
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
File: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft (raw, json)
Hash identifier: PIIQ7kP4u2jHxwDtiv9L+oe5vnAADlwsh0mK6Mk4kao=
Subject key identifier: DF:69:33:B7:4D:C7:B2:AA:D1:17:A3:E4:2D:9F:6B:E9:52:56:4C:04
Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
Certificate issuer: /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
Manifest number: 9C
Signing time: Sun 11 Oct 2026 07:56:33 +0000
Manifest this update: Sun 11 Oct 2026 07:56:32 +0000
Manifest next update: Sun 18 Oct 2026 07:56:32 +0000
Files and hashes: 1: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl (hash: 4CxJm+htyOjS2oEaJ9TstFKx44652wnmIVVGXix0mNY=)
2: 2812D988D68111F09571D1A368D3641D.roa (hash: VKKHpjPTEvlkEGFu+dpzNhBb8en/BchDeWr6ImqXAAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Validity
Not Before: Oct 11 07:56:32 2026 GMT
Not After : Oct 18 07:56:32 2026 GMT
Subject: CN=6acb4130-98ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:d9:a9:4d:d0:af:e4:eb:b6:d0:25:31:e9:
e5:d9:1c:5c:60:f8:0c:7a:b4:fa:ea:89:65:ea:a1:
3c:2a:da:0c:70:a9:e9:14:34:ea:c0:7e:8e:81:aa:
e5:45:e6:9d:53:66:6a:ab:07:de:38:05:ae:28:d4:
32:f9:ef:a0:25:b6:05:a4:29:2b:3f:cb:17:0c:0c:
ec:fb:44:3d:68:c2:59:4e:d9:10:23:2d:66:d0:9c:
c0:25:7a:04:88:5e:73:a0:b5:93:93:d5:7b:2c:29:
57:41:ee:89:02:86:59:a0:cb:49:bc:cb:7b:cd:be:
b5:03:7c:13:25:e6:0d:ba:f7:ab:e5:48:c7:8f:62:
8f:a4:73:3d:e8:ec:fd:3e:80:dc:5b:d1:d6:72:2f:
35:f6:f0:c0:e5:a2:8b:79:41:81:ad:2f:96:c4:95:
57:0d:00:92:54:5a:da:1d:a5:c0:3b:5f:f5:18:5e:
ec:a8:20:01:2a:6e:8d:92:25:fb:54:b2:c9:cd:98:
38:d1:1a:7f:b9:fe:71:45:e1:58:47:b5:21:42:59:
10:63:99:f6:98:af:5d:80:f2:cc:69:d6:1c:f7:58:
55:42:66:dc:de:df:f2:9e:dd:7c:d9:88:b8:5c:60:
c3:b6:1f:24:1f:82:32:30:36:94:9f:5b:e4:b2:51:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:69:33:B7:4D:C7:B2:AA:D1:17:A3:E4:2D:9F:6B:E9:52:56:4C:04
X509v3 Authority Key Identifier:
keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:44:16:0d:7b:85:92:9d:eb:7a:4c:ea:f6:d8:c9:b2:a8:14:
22:a1:97:88:cd:75:b4:9c:b6:b1:07:c7:f4:2a:2e:68:b0:09:
62:8a:3c:dd:c4:3c:2a:fd:07:a2:d7:d9:2d:62:7d:dc:60:95:
a8:78:17:5f:7d:41:7f:34:d4:fa:e8:53:d7:7b:ef:d7:19:60:
bc:be:09:5a:72:84:1d:ac:d5:53:3c:94:6e:53:76:ac:2d:ae:
c8:7f:17:57:54:5d:a9:04:3e:29:19:c6:b4:61:3d:7a:7c:e3:
12:89:dd:30:27:f6:4f:ad:72:ee:10:c8:86:b9:bc:ff:c6:e5:
e1:ad:c4:40:2b:20:16:c1:78:7d:0c:25:db:4d:36:05:95:e7:
5d:aa:a1:5a:ca:ce:4b:3b:9d:3a:90:18:04:31:3c:a3:61:02:
ca:6b:9a:e3:6a:e2:48:6c:42:89:f6:a4:08:67:6c:f2:b6:91:
ed:8d:be:df:b7:8c:03:30:0b:1e:b9:e4:6e:60:86:95:80:ca:
a3:6e:43:2b:c2:ca:d3:80:58:79:c9:34:86:d3:18:f6:28:d8:
46:4d:a8:c5:1e:52:78:de:b2:5f:b3:a2:0b:ad:82:a5:23:4f:
bf:15:a4:62:f9:af:64:63:b8:01:ab:9e:60:c7:01:81:00:49:
7c:55:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:02:23 2026 by rpki-client