
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: n5pN0AruXyXOkwpJrtBplkUZtWkUJK26PNCaVDhs6ks=
Subject key identifier: 76:30:B1:BE:DA:F9:0D:3B:E8:17:27:8F:61:B1:5A:4D:B5:75:0A:91
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 19C6
Signing time: Tue 28 Jul 2026 16:29:49 +0000
Manifest this update: Tue 28 Jul 2026 16:29:48 +0000
Manifest next update: Tue 04 Aug 2026 16:29:48 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: vyhZcoXNy5ErFiLjLS23Yf5ffHOplV8nWf3IYOKaD7c=)
2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6665 (0x1a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Jul 28 16:29:48 2026 GMT
Not After : Aug 4 16:29:48 2026 GMT
Subject: CN=6a68d8fd-e7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a9:37:1e:ba:8a:73:fa:db:26:e5:3b:90:c4:
db:ec:92:af:e5:b8:41:6f:0b:20:77:b4:99:18:7f:
be:4c:ca:34:cc:f8:a7:2c:0c:7a:fd:3d:22:78:cd:
94:07:04:98:77:24:77:42:4f:c0:17:d9:dd:17:9d:
ac:a9:c7:fc:96:9e:f1:36:80:8e:84:44:ad:0b:e7:
6e:c9:ff:ec:87:d2:dd:86:21:ef:16:8c:ec:fe:42:
37:e3:50:8d:62:31:47:ce:d2:37:77:4f:0a:90:43:
2f:7d:0b:56:39:45:d9:ee:84:58:2f:8a:b0:c1:80:
26:de:3b:13:89:a1:86:ed:85:b5:68:ff:7d:78:11:
c8:97:e0:02:b7:ac:aa:3a:8f:c4:45:97:5f:aa:1d:
f1:4d:37:5a:49:81:0a:a0:56:f8:a0:74:a7:7c:47:
e7:26:c9:fa:e0:39:3e:06:cb:f6:6f:4b:78:e1:2e:
dc:a5:a9:59:d5:a4:2a:75:37:56:b4:4e:3c:86:52:
16:06:a5:2a:b7:57:74:89:47:74:be:70:54:57:fb:
9d:c0:5c:39:f1:59:d6:01:d8:52:57:7b:d2:41:94:
b4:7d:5b:cf:8a:11:cc:f1:f7:60:e6:14:33:80:ac:
41:5b:6d:d1:8f:07:91:05:e6:72:ec:f8:a5:3d:24:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:B1:BE:DA:F9:0D:3B:E8:17:27:8F:61:B1:5A:4D:B5:75:0A:91
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6b:5f:5e:bb:98:ec:e7:a6:09:c8:de:0f:5e:4b:e7:05:8c:
48:9e:57:b8:10:0d:a0:60:38:df:de:d4:47:56:69:5e:ee:18:
43:8e:de:76:6c:40:ad:4e:44:75:ad:54:3f:2c:13:c4:81:52:
1d:02:1c:68:36:e9:3f:fd:6b:04:29:01:94:65:85:ae:88:5f:
fe:fe:61:40:be:ee:67:1d:c7:c5:65:02:12:a5:bd:f0:00:8b:
94:c0:25:50:65:d1:96:68:b2:5f:8d:28:00:6a:72:68:98:ca:
59:7c:cc:31:ec:97:44:d2:ee:6c:f3:31:f7:00:f4:e5:a4:3e:
f1:6e:f6:88:1c:4c:53:f4:1b:05:5a:0f:c5:f0:1a:2a:c6:80:
d5:3c:f4:19:3b:4b:1d:fa:43:6e:b9:d5:3c:e7:01:5e:42:35:
a3:22:87:c6:95:ad:ac:0a:15:e0:86:61:e0:ab:3f:33:84:c8:
b9:c6:61:ff:b9:a4:d4:e9:e3:6b:81:c4:37:9a:a6:be:ca:44:
07:a6:70:35:4f:7b:a5:76:fd:7a:21:9a:2a:15:f4:39:75:b9:
29:d1:db:15:3a:6b:97:c6:3e:61:27:43:9b:ef:fa:2a:79:e7:
09:8a:22:0a:0b:ea:de:7b:5c:9a:ed:ed:04:76:fc:2c:d1:63:
87:fe:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:54 2026 by rpki-client