
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: ZncEkt0C413DA9VQ2ugR2Y1pG2+6x569L+OfGSEdFts=
Subject key identifier: 55:73:67:0F:EB:10:8C:4A:2C:91:83:1A:82:A4:6E:B9:62:20:D6:99
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 19D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 1992
Signing time: Thu 16 Apr 2026 16:22:11 +0000
Manifest this update: Thu 16 Apr 2026 16:22:10 +0000
Manifest next update: Thu 23 Apr 2026 16:22:10 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: 7RzadlQWMEsSMzW0YEkbgxmf+kvdUNerlxMiC4VbN3Y=)
2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6613 (0x19d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Apr 16 16:22:10 2026 GMT
Not After : Apr 23 16:22:10 2026 GMT
Subject: CN=69e10cb2-8826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:86:81:2f:ca:62:a0:30:ed:91:d5:2e:f7:
7d:b1:0c:16:1a:ae:f8:2b:e2:8d:1e:5a:84:1f:5b:
3e:03:4a:6c:ca:b5:bd:61:ee:46:c3:82:91:13:cd:
58:3f:db:64:ae:c4:1e:19:ba:5d:e1:1e:bc:a3:1f:
27:1d:dc:90:b5:c9:ac:de:e6:b0:b2:c3:03:81:3e:
8c:c3:39:ce:f1:e7:24:cb:e2:24:24:05:fb:53:6d:
9d:7d:d0:72:e3:f3:dc:2c:41:1a:d1:54:47:df:79:
ed:b8:2a:80:ba:2a:e2:d3:22:c4:4b:6f:4e:84:ca:
92:d9:86:81:6f:6f:69:30:69:a4:5c:ad:3b:b1:0c:
3c:95:9c:3b:74:2e:d7:eb:d1:b2:ba:52:ad:45:59:
7b:91:7e:4b:53:1c:e1:74:f2:0e:d8:0d:0b:41:79:
6a:37:98:bf:42:f1:7d:28:18:4c:a8:f7:bf:0e:ed:
b7:b7:97:ac:0a:bc:4b:09:24:26:f9:64:ea:c9:0a:
1d:10:96:1f:11:01:90:86:15:9a:1d:2b:a5:86:4a:
09:dc:e2:85:02:bc:45:98:9d:25:c4:ff:bb:29:58:
35:b4:38:1a:77:5d:65:08:b6:d4:a5:32:61:bd:5e:
4a:3f:04:ea:1b:5e:ef:04:d7:09:67:f0:a3:4c:f4:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:67:0F:EB:10:8C:4A:2C:91:83:1A:82:A4:6E:B9:62:20:D6:99
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5a:71:4e:68:da:42:aa:1c:2b:60:a7:d7:c1:ea:bd:11:ba:
1a:0d:d8:d5:3c:7b:70:fa:1e:64:ec:e0:23:38:25:41:57:c3:
c7:5f:fc:c7:c2:73:3f:0e:8d:ac:99:63:54:6f:de:71:1b:a2:
8a:5c:21:b8:78:ae:99:02:60:00:aa:4d:bb:b3:75:0e:dc:d9:
b0:e9:3b:40:d4:f7:0e:dd:18:5a:4b:b0:ed:4d:44:9d:25:c4:
83:f8:dc:2b:c8:e0:c2:ff:55:37:44:06:49:b3:1c:4a:82:9a:
7d:ad:ff:b3:63:e3:a9:6d:b3:f0:bb:2a:08:9c:b0:a2:57:c1:
c1:ec:98:0c:01:cf:52:3c:26:8a:5c:c0:98:af:9f:c1:de:94:
73:a2:87:96:63:0f:f5:b6:db:1c:7d:0b:22:23:89:3c:6e:7e:
de:38:b9:d9:79:d2:b6:92:eb:3b:f7:71:bb:db:0c:54:32:76:
6b:75:38:98:2b:16:10:1f:41:c9:6f:c1:80:ed:75:4d:b5:c7:
fe:45:a4:71:7d:28:4f:5f:b6:37:41:06:be:5d:a1:08:00:9e:
94:7f:c6:06:3a:94:cb:26:fb:2d:a8:54:02:6c:92:9a:6b:fe:
89:8e:b9:ee:b8:a7:c1:84:e1:5a:43:74:7a:91:ed:7d:1e:5e:
56:27:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:27 2026 by rpki-client