8f:
9f:34:ff:1b:4f:b3:31:ae:62:95:85:8b:49:64:59:
9d:d5:8b:53:2b:b9:dd:70:eb:f9:c7:6d:55:4c:87:
db:a5:75:ad:49:c6:17:27:81:df:88:ae:4c:16:d1:
3f:46:e0:3e:1e:a3:75:2d:ba:39:ca:da:61:c7:66:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:98:CF:14:38:CD:CD:5F:D6:89:F5:78:6D:16:BE:75:42:67:F8
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ad:89:e7:9e:cc:7e:39:61:ab:38:aa:fd:61:74:6f:5a:1f:
70:c6:17:05:ef:e1:57:52:ba:aa:ef:e7:03:c3:94:24:6b:4b:
f6:b3:13:82:d4:a6:d3:71:a0:33:a3:75:b0:98:c0:ae:54:5d:
6f:61:53:01:66:cc:b2:f4:a0:f2:c3:57:72:63:ea:29:9a:89:
85:98:52:97:06:50:2a:b4:80:31:54:a2:11:13:93:7e:0a:82:
74:e7:f1:9e:62:88:d6:52:d3:96:72:80:37:54:00:69:74:fd:
86:3e:90:7b:c7:bf:ad:97:4f:dd:06:7b:e5:8e:8b:1f:9a:47:
bb:6a:b2:33:cf:5b:ae:9d:ae:ce:f7:72:d9:fa:d9:1b:3b:3d:
f9:b5:c9:0c:a0:70:a6:a9:17:fb:e7:a3:d9:27:59:2b:f2:5a:
70:69:17:de:ab:5c:28:00:1d:62:04:9d:72:2b:be:42:8d:4c:
2f:81:7b:26:54:b3:bf:f6:d4:5b:90:58:dd:ec:03:c8:1c:c4:
63:06:4d:92:f4:cc:5b:39:46:89:39:41:6c:4a:34:3d:ae:67:
91:91:62:b5:15:7f:39:c7:e9:2f:d7:02:85:91:0e:bb:4f:56:
44:a6:a9:6e:b6:63:f1:70:7c:d5:30:a8:4d:9e:6a:b4:74:e7:
81:52:65:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw
Q0UwQzI5RkEwHhcNMjYwNDIxMDM0NzM5WhcNMjYwNDI4MDM0NzM5WjAYMRYwFAYD
VQQDEw02OWU2ZjM1Yi0xZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XwCU7aTdQFDC9Sh3wt6FAQVW7aLVBder0sesgABBjmXrra8NtiemmMzBxbT
lIvpXR5+TXhZbq+9ssL2qo3jDkQcmdUBwwc4xRti9LElcsBy7bpde9PciAdFIPBq
kO6K/BvwX1N20Er22HVCTR8PqZTy2nLvgcMwML1mVujt517ulMB7SN9/ZfPbPlt9
rrTsAKv8iLFJqA7GfY0qwxmBYb8nOgtVBOSaSZfkPIFnXtn3ZvK6aBuscs3TO7PT
2dEWb4+fNP8bT7MxrmKVhYtJZFmd1YtTK7ndcOv5x21VTIfbpXWtScYXJ4HfiK5M
FtE/RuA+HqN1Lbo5ytphx2aXJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1lmM8U
OM3NX9aJ9XhtFr51Qmf4MB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC
NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU
MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZa2J557Mfjlhqziq/WF0b1ofcMYXBe/hV1K6qu/nA8OUJGtL9rMTgtSm03Gg
M6N1sJjArlRdb2FTAWbMsvSg8sNXcmPqKZqJhZhSlwZQKrSAMVSiEROTfgqCdOfx
nmKI1lLTlnKAN1QAaXT9hj6Qe8e/rZdP3QZ75Y6LH5pHu2qyM89brp2uzvdy2frZ
Gzs9+bXJDKBwpqkX++ej2SdZK/JacGkX3qtcKAAdYgSdciu+Qo1ML4F7JlSzv/bU
W5BY3ewDyBzEYwZNkvTMWzlGiTlBbEo0Pa5nkZFitRV/OcfpL9cChZEOu09WRKap
brZj8XB81TCoTZ5qtHTngVJldg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:20:04 2026 by rpki-client