
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: 5YIfCPymFLW8s4IfpoD3J37FmFr9q8OocEWnuyQ8Rc0=
Subject key identifier: 00:79:25:57:4F:0C:4A:96:02:B6:82:F4:37:AC:FC:51:E2:F0:D1:5F
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: 01C9
Signing time: Mon 21 Sep 2026 03:47:18 +0000
Manifest this update: Mon 21 Sep 2026 03:47:18 +0000
Manifest next update: Mon 28 Sep 2026 03:47:18 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: Nt/oZMl9cu9pEhymkOTnI+wAbtNrMW+RiFc0lUFbLQ8=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: ge93gK4lUWgpZWqf0mLTvZJqGeY+ssrFNxVQ9BEvxjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Validity
Not Before: Sep 21 03:47:18 2026 GMT
Not After : Sep 28 03:47:18 2026 GMT
Subject: CN=6ab0a8c6-fb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:66:bd:ac:45:ce:62:2a:54:43:59:2a:e2:
71:f1:a8:ba:3d:6c:92:85:a0:68:5c:66:ee:75:2d:
ce:af:7c:e0:32:e8:ba:3b:d4:00:52:bc:53:df:85:
54:d8:3e:30:ea:13:b3:49:ea:5d:56:44:dc:ec:df:
c9:61:a7:9c:83:3b:8f:2b:29:c6:6b:08:4a:bb:a1:
1f:14:f0:2d:e7:cd:14:c2:75:3a:95:59:21:e5:a4:
32:99:ac:f1:4e:43:27:ba:a3:a6:03:12:c8:cd:b3:
0f:3f:2e:ad:05:c7:f6:a9:43:a7:75:2a:b0:2a:cd:
75:2e:df:1a:6e:eb:f5:3c:31:1f:82:51:0d:85:f3:
de:95:22:9c:6a:f3:38:aa:5c:93:35:47:b8:8b:6d:
50:0b:19:40:a2:d8:d3:56:fa:12:f7:04:a8:e9:e1:
8d:b3:bd:47:41:9f:51:70:d3:fc:08:f2:2a:62:02:
8f:78:2b:9d:e8:96:c0:5e:ad:a3:cc:ee:ed:c5:ba:
85:d6:26:66:0b:07:3d:3d:6d:6e:ef:ce:da:47:c7:
be:31:81:fc:05:6d:a1:b9:8a:46:ae:df:73:21:42:
fd:bd:df:eb:f2:83:7d:64:eb:95:65:c8:e1:66:e4:
21:14:4d:d0:85:19:ed:42:e5:eb:7e:af:03:42:cd:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:25:57:4F:0C:4A:96:02:B6:82:F4:37:AC:FC:51:E2:F0:D1:5F
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:90:14:c9:7d:af:f3:40:8a:b3:81:18:99:a6:6d:d5:c3:
b7:47:7b:8a:c2:94:83:6b:83:ab:d8:4d:b8:89:10:e0:7c:8a:
2b:8f:de:bc:92:88:fd:69:76:76:02:91:43:ed:9c:90:73:18:
8a:a9:82:c8:8e:41:17:91:18:9e:5c:7b:56:93:86:96:91:6e:
5f:03:f2:7a:64:3c:77:76:5c:05:df:41:ca:4a:43:78:03:3a:
1d:e9:9a:a8:fc:ba:bb:75:0c:fd:25:9f:16:cc:19:30:84:36:
f1:ef:1c:0f:db:c4:09:6f:6c:5a:53:31:ff:2c:37:f4:38:1b:
7a:38:00:f3:53:14:ad:a1:6e:4a:9a:9c:b1:55:63:6c:7d:10:
30:c2:73:d1:72:62:09:c1:62:fc:db:c3:0c:ca:2f:f2:2c:7a:
e7:e2:2a:ed:d0:26:90:85:49:b1:c9:87:7b:82:98:bd:9e:e1:
6b:0e:55:8a:30:40:c9:69:a3:f8:c1:b0:5f:fa:97:e1:d1:4f:
38:5a:aa:b0:05:88:31:d7:a0:f3:b8:28:a1:c3:73:39:e1:a0:
cb:63:da:83:f7:02:56:16:6c:0f:39:92:89:98:9c:5c:22:a6:
56:c8:73:ce:c6:07:36:4f:4b:e9:af:9c:c1:e1:b0:52:7b:c8:
65:9f:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:43 2026 by rpki-client