
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier: pHqYFd7S/pjAoFSje1mtg6NF2wENUFFZUTJBBnsBs40=
Subject key identifier: B0:E7:0C:B7:E5:8F:C8:A1:4C:A8:AD:6B:2C:72:D0:09:58:5C:C9:0E
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number: 017D
Signing time: Fri 25 Sep 2026 04:43:21 +0000
Manifest this update: Fri 25 Sep 2026 04:43:20 +0000
Manifest next update: Fri 02 Oct 2026 04:43:20 +0000
Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: Mt8pO9xXbJKwtzzr9rZEPf8kmg4vNkEDC3u1+pl37U8=)
2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Validity
Not Before: Sep 25 04:43:20 2026 GMT
Not After : Oct 2 04:43:20 2026 GMT
Subject: CN=6ab5fbe9-f8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:78:0b:70:12:d5:ce:c8:2f:ef:88:e5:c0:
0d:ad:82:a4:95:47:32:2e:4f:ca:de:00:7b:f3:3c:
d9:e0:7b:03:d8:82:6d:84:26:12:5e:58:7b:96:14:
4e:ca:4d:1c:ee:a1:2f:97:9c:6a:e4:ab:b7:f0:42:
4e:5b:5f:8e:6f:ce:dd:3d:e3:ee:8b:52:e3:4c:7c:
e0:9a:ef:0a:34:58:86:a2:83:70:1b:a0:e4:38:43:
e2:5b:0e:ef:c1:0e:74:c3:dc:e6:a5:84:ea:43:eb:
7d:18:e2:76:dc:9b:fc:95:c9:65:82:c6:2e:9c:f9:
c5:b0:29:f1:54:ae:8a:d4:b0:b0:5a:e6:01:59:22:
e0:f8:89:e3:b7:1f:37:bf:82:b8:f0:e0:d8:49:7a:
87:da:6e:33:fa:92:c2:7a:8b:8b:2f:a2:3d:b1:27:
4b:22:49:d6:6c:47:d9:5c:11:cd:a0:68:16:2f:2a:
9d:27:4f:17:38:53:ec:db:d1:f2:a5:89:aa:f0:ad:
a6:3b:e1:36:58:74:db:e8:9e:82:28:e5:7f:1d:ef:
e8:00:c7:e2:f1:8b:6f:be:0f:ff:ad:6a:1f:a3:0e:
b0:4d:a7:bc:5c:7d:47:09:1e:5f:f6:6b:f2:a4:e2:
b9:63:42:6e:f2:94:e0:73:57:24:a8:25:62:d5:e6:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:0C:B7:E5:8F:C8:A1:4C:A8:AD:6B:2C:72:D0:09:58:5C:C9:0E
X509v3 Authority Key Identifier:
keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:68:2f:53:e8:9a:b6:35:64:74:60:ca:de:78:7b:f3:06:
e7:52:94:4e:23:78:12:d7:cd:cd:93:1c:b7:21:56:e1:55:28:
1e:d7:f4:f7:5b:07:a3:bc:b4:0a:08:50:77:c8:6f:1a:97:eb:
24:bd:b6:fc:f9:1f:8f:58:30:d8:55:e5:c6:84:34:9f:6b:94:
46:7e:f6:3e:15:06:f7:0b:25:92:01:05:9c:d8:9c:ff:56:2a:
a5:13:be:e7:96:59:ad:25:63:c9:e2:a7:00:4c:43:be:43:94:
55:b7:6c:d1:b5:b0:b5:dd:24:de:0d:a9:27:04:ca:24:9d:7c:
67:eb:c7:e9:14:54:da:f4:23:68:13:09:55:63:7f:bd:85:44:
57:51:85:30:42:60:38:c8:f4:71:cc:a7:4a:5e:fa:31:b0:43:
ea:03:25:da:57:23:ca:cc:cf:69:89:46:cf:48:ac:dc:46:d2:
37:2f:ad:a5:d7:d0:9a:b6:8a:f6:65:28:bd:ae:45:b4:75:db:
55:1f:6a:e2:05:f8:db:f7:ad:0c:6b:25:46:f5:0b:3e:58:27:
a6:b9:b6:10:8c:b3:a1:09:c6:4d:73:ae:f5:cb:9e:4e:13:48:
ee:7d:8e:a4:11:e9:63:cc:28:d2:52:36:26:2a:55:81:21:71:
34:8e:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:49:45 2026 by rpki-client