
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: DVfLUm3/nvC614NhioSoZkkXjgHqxVMWql5CDPcyUEU=
Subject key identifier: E3:51:56:38:78:44:29:F4:DE:1E:30:31:0C:CF:08:0B:DA:00:43:74
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 0A57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 0A2A
Signing time: Sun 20 Sep 2026 19:46:36 +0000
Manifest this update: Sun 20 Sep 2026 19:46:35 +0000
Manifest next update: Sun 27 Sep 2026 19:46:35 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: O7kC2007GT4yBnaRR8dskEFvMA0FUuG6Wm6/wKM0VYk=)
2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ywh+EspzzTB1z73ivawXczceUdTNF+vMHbVnAWHY+X4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Sep 20 19:46:35 2026 GMT
Not After : Sep 27 19:46:35 2026 GMT
Subject: CN=6ab0381c-1b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:8c:54:bb:78:54:d8:0c:17:16:c6:a9:4f:
5d:52:58:20:15:8f:fe:13:14:ce:e9:0b:dc:f0:68:
e4:68:6f:b4:28:74:6c:60:31:f8:2c:61:34:d9:80:
56:6c:13:e3:fe:19:e0:05:de:9d:86:39:d7:88:0d:
4e:3c:44:9d:ab:24:d4:98:da:c4:c2:5f:f6:6a:44:
d6:ae:f2:4f:90:24:4d:4b:a9:eb:5a:bd:f2:0f:1b:
8c:c3:a0:5a:b2:59:8e:5f:45:56:61:26:30:90:3c:
f1:bd:14:3b:9b:bf:68:42:d7:0b:71:a1:98:35:fe:
b3:39:f5:47:54:4f:e4:30:2e:ff:3f:83:75:8e:2c:
0b:5b:a1:5a:07:e9:0f:09:1c:79:b9:43:8f:34:25:
23:2b:3a:b2:d1:c8:08:99:4e:a1:3f:23:64:57:ca:
7c:c4:1b:61:a3:c7:a9:bf:f1:78:31:ad:d0:79:bf:
b1:fe:67:3d:63:8c:3b:25:49:10:5b:32:78:f1:12:
65:a0:ae:17:cf:56:8d:c8:3e:86:47:76:cd:85:46:
62:59:8f:00:63:ab:5e:1e:cc:e5:ee:01:1f:0d:38:
7d:6d:45:fa:4a:c6:68:a5:22:8c:07:43:70:e2:ee:
c1:53:ed:90:18:61:aa:49:7e:32:5e:8a:cc:00:4f:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:56:38:78:44:29:F4:DE:1E:30:31:0C:CF:08:0B:DA:00:43:74
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:d6:58:98:c1:f0:75:13:73:6b:da:49:17:8c:83:c1:bc:
e2:a3:8a:6d:01:40:7a:b0:81:1f:10:9f:89:a9:d7:11:11:42:
9a:06:a8:64:cc:dd:53:23:71:13:37:fa:9a:6b:49:9b:1c:c8:
5b:94:da:72:bc:5a:08:16:f6:b0:4c:4b:f0:18:73:85:ff:bf:
e1:ae:c5:12:1d:5c:ef:8a:02:cd:07:0e:5f:f3:8a:95:6d:dd:
91:13:cb:4c:03:54:d6:cc:15:f8:45:cc:2a:01:70:b1:e5:9e:
8d:fd:8a:3f:38:04:80:dd:59:14:57:5e:cb:2a:46:4b:6d:7c:
9a:bc:02:4d:ec:03:9e:03:34:04:98:dc:37:12:90:fd:e0:35:
cc:cc:6f:59:d4:90:45:58:53:c4:70:21:36:1d:85:af:4e:64:
37:9c:5b:f6:3a:18:25:1c:3a:37:e8:d3:94:c3:c7:92:50:f0:
23:04:a3:b1:90:9b:f3:98:d5:9b:bf:20:01:1a:3a:45:ae:11:
35:92:fe:17:a7:42:17:cc:74:ef:fc:5f:cd:3b:00:50:aa:5f:
30:88:e6:8a:81:df:95:66:2d:d3:d8:10:62:87:dd:2b:b5:34:
ed:92:02:f7:33:b7:f2:b8:4a:2f:83:36:a3:04:7c:37:4d:28:
c5:b4:41:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4
MzBGQkU5NDIwHhcNMjYwOTIwMTk0NjM1WhcNMjYwOTI3MTk0NjM1WjAYMRYwFAYD
VQQDEw02YWIwMzgxYy0xYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5qKMVLt4VNgMFxbGqU9dUlggFY/+ExTO6Qvc8GjkaG+0KHRsYDH4LGE02YBW
bBPj/hngBd6dhjnXiA1OPESdqyTUmNrEwl/2akTWrvJPkCRNS6nrWr3yDxuMw6Ba
slmOX0VWYSYwkDzxvRQ7m79oQtcLcaGYNf6zOfVHVE/kMC7/P4N1jiwLW6FaB+kP
CRx5uUOPNCUjKzqy0cgImU6hPyNkV8p8xBtho8epv/F4Ma3Qeb+x/mc9Y4w7JUkQ
WzJ48RJloK4Xz1aNyD6GR3bNhUZiWY8AY6teHszl7gEfDTh9bUX6SsZopSKMB0Nw
4u7BU+2QGGGqSX4yXorMAE+aBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONRVjh4
RCn03h4wMQzPCAvaAEN0MB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD
NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI
LWwzSDFic3BuVG1ERDc2VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjWPWWJjB8HUTc2vaSReMg8G84qOKbQFAerCBHxCfianXERFCmgaoZMzdUyNx
Ezf6mmtJmxzIW5TacrxaCBb2sExL8Bhzhf+/4a7FEh1c74oCzQcOX/OKlW3dkRPL
TANU1swV+EXMKgFwseWejf2KPzgEgN1ZFFdeyypGS218mrwCTewDngM0BJjcNxKQ
/eA1zMxvWdSQRVhTxHAhNh2Fr05kN5xb9joYJRw6N+jTlMPHklDwIwSjsZCb85jV
m78gARo6Ra4RNZL+F6dCF8x07/xfzTsAUKpfMIjmioHflWYt09gQYofdK7U07ZIC
9zO38rhKL4M2owR8N00oxbRBgg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:13:30 2026 by rpki-client