
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier: rY9FAUuF9rkEJYlHXl7XoChmiGDjMa5C9y72kKkggGg=
Subject key identifier: 37:EC:C0:F2:67:74:D2:69:F7:93:45:D1:E3:DE:F9:EE:41:D0:7D:0D
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 163D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number: 162A
Signing time: Tue 06 Oct 2026 16:44:52 +0000
Manifest this update: Tue 06 Oct 2026 16:44:51 +0000
Manifest next update: Tue 13 Oct 2026 16:44:51 +0000
Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: bgDQENKpiuTrSTIKSlSnPAhfNH5lwTHSYgpcNyalnic=)
2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: R5ZyeSm5g+p8lvebB9/qu+mRhPpgoRy54VDsJgvPDUU=)
3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: M1ZUrzl+jKIMD6ElMH+tXNtg61CpYpjge7sFvol2TsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5693 (0x163d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: Oct 6 16:44:51 2026 GMT
Not After : Oct 13 16:44:51 2026 GMT
Subject: CN=6ac52584-1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:9a:08:54:74:00:f5:79:36:57:03:8b:f6:
7a:b9:74:28:11:49:7e:71:45:3e:53:bf:64:a8:23:
ca:2e:46:50:12:24:cf:20:69:10:23:8a:4a:67:25:
67:cf:71:63:cc:f9:02:1b:a2:e8:37:aa:62:64:3a:
00:db:58:4b:fa:e4:0c:48:07:2d:22:0f:22:fb:12:
04:c2:8b:b7:9d:56:e0:a1:54:71:10:77:a5:16:b1:
0d:cb:f1:13:52:1c:dc:a8:9f:37:b5:3b:15:7d:cc:
81:4b:90:a3:c5:04:de:1b:b5:62:f5:ca:6f:1f:70:
0a:8f:ff:42:83:a9:55:f3:e3:ef:c4:73:84:95:00:
63:04:f4:57:0d:8a:d7:92:b7:30:a6:a6:29:7b:59:
46:a6:0d:22:a4:5c:ac:cf:e1:6b:25:a4:60:d7:12:
6e:00:39:bf:f6:4b:e1:bc:f6:3d:7c:95:20:d6:d5:
a9:4d:c2:c2:7d:1b:e4:ef:b9:a4:51:f7:bf:31:ff:
fa:d5:5f:10:e7:5b:e1:36:99:a3:d0:dd:69:f0:a2:
3e:fe:c0:f6:4e:a5:10:8f:59:b4:b5:9d:12:d3:69:
95:5b:da:3a:2a:09:5f:dc:7b:3d:02:f1:07:4f:56:
17:b9:0e:fe:9a:57:96:c7:83:c3:93:4c:bc:28:d4:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:C0:F2:67:74:D2:69:F7:93:45:D1:E3:DE:F9:EE:41:D0:7D:0D
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:56:a7:02:0e:1c:50:70:5d:a7:fd:25:ea:fe:c7:1d:15:84:
33:8f:75:0b:2f:eb:fb:03:21:b7:94:b7:4f:f4:8d:80:17:41:
0a:23:9d:e7:dc:9c:0f:51:53:bf:87:8f:1a:df:3e:8f:45:ac:
cb:24:39:2f:4e:a4:2b:af:41:69:1c:cf:22:8e:09:c3:8d:f0:
74:cf:2a:3a:fa:4f:82:06:49:3b:03:75:8e:78:b6:3b:22:d0:
7f:a7:f2:ea:dd:76:08:38:63:f5:84:24:b8:cb:67:04:07:d1:
e2:6b:5e:e9:96:39:40:69:e2:f8:c0:ab:88:af:8f:83:33:be:
27:f0:92:b2:56:0e:fb:05:95:6c:93:d1:aa:e7:87:2a:e0:9f:
33:78:ed:4d:c1:f4:57:cb:da:60:03:70:dc:8e:16:fb:46:e5:
19:e9:fb:9e:f5:4a:11:8e:0c:8f:ef:1d:81:1e:35:76:3f:97:
0f:b7:cb:e5:5c:65:5f:5b:d4:9f:37:46:78:63:b8:ba:0b:2a:
08:e0:b0:83:29:ba:ef:b3:e6:eb:b4:87:0f:e3:d6:d1:66:d5:
ee:a5:53:5d:84:60:55:1e:84:0d:ca:f0:bb:db:f2:85:cf:51:
16:b1:a9:67:12:ac:fb:59:e1:5d:30:2b:ec:78:da:8e:88:e9:
f6:c4:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:39:47 2026 by rpki-client