
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: MtnIvBdlqBX+EDbxGVfMgGT9GFRNDBwBIyrEj4ucjLs=
Subject key identifier: 6D:F4:A0:7E:71:20:EE:BB:8E:D8:AD:A2:FC:EB:47:E9:24:00:4D:6A
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 19AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 1976
Signing time: Mon 02 Mar 2026 00:55:29 +0000
Manifest this update: Mon 02 Mar 2026 00:55:28 +0000
Manifest next update: Mon 09 Mar 2026 00:55:28 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: ihKnHi2gtj1M3ckWcrB3tF35Z81caMOz59MtvOLHpJk=)
2: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: 0NwXv54cO0MCE+TFwOb412Zt9RzqcUO0YSDPb8weCDE=)
3: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc=)
4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6570 (0x19aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Mar 2 00:55:28 2026 GMT
Not After : Mar 9 00:55:28 2026 GMT
Subject: CN=69a4e001-6dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:47:69:ec:01:27:32:09:4b:a4:74:6b:64:
4b:81:89:5a:45:35:4a:26:93:ac:22:13:c7:ea:60:
8e:4b:d2:1b:e5:b6:db:16:24:38:b5:7b:39:e5:66:
9e:7f:60:e8:dd:c0:58:2b:75:03:4e:f8:95:bb:d3:
90:d0:85:5f:6f:ad:3c:89:c3:c8:9e:ea:7d:46:ec:
4d:02:95:6e:b2:f0:4d:e6:69:a1:14:d3:10:67:26:
64:e0:ed:02:d2:73:5d:d2:be:f3:81:ff:87:21:30:
08:a3:4e:77:c8:ea:e5:c9:18:3a:bd:0a:57:b5:eb:
93:ed:8d:a7:b8:74:26:26:8c:f9:c2:f9:b2:81:0e:
7f:63:d3:47:ad:07:eb:9d:00:ce:22:96:0c:fd:98:
4d:de:ef:43:75:ee:62:2a:dd:af:68:5c:a6:f6:bd:
a1:f9:ec:19:d6:8e:2b:55:8a:7e:0f:f8:43:03:1f:
29:7c:c4:75:5e:7e:a7:62:4d:af:c3:e1:a2:04:c2:
75:be:ec:8d:46:31:d1:68:cc:39:4b:2b:52:f9:4a:
14:09:55:8e:ed:9c:63:58:f8:77:db:60:1a:e8:54:
f6:84:6e:cb:92:35:95:9c:14:d8:e5:99:ce:47:96:
86:94:ff:fe:0f:52:7a:19:dd:66:ee:eb:80:cf:54:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F4:A0:7E:71:20:EE:BB:8E:D8:AD:A2:FC:EB:47:E9:24:00:4D:6A
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ea:43:5f:71:14:16:2f:2a:c6:b9:3b:99:75:dd:a8:e9:50:
06:57:2f:b6:22:ba:87:51:b0:ee:ff:fc:cb:15:be:34:08:fe:
0c:c4:10:fe:be:57:b2:a5:33:f3:03:ae:b9:88:c4:9f:32:ad:
1e:3f:35:2d:25:04:ae:b2:39:c4:0c:b4:e3:99:c0:e1:42:73:
bf:3f:b0:20:0f:a6:ae:f1:ee:49:27:2c:43:52:f1:d2:5f:f7:
d7:1d:a8:65:9d:77:75:48:6c:24:6a:72:57:fd:0c:f9:d3:08:
f3:f3:ae:d0:5c:ae:15:77:5d:b4:e8:73:55:bf:2b:39:93:38:
bd:98:e9:59:a2:ec:65:7a:67:1f:ab:d7:9f:44:0a:00:e1:6c:
db:d4:9d:86:2f:fb:ea:a9:13:af:ab:3b:6b:92:15:ba:56:c9:
ef:3c:96:73:b8:f3:2b:e3:7c:8e:43:bf:e8:d8:d4:39:b1:78:
1b:4c:03:f7:7e:de:67:e0:18:25:b8:d9:92:f1:c4:6e:8a:79:
2b:3f:c0:94:a4:02:46:d7:e2:df:4c:06:87:dc:9f:7f:3d:39:
7d:c9:42:f6:e6:a9:0f:d1:04:a0:22:ee:3e:09:73:12:07:80:
80:08:ba:f9:bd:31:68:26:c1:35:87:89:47:1f:a9:8a:53:34:
97:fb:32:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND
RjJBNEU2NEUwHhcNMjYwMzAyMDA1NTI4WhcNMjYwMzA5MDA1NTI4WjAYMRYwFAYD
VQQDEw02OWE0ZTAwMS02ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlRHaewBJzIJS6R0a2RLgYlaRTVKJpOsIhPH6mCOS9Ib5bbbFiQ4tXs55Wae
f2Do3cBYK3UDTviVu9OQ0IVfb608icPInup9RuxNApVusvBN5mmhFNMQZyZk4O0C
0nNd0r7zgf+HITAIo053yOrlyRg6vQpXteuT7Y2nuHQmJoz5wvmygQ5/Y9NHrQfr
nQDOIpYM/ZhN3u9Dde5iKt2vaFym9r2h+ewZ1o4rVYp+D/hDAx8pfMR1Xn6nYk2v
w+GiBMJ1vuyNRjHRaMw5SytS+UoUCVWO7ZxjWPh322Aa6FT2hG7LkjWVnBTY5ZnO
R5aGlP/+D1J6Gd1m7uuAz1QGRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG30oH5x
IO67jtitovzrR+kkAE1qMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0
NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI
d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH+pDX3EUFi8qxrk7mXXdqOlQBlcvtiK6h1Gw7v/8yxW+NAj+DMQQ/r5XsqUz
8wOuuYjEnzKtHj81LSUErrI5xAy045nA4UJzvz+wIA+mrvHuSScsQ1Lx0l/31x2o
ZZ13dUhsJGpyV/0M+dMI8/Ou0FyuFXddtOhzVb8rOZM4vZjpWaLsZXpnH6vXn0QK
AOFs29Sdhi/76qkTr6s7a5IVulbJ7zyWc7jzK+N8jkO/6NjUObF4G0wD937eZ+AY
JbjZkvHEbop5Kz/AlKQCRtfi30wGh9yffz05fclC9uapD9EEoCLuPglzEgeAgAi6
+b0xaCbBNYeJRx+pilM0l/syfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:28 2026 by rpki-client