
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier: s+85VpRBL3+zRiCjrOiDU0La2AU3N153aKTIqVXYX58=
Subject key identifier: B7:BE:BA:1B:10:18:AB:EF:70:BA:EC:FB:81:91:4A:89:C1:8F:60:AA
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number: 01ED
Signing time: Mon 21 Sep 2026 03:24:12 +0000
Manifest this update: Mon 21 Sep 2026 03:24:11 +0000
Manifest next update: Mon 28 Sep 2026 03:24:11 +0000
Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: EdQZNDJvnk4LdcTuvaDLGj2jCu+KytQoiHVp0GLyuHw=)
2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Validity
Not Before: Sep 21 03:24:11 2026 GMT
Not After : Sep 28 03:24:11 2026 GMT
Subject: CN=6ab0a35c-e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:0e:6d:0e:89:3e:4e:c3:fa:33:14:f2:e9:
98:55:77:69:78:68:15:ba:34:1e:94:f1:d3:64:e0:
ea:b9:56:a2:6a:00:e3:fe:05:82:fd:62:b4:25:83:
19:cf:4f:1b:9f:2b:2e:78:44:3c:cc:2e:1d:d3:5a:
b7:34:9b:ec:4d:4e:13:9b:52:46:b1:ae:eb:55:36:
72:b4:53:35:7c:ed:7d:ab:fa:35:65:0d:82:ea:6d:
8e:7e:8c:0f:b7:32:f0:4f:ba:16:ed:6c:1e:6d:ec:
90:cb:f4:25:df:fd:24:23:a3:21:d0:05:f9:26:d5:
21:bd:36:19:6f:c7:43:c2:cf:aa:64:09:a2:da:b2:
6a:80:fc:29:82:d6:91:6e:d1:35:af:26:f1:3d:c8:
bc:7f:91:42:e6:cb:0e:9a:22:97:54:f1:86:5d:6a:
e3:46:41:c3:a3:86:18:dd:a1:df:6e:98:c1:03:ae:
fd:c3:86:03:00:90:3c:7e:13:72:a5:b5:b4:2f:0f:
d5:60:c2:ca:3f:d6:fa:88:9c:0d:1d:75:48:ac:f3:
cf:ad:ad:5d:7d:58:e0:46:88:29:1b:b2:b8:16:53:
39:2c:b8:91:29:58:77:74:cd:af:de:87:f9:a6:30:
17:5b:2c:ac:11:4e:f2:6c:11:19:b9:d8:9a:d2:ad:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:BA:1B:10:18:AB:EF:70:BA:EC:FB:81:91:4A:89:C1:8F:60:AA
X509v3 Authority Key Identifier:
keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:c6:8e:3b:e1:d8:53:14:3e:01:31:bc:69:56:5d:ef:22:
8b:51:07:01:cd:42:58:3a:21:72:42:2b:02:a6:e2:6a:55:5d:
ba:67:15:4d:02:7f:da:0a:00:91:c6:74:97:00:36:cd:c2:4d:
10:d4:dd:96:a9:e3:3c:ef:8f:56:16:8a:7a:b8:88:44:9f:af:
1d:f5:3a:dc:f6:c9:24:b8:5d:ea:3e:e3:f1:41:2a:7c:ef:96:
e0:fa:71:d3:4b:1a:84:4c:2b:ff:f3:3b:c1:7b:7d:26:3c:cc:
d8:d0:27:27:13:90:c0:cb:79:99:c0:48:ff:9e:cb:52:96:8d:
3e:21:60:2b:6e:be:d8:b1:f6:46:5a:da:3a:81:3d:1b:59:b5:
13:fe:b7:33:bc:8a:35:ae:de:83:29:ed:ae:0a:73:c1:66:15:
1e:b0:66:69:5e:c7:9d:38:8e:d4:f4:f6:cc:76:c7:d4:ed:da:
97:d2:2f:e0:64:cf:f6:88:05:0d:b7:cd:a6:b8:83:63:ff:d1:
79:cb:bf:2d:27:83:a8:82:df:f7:a0:33:e6:f6:81:7a:17:55:
02:38:be:9d:a3:9b:97:fb:8a:fe:e7:e9:6d:62:92:a1:2c:1d:
1d:c6:d8:cd:34:d3:0f:e6:87:49:9c:61:d7:39:a1:df:f9:c5:
3d:5d:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:13 2026 by rpki-client