
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier: pCPkH/Y+gWpM3Bv58PN2LuRcYF5kgvUtoydH8uotvtM=
Subject key identifier: 5F:81:DB:95:D6:01:EF:48:5E:AE:FB:84:29:F0:35:D9:15:5F:2C:08
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number: 0291
Signing time: Tue 29 Sep 2026 02:11:11 +0000
Manifest this update: Tue 29 Sep 2026 02:11:10 +0000
Manifest next update: Tue 06 Oct 2026 02:11:10 +0000
Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: T9C2/OX5UBMlI1DS8M9gtivkA1bP4J6a5MqA5FN6u5c=)
2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Validity
Not Before: Sep 29 02:11:10 2026 GMT
Not After : Oct 6 02:11:10 2026 GMT
Subject: CN=6abb1e3f-aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:99:30:5a:92:bf:58:dc:30:ad:81:b6:1a:
7f:6a:96:5a:4a:d8:4e:dd:d7:6b:f6:82:ef:89:e8:
d6:a4:f7:48:d0:c4:8b:73:0f:97:6d:c8:ef:3f:46:
0f:61:be:c6:9f:62:6f:49:6d:b5:2a:c3:49:49:4e:
d2:8d:e5:f9:ab:f9:e9:e5:4d:49:8e:1e:0a:66:69:
cd:00:e0:73:23:42:7e:b5:4e:b6:69:9f:b0:0f:14:
e4:3a:3a:53:ae:a9:62:90:77:e1:e5:c7:1a:93:c3:
c2:4e:52:e9:df:28:07:0a:98:bb:04:62:30:4c:4b:
ff:90:4e:f5:dd:88:1e:fd:c6:c9:f5:e4:77:c4:12:
6f:f9:d5:28:b8:a6:b4:ca:54:02:76:5c:b5:4e:f4:
a0:da:44:31:a6:da:21:91:03:2d:dd:e5:96:21:ef:
b8:9f:0a:9a:06:4e:58:a4:13:95:23:25:9d:2d:87:
8c:d9:c2:30:b0:08:84:c8:8d:b3:0d:6b:a0:8a:69:
4e:e7:91:ec:f7:0b:02:96:4c:4e:9e:e4:63:90:20:
d6:4a:4d:87:7e:55:4a:b5:46:6e:cb:06:b4:94:a0:
71:5a:62:32:16:88:01:d1:61:fc:bb:f3:aa:5f:91:
a9:9d:cd:f0:5b:3d:32:65:79:e0:e9:cf:7f:20:07:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:DB:95:D6:01:EF:48:5E:AE:FB:84:29:F0:35:D9:15:5F:2C:08
X509v3 Authority Key Identifier:
keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:4e:b8:95:e1:40:aa:c7:b6:85:b2:2b:cd:63:5e:3d:67:ee:
0d:47:d1:73:df:90:57:37:e3:6e:c0:3c:26:15:57:80:44:1c:
ec:b9:75:cf:64:ee:91:27:0b:32:32:52:8c:b5:cd:a5:e3:8d:
cc:29:dc:f2:53:07:ae:49:da:35:10:ae:c6:fd:43:a0:98:2e:
70:4a:a1:0f:ec:fb:bc:36:4c:85:1f:51:3d:b2:b5:b7:13:9b:
3c:af:a2:ba:dc:93:5e:e5:07:74:83:a5:ce:0c:54:47:19:42:
ea:a0:3f:fd:06:c7:23:77:da:91:04:30:cb:8d:b2:94:23:23:
99:f5:30:7d:cb:64:2d:7a:f2:33:e6:b3:9d:d1:b1:85:66:fb:
78:33:26:e4:23:d3:b3:c3:1d:66:77:72:a9:ff:3f:12:3c:c7:
d1:67:6f:20:7d:79:bc:29:03:f9:d1:3e:cc:5b:ae:e7:5f:a5:
78:f1:7e:fa:ff:4c:3f:53:77:1d:3a:1b:11:e4:96:f1:0e:65:
fb:e2:d3:d6:92:61:3c:34:bf:10:d5:73:02:77:b0:03:3a:45:
07:e1:85:21:ad:0c:d1:7b:5c:9e:a7:6a:22:0b:bf:70:99:80:
16:46:3c:8d:4c:8d:ec:6d:8a:5c:f9:94:58:88:41:c5:0a:7b:
a8:d8:49:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx
NDI4MjU1MkUwHhcNMjYwOTI5MDIxMTEwWhcNMjYxMDA2MDIxMTEwWjAYMRYwFAYD
VQQDEw02YWJiMWUzZi1hYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0KZMFqSv1jcMK2Bthp/apZaSthO3ddr9oLviejWpPdI0MSLcw+XbcjvP0YP
Yb7Gn2JvSW21KsNJSU7SjeX5q/np5U1Jjh4KZmnNAOBzI0J+tU62aZ+wDxTkOjpT
rqlikHfh5ccak8PCTlLp3ygHCpi7BGIwTEv/kE713Yge/cbJ9eR3xBJv+dUouKa0
ylQCdly1TvSg2kQxptohkQMt3eWWIe+4nwqaBk5YpBOVIyWdLYeM2cIwsAiEyI2z
DWugimlO55Hs9wsClkxOnuRjkCDWSk2HflVKtUZuywa0lKBxWmIyFogB0WH8u/Oq
X5Gpnc3wWz0yZXng6c9/IAeuAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+B25XW
Ae9IXq77hCnwNdkVXywIMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy
OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3
R3ptU1lmdkxrRTRVS0NWUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdU64leFAqse2hbIrzWNePWfuDUfRc9+QVzfjbsA8JhVXgEQc7Ll1z2TukScL
MjJSjLXNpeONzCnc8lMHrknaNRCuxv1DoJgucEqhD+z7vDZMhR9RPbK1txObPK+i
utyTXuUHdIOlzgxURxlC6qA//QbHI3fakQQwy42ylCMjmfUwfctkLXryM+azndGx
hWb7eDMm5CPTs8MdZndyqf8/EjzH0WdvIH15vCkD+dE+zFuu51+lePF++v9MP1N3
HTobEeSW8Q5l++LT1pJhPDS/ENVzAnewAzpFB+GFIa0M0XtcnqdqIgu/cJmAFkY8
jUyN7G2KXPmUWIhBxQp7qNhJUA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:49:53 2026 by rpki-client