
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json)
Hash identifier: DnOSbmMNMbqGJ0BMyYTPGKJJ415aaXLgcnRnh7LfoqI=
Subject key identifier: 86:D8:2B:3D:5E:85:CE:CD:70:8C:A7:AA:30:0F:10:36:9B:7C:07:1B
Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
Manifest number: 4D
Signing time: Sat 13 Jun 2026 08:30:42 +0000
Manifest this update: Sat 13 Jun 2026 08:30:42 +0000
Manifest next update: Sat 20 Jun 2026 08:30:42 +0000
Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: pQhRByTPIeFd4yFBw4Ot0OvAsj5tQMzkMAh+JaMwlJs=)
2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05
Validity
Not Before: Jun 13 08:30:42 2026 GMT
Not After : Jun 20 08:30:42 2026 GMT
Subject: CN=6a2d1532-e6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:10:4d:fb:3f:34:82:2d:76:73:56:24:3a:
b1:6e:f4:81:63:cb:ad:4d:c2:52:bb:2e:35:81:d7:
4b:42:f7:38:40:22:26:8c:dd:5f:46:d7:e9:34:74:
b6:85:ea:65:f2:b3:44:09:75:d5:d9:a3:fe:01:6b:
64:94:bf:8b:a0:ae:9c:cd:6d:7f:f8:96:56:e6:9c:
4f:bc:57:9a:1d:77:6d:1e:ce:77:1a:b2:cd:0b:e2:
48:73:4c:1b:b7:95:44:0d:a3:5d:65:8e:9c:d2:6c:
ae:14:a7:b9:d6:30:b9:19:3d:1d:14:15:67:c7:e2:
29:84:71:3c:7b:4d:da:0d:2b:c8:21:30:fc:7c:7a:
bd:49:4e:30:f3:c2:e6:e0:50:de:53:13:9d:56:1b:
80:32:37:72:df:e8:e4:9f:3b:c7:b1:5a:83:50:52:
14:6e:f3:64:d3:e3:4a:ef:dc:f0:cf:5a:ae:69:ad:
44:b0:15:fa:4a:f8:0d:95:9d:79:35:c2:33:fc:f5:
19:5d:4e:70:22:1b:b6:32:bf:ee:95:9c:6c:d0:a7:
ee:e3:40:93:c4:0a:61:e2:ba:dd:ea:6e:15:ae:31:
f5:05:dc:6f:21:45:8d:3e:ab:8e:22:a6:08:06:98:
cc:9a:c3:d6:2b:05:f1:13:21:23:7a:91:db:9e:44:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:2B:3D:5E:85:CE:CD:70:8C:A7:AA:30:0F:10:36:9B:7C:07:1B
X509v3 Authority Key Identifier:
keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:3d:61:9f:fd:33:77:b6:f3:2e:3f:67:17:70:28:96:86:
77:02:91:7a:a5:a2:23:d6:04:16:81:3b:63:9c:eb:49:5c:ae:
1e:80:aa:67:4e:2d:87:6c:9c:5d:3b:4b:1e:90:fc:0b:b3:5a:
95:16:a3:2e:0e:b7:dc:9e:e1:52:aa:53:b1:2d:b5:17:84:75:
ef:4c:d8:99:bd:f3:29:04:d8:d3:9d:65:88:1a:a4:8d:39:08:
04:85:5d:a2:6e:06:4d:d8:43:f7:5c:ad:bd:5e:c4:d4:c9:c3:
b6:34:f7:57:5b:de:c4:41:69:2b:bd:b0:04:9a:46:1c:a8:10:
fc:5f:04:91:36:3c:0e:d9:22:21:3a:d8:d3:53:56:34:a3:a9:
95:c6:82:8a:8e:c8:c6:e6:fd:7f:ed:e9:ec:23:20:71:cc:48:
25:13:11:b3:1e:d5:5d:37:5a:ed:41:a0:c0:be:19:b1:84:1f:
f4:63:27:e1:41:4c:83:f4:e0:78:13:28:1f:ac:7b:ed:51:4b:
e9:f8:fd:c7:bf:ee:6a:31:23:e4:7e:f4:23:66:64:b6:f7:84:
f2:cb:cf:e0:42:40:65:2f:dc:f5:cc:4d:60:e2:66:76:3d:d1:
64:d9:53:5c:41:f5:91:90:77:2b:f9:3d:f0:b3:09:b1:04:66:
dc:3f:40:78
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1
OTU4REMwNTAeFw0yNjA2MTMwODMwNDJaFw0yNjA2MjAwODMwNDJaMBgxFjAUBgNV
BAMTDTZhMmQxNTMyLWU2ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZJhBN+z80gi12c1YkOrFu9IFjy61NwlK7LjWB10tC9zhAIiaM3V9G1+k0dLaF
6mXys0QJddXZo/4Ba2SUv4ugrpzNbX/4llbmnE+8V5odd20ezncass0L4khzTBu3
lUQNo11ljpzSbK4Up7nWMLkZPR0UFWfH4imEcTx7TdoNK8ghMPx8er1JTjDzwubg
UN5TE51WG4AyN3Lf6OSfO8exWoNQUhRu82TT40rv3PDPWq5prUSwFfpK+A2VnXk1
wjP89RldTnAiG7Yyv+6VnGzQp+7jQJPECmHiut3qbhWuMfUF3G8hRY0+q44ipggG
mMyaw9YrBfETISN6kdueRBBjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhtgrPV6F
zs1wjKeqMA8QNpt8BxswHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE
RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2
RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu
S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkhD1hn/0zd7bzLj9nF3AoloZ3ApF6paIj1gQWgTtjnOtJXK4egKpnTi2HbJxd
O0sekPwLs1qVFqMuDrfcnuFSqlOxLbUXhHXvTNiZvfMpBNjTnWWIGqSNOQgEhV2i
bgZN2EP3XK29XsTUycO2NPdXW97EQWkrvbAEmkYcqBD8XwSRNjwO2SIhOtjTU1Y0
o6mVxoKKjsjG5v1/7ensIyBxzEglExGzHtVdN1rtQaDAvhmxhB/0YyfhQUyD9OB4
EygfrHvtUUvp+P3Hv+5qMSPkfvQjZmS294Tyy8/gQkBlL9z1zE1g4mZ2PdFk2VNc
QfWRkHcr+T3wswmxBGbcP0B4
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:35 2026 by rpki-client