
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File: 9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier: Gmv7VdN7CXgeoIYQNSBmc5NdrcRCvfgR7+TLdYqxQPs=
Subject key identifier: E3:F8:71:AC:52:5E:75:D0:73:58:68:99:59:C1:8D:54:DE:75:24:3C
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer: /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number: 5A
Signing time: Fri 18 Sep 2026 16:54:00 +0000
Manifest this update: Fri 18 Sep 2026 16:54:00 +0000
Manifest next update: Fri 25 Sep 2026 16:54:00 +0000
Files and hashes: 1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: 4eDqkr27OeF9j14DbpZU9i+uhvgZjca+EX0Fdnl3Eoc=)
2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Validity
Not Before: Sep 18 16:54:00 2026 GMT
Not After : Sep 25 16:54:00 2026 GMT
Subject: CN=6aad6ca8-daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:dd:ce:7f:20:07:bb:f9:87:d8:de:0c:a2:
41:a8:28:47:71:e9:74:f3:72:ed:94:b5:16:cc:2d:
73:55:72:11:94:8f:e9:82:98:90:1b:d6:75:ed:1f:
08:27:b7:87:13:51:39:5c:2d:28:30:ab:af:e2:75:
bf:8c:16:3c:17:72:f0:1b:b8:ba:24:32:93:f6:77:
29:f8:a1:fd:31:15:8d:c6:57:d8:a4:12:2b:2b:e3:
9a:58:4c:7b:6f:5d:c1:02:4f:e8:51:91:30:ee:1d:
0c:91:fd:03:66:ca:94:8b:11:af:f1:9d:a6:ba:a0:
0c:e1:62:d7:39:41:d8:d3:4f:10:05:17:2e:dc:42:
84:07:5a:aa:bc:bf:40:3d:48:88:f9:60:42:73:9c:
04:c9:09:5c:7c:86:32:a4:42:af:9b:df:20:9c:9d:
90:4d:06:57:97:0d:41:8f:bf:8c:5e:89:fa:32:6c:
91:e8:f3:12:97:6f:64:b3:db:5f:15:19:54:f4:ed:
61:b7:70:26:87:81:d0:44:e0:7a:4a:3a:82:d1:70:
63:52:43:e9:06:77:7d:4f:54:c8:91:9a:23:ec:79:
81:d6:6d:f9:5c:05:fb:f2:d5:48:3b:4b:e5:6f:5d:
2a:9b:ea:55:62:f4:55:55:3b:b2:ad:6f:a5:91:10:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:71:AC:52:5E:75:D0:73:58:68:99:59:C1:8D:54:DE:75:24:3C
X509v3 Authority Key Identifier:
keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:00:58:c6:27:ce:04:c9:47:61:f2:5b:d7:62:4b:0e:77:
b3:51:e6:4a:11:e5:f7:84:c9:92:66:00:a3:3d:a8:29:7a:fd:
1f:a4:b8:ed:24:30:d8:3b:9c:9e:7d:1c:e8:a5:50:ab:ce:1b:
1c:13:e1:6d:c4:1c:c1:ba:0c:5d:e5:c9:9b:2b:40:dc:80:1b:
d2:c3:7e:97:02:5b:56:75:93:33:21:c8:02:68:38:42:a1:d1:
c7:99:b8:5b:49:2e:c9:bb:a6:c0:a0:0f:3c:a2:59:2b:85:99:
71:f3:d3:76:70:8b:c4:a2:42:79:41:6d:82:fc:76:df:c1:7a:
5d:d7:f2:2b:10:b8:a4:51:59:07:10:a6:d6:dc:0f:94:18:c5:
f1:00:e1:0d:c0:b8:eb:6f:d6:50:4a:4a:4f:7f:1c:fe:d8:a5:
9c:0d:32:4c:a3:3b:6f:69:25:68:61:b4:4c:d8:fa:8d:f1:53:
d4:9a:d3:98:f0:99:bc:76:cd:fd:6b:35:35:69:89:3e:ec:07:
da:9e:4a:10:8c:aa:ba:a1:5f:da:4a:68:bd:85:0f:b3:ea:56:
3d:8a:6e:00:b6:f8:23:e1:7c:15:b1:d4:b3:d2:e8:59:70:8d:
44:84:91:cc:06:fe:88:ba:e5:de:0b:3e:29:1e:7d:2b:05:ee:
7d:a5:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 21:33:50 2026 by rpki-client