
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier: g0F4ICY9JJIAgCqBgCheRtQTlONPxV7HZojtTc9Yv4w=
Subject key identifier: 0B:A4:33:26:99:BF:5D:BA:92:AB:AB:BD:D4:E7:65:BA:5D:B0:1A:F4
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 0946
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number: 092E
Signing time: Sat 10 Oct 2026 20:15:56 +0000
Manifest this update: Sat 10 Oct 2026 20:15:56 +0000
Manifest next update: Sat 17 Oct 2026 20:15:56 +0000
Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: Ceeg/qxvTIVJRuz+b/k546boBsP1X/i2AnfkT8jjum8=)
2: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=)
3: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=)
4: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Oct 10 20:15:56 2026 GMT
Not After : Oct 17 20:15:56 2026 GMT
Subject: CN=6aca9cfc-a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:77:c0:97:f2:11:ee:ce:1d:78:41:39:6f:
71:1a:69:9f:8d:3f:15:33:c4:f0:05:ac:e7:3c:83:
00:f1:6b:c5:8e:90:18:47:a7:af:d5:47:68:5a:60:
a2:f3:5b:c8:e6:9f:dd:18:64:4d:a9:8e:40:8e:94:
09:84:2f:b7:68:15:3e:cf:95:6c:e2:ae:3b:49:74:
99:6e:53:43:d2:96:c4:72:2a:b8:4f:0e:de:9b:47:
44:40:5f:1f:b5:8b:ad:e1:04:58:92:88:8f:11:c0:
3a:4a:a8:56:40:a7:19:31:4f:64:d5:19:43:18:30:
fe:7a:0b:56:32:e7:ae:eb:8b:f3:86:21:c9:8a:e0:
54:7c:ae:9e:7c:78:c4:6f:2c:fa:de:2f:20:3e:ca:
57:15:1e:15:14:7a:03:e2:c7:49:cf:c8:57:92:0a:
b7:e9:c8:35:c8:b8:00:46:ca:be:cb:69:3c:1d:2a:
83:4d:ba:9d:d9:1b:ae:43:39:68:01:aa:a6:f2:ee:
41:fe:c6:ac:6c:8f:45:f4:cf:c5:32:56:eb:88:75:
42:2c:b6:d1:e6:4d:43:8d:3c:fd:84:4e:4d:09:65:
e8:02:08:e2:d1:6f:95:ec:78:17:ae:05:86:b0:0d:
cd:0d:ad:e9:d1:38:50:56:2f:80:65:1f:4a:f8:48:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:33:26:99:BF:5D:BA:92:AB:AB:BD:D4:E7:65:BA:5D:B0:1A:F4
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:2c:c0:e4:86:b0:b0:a0:05:a0:02:42:a2:cf:2f:a5:0e:
e6:f5:b9:36:2a:2a:18:d1:ce:b0:c6:e5:79:64:4d:08:8a:88:
0a:67:07:27:9a:33:96:09:4c:94:a7:52:4e:02:51:b9:ad:29:
15:5e:11:d6:ce:84:6c:eb:6e:14:90:44:a1:78:f3:c8:6a:90:
c4:a6:c7:05:58:cc:85:ab:78:79:43:72:d8:13:e6:3e:3e:47:
48:c9:10:90:e7:86:b7:af:d1:43:b6:56:62:6a:2f:51:89:8d:
bc:69:89:1c:3b:3e:15:df:a6:e2:d4:95:bc:b6:7b:52:fb:98:
be:15:9f:b5:d5:25:e0:bd:dc:aa:43:0c:fa:ed:64:d3:ca:32:
ca:53:e5:04:60:20:85:44:26:7e:73:dd:21:78:4a:06:f7:3e:
5a:bf:19:43:22:9e:4c:41:55:6f:3e:00:be:ff:c4:0c:77:1b:
12:bd:a6:40:b6:2c:b4:7e:c5:fc:40:45:3b:bb:c6:e4:17:36:
74:fe:2d:e5:12:6b:bb:5a:f2:38:06:7a:4e:d7:47:c8:cd:09:
c7:ef:99:b3:19:5f:fc:00:cf:18:61:44:b3:63:94:84:71:60:
0b:56:19:01:08:45:57:86:d2:66:17:84:8b:72:16:5d:5a:bf:
e9:3a:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:01:56 2026 by rpki-client