
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier: zfnJ7s4Vd0wIs4DBZnsB0hdporcUePNpd0lsxT1ghO8=
Subject key identifier: F2:2E:C2:4E:A9:3A:11:6C:49:43:40:43:44:6C:10:D0:0A:2A:5D:49
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number: 0269
Signing time: Wed 07 Oct 2026 02:31:12 +0000
Manifest this update: Wed 07 Oct 2026 02:31:12 +0000
Manifest next update: Wed 14 Oct 2026 02:31:12 +0000
Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: DliDNm1+20oW25Qt020jovsFT9bHxOrN4IS3QIlXG7g=)
2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Oct 7 02:31:12 2026 GMT
Not After : Oct 14 02:31:12 2026 GMT
Subject: CN=6ac5aef0-08f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:eb:7e:31:f8:b4:89:49:a2:37:3f:90:52:
9a:0b:ca:04:0a:49:4f:77:16:81:1f:89:00:25:a0:
12:de:a9:f9:30:73:f6:e5:29:ee:7d:50:e4:df:b2:
e7:82:b5:f6:20:43:df:a3:a9:be:b3:f3:b9:7b:af:
cd:c6:97:e8:68:18:30:7f:ea:dc:59:41:ff:19:a8:
6d:ac:38:49:95:6f:e4:92:1f:35:20:80:ed:58:de:
e2:99:aa:2b:3b:10:1b:38:2e:38:e6:6a:8b:04:d9:
b7:c7:21:67:c3:39:c0:6b:96:4c:2b:06:1e:01:34:
b9:50:ae:cf:c5:3b:39:b4:ca:2a:1b:9e:dd:f2:65:
35:59:b2:c9:72:1f:bd:e4:8b:e7:a5:78:c3:1a:42:
63:af:d0:02:5e:3e:94:cb:e4:6c:40:97:de:ff:49:
67:d9:fe:0a:0e:d8:27:d4:87:51:23:6e:80:65:9e:
ba:53:34:b5:c6:48:b1:a8:44:c2:78:3c:07:af:90:
dd:cc:cb:f0:98:08:c9:a7:f3:1b:60:c3:9f:70:8e:
ca:a5:32:6e:73:92:59:bd:86:b2:00:6e:e7:ed:a1:
64:7a:5e:3c:74:c0:ba:2f:79:ed:11:c5:83:00:2a:
b0:48:d3:d1:39:9f:d1:19:b8:33:24:13:58:eb:99:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:C2:4E:A9:3A:11:6C:49:43:40:43:44:6C:10:D0:0A:2A:5D:49
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:48:62:f4:0c:99:4a:7f:be:30:68:3f:5e:15:12:7f:5b:88:
ef:98:6b:0a:e7:1a:7e:97:e6:73:1d:c0:dc:4a:41:1a:be:cf:
6c:fc:d3:bd:0a:a4:ca:96:b1:f8:d2:33:ae:aa:f6:8c:32:f0:
36:30:99:5b:28:f6:48:24:9a:19:9d:2b:82:29:48:5f:68:24:
30:f2:02:66:2c:72:72:06:fe:06:aa:17:37:58:e6:ba:a7:31:
29:5a:4b:e3:02:94:c2:0a:fd:23:7f:a1:88:d4:f6:33:c2:20:
6c:3c:d1:e9:fe:17:da:50:57:17:31:53:8b:d5:d8:2f:24:f1:
9e:d4:54:e8:b8:db:8b:50:66:59:f5:2b:62:e6:b0:d6:0d:6f:
a0:a8:9c:8c:fd:1b:3e:47:c8:18:ac:aa:a4:d0:63:f4:8a:76:
9b:8b:9d:c3:62:24:5f:da:fd:e6:36:8d:90:ee:cd:11:3c:f5:
52:d3:56:62:9e:a2:3b:39:39:e6:db:c7:fc:0d:ee:fc:78:9c:
e9:86:8d:52:c8:db:26:6b:d6:9e:79:0a:19:41:58:0f:c3:f9:
4c:ae:4d:64:88:96:30:34:49:08:31:75:01:0b:d9:31:d2:55:
8e:d9:fc:02:a0:92:53:dd:d1:3d:86:94:c8:2e:a1:9d:e7:a6:
f7:18:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:14:47 2026 by rpki-client