
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier: WRyCLX5i3uBySHLMO7GuW1W7XsmoA8kZkK2WQV6BbuA=
Subject key identifier: F2:98:36:ED:C7:91:39:87:D0:AB:6F:4C:BC:D6:83:D0:71:77:8C:AF
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 02FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number: 02EB
Signing time: Tue 13 Oct 2026 01:29:46 +0000
Manifest this update: Tue 13 Oct 2026 01:29:45 +0000
Manifest next update: Tue 20 Oct 2026 01:29:45 +0000
Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: M3fFZ3V/385x/CzmGPhK5WwIDjMxatxKUMbFgRRX6z4=)
2: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=)
3: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: k4ktbvDzNMFlZcj8AA2wIV1+SLib12XIvSfJT6zbmGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Oct 13 01:29:45 2026 GMT
Not After : Oct 20 01:29:45 2026 GMT
Subject: CN=6acd898a-4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:e8:a2:ba:8a:db:a4:85:1d:7e:dc:db:ef:
f1:34:10:ce:a4:1a:3d:77:eb:ae:82:30:90:02:f7:
f4:e2:a1:fe:48:c6:de:87:35:14:99:fd:4b:d0:16:
48:ed:83:2c:06:8d:41:7f:13:fc:cb:d7:15:be:98:
97:c4:69:da:90:38:1c:c2:ce:71:d3:de:96:31:d8:
92:62:96:82:7b:c6:87:fb:ce:91:0b:b4:c1:3a:38:
e2:71:37:60:68:9a:ab:af:05:9f:6c:41:81:83:6f:
22:1b:4b:e0:e6:3b:1c:5e:e3:08:06:bd:9d:6a:e6:
3f:54:f0:40:38:f3:2d:e6:ab:48:95:78:cb:18:e0:
2b:69:9d:c0:37:47:47:ac:f3:62:b5:a7:2f:ec:fe:
84:8b:16:3c:69:ad:9d:38:9a:c4:74:ac:23:2a:5b:
08:13:8b:5e:87:aa:f1:99:e2:92:b4:c9:92:4e:2f:
86:cc:cd:39:aa:f3:10:ca:a4:bc:8b:49:6a:fd:21:
22:da:80:e4:16:fc:61:5b:a5:8e:63:6f:a7:20:ff:
a0:2f:aa:dc:89:14:a4:a8:ee:8e:a8:3e:6d:04:73:
38:ce:7b:00:3b:6f:b2:53:17:7a:c1:9d:f8:ee:1b:
62:cd:c4:64:ea:1c:04:91:3a:cc:6f:ff:7a:5b:fb:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:36:ED:C7:91:39:87:D0:AB:6F:4C:BC:D6:83:D0:71:77:8C:AF
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:f5:20:d0:6f:c4:a1:c1:1a:2e:51:10:f4:4f:3e:72:94:
e3:9d:06:22:f4:33:2a:ed:f8:0f:5f:b7:c4:76:c8:bd:84:06:
2d:27:e7:1a:5f:7b:d2:da:97:e4:d9:02:14:d3:03:11:1b:f8:
5f:b6:7a:32:90:29:21:5a:81:bf:6c:aa:96:4b:13:ba:45:4f:
8b:10:bd:85:44:d3:74:ba:e2:dc:82:70:99:c9:c6:82:09:dd:
28:58:c4:8c:0f:77:8c:e3:25:23:a3:bf:d9:53:37:e6:e8:6c:
b4:a9:78:54:28:f9:28:6a:30:7a:ca:1c:8f:9a:09:4a:bf:a3:
92:1e:46:bc:f2:7a:0e:51:3b:cb:15:6c:16:62:6a:77:9a:b3:
18:8b:98:5f:14:cd:76:0e:b0:db:40:3d:08:ee:45:41:45:7b:
54:0d:4b:6f:5a:af:9a:29:c1:7c:3a:ec:7e:e0:f4:48:45:02:
56:46:78:ef:7e:b6:90:c0:94:f1:1c:32:ea:70:5e:e1:3f:e2:
8f:16:c2:2f:6d:4d:1b:5e:e5:96:f2:23:db:ea:bf:ff:9b:77:
2c:8d:ec:88:94:05:41:b9:1e:a8:fb:d2:ca:ca:af:09:4a:80:
dc:43:3d:09:ad:f9:a5:1a:91:29:d3:38:b2:aa:cb:1b:08:61:
80:f0:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:09:26 2026 by rpki-client