
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: 2uvl9k605KRRqEYUubdWBOK0gYybyXUvzd1AFvhVKM0=
Subject key identifier: 78:95:82:A6:33:6F:4D:F7:88:60:F2:74:11:10:72:96:58:E8:6E:E0
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 0499
Signing time: Thu 16 Apr 2026 23:52:50 +0000
Manifest this update: Thu 16 Apr 2026 23:52:50 +0000
Manifest next update: Thu 23 Apr 2026 23:52:50 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: HbvesX2HvoIFdScS6W8/BvKugQbIjkaNYAq6oJ+gKvM=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Apr 16 23:52:50 2026 GMT
Not After : Apr 23 23:52:50 2026 GMT
Subject: CN=69e17652-4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:99:ff:7c:7f:39:27:68:c1:99:03:48:0e:
7c:84:6e:54:67:3a:6e:f9:d9:22:ab:75:f6:dc:b3:
95:1e:2a:4d:e7:97:5d:2f:8e:e8:9e:9c:2e:10:2b:
55:cd:82:53:c2:95:16:e3:aa:3d:ab:89:e7:f2:9c:
12:96:e8:99:12:27:b7:45:1b:a0:57:56:3f:67:37:
4e:26:e2:11:ab:40:d7:c9:f7:f0:6d:6f:28:b8:eb:
19:11:06:da:36:c0:b1:4e:1e:2c:2c:eb:4a:c8:1f:
ba:dd:79:16:30:b3:07:14:08:d2:e0:73:29:d8:9e:
e2:15:1d:76:9f:90:5e:86:a7:3b:fd:1e:04:a4:c8:
98:b6:da:1c:00:1e:40:5f:8d:2b:84:62:f3:a1:d3:
ac:dd:14:1b:b2:fa:85:10:90:62:03:06:5a:01:6f:
61:ba:ad:89:51:7b:31:71:e8:ce:c5:d7:6d:c2:2d:
be:10:aa:c6:b8:76:85:8c:14:06:02:c1:f6:6b:15:
aa:a5:ee:63:c2:c1:28:de:55:f9:b1:de:84:a9:78:
3f:31:9b:8d:96:8f:b1:93:b9:8b:cd:f0:90:94:08:
b3:a5:28:83:33:98:ea:77:64:ad:b1:79:92:90:b2:
21:d9:1e:1a:93:84:52:48:04:08:0f:82:a6:48:03:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:82:A6:33:6F:4D:F7:88:60:F2:74:11:10:72:96:58:E8:6E:E0
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:2e:da:db:9c:67:16:44:5b:28:b5:69:20:c5:89:54:f7:
f0:b6:42:46:03:ff:3d:76:26:40:b4:77:19:13:0b:ac:f5:38:
44:e8:77:00:80:87:30:22:67:cb:fe:59:29:59:ec:ed:f1:ee:
df:9a:8a:21:68:35:ca:90:7c:65:60:df:48:d6:3e:8d:a8:db:
d7:88:b6:90:c6:7d:8b:3a:cb:47:41:7d:e0:1a:05:ca:e0:0a:
ae:43:d1:75:3f:a6:b3:aa:94:ea:49:36:d0:58:00:d0:0c:06:
7a:cd:36:fa:77:54:35:07:9f:f0:27:a4:3e:ab:19:a3:ac:79:
ae:bf:c6:b3:e4:e7:31:e3:a1:b2:58:8f:11:3a:31:ff:40:e2:
2a:b7:2b:09:98:26:84:58:0e:67:98:95:3b:7a:c4:5a:4b:8f:
f7:8a:a7:72:e1:0e:12:9a:df:ae:04:87:62:a6:90:28:b2:51:
5d:bc:85:3b:88:89:71:0b:11:d9:2c:4e:35:5b:f0:77:10:61:
ba:12:f1:56:ac:83:0f:0f:c6:8e:8c:0a:28:8d:26:5e:2b:66:
db:fe:f4:94:1c:0f:24:fd:f7:d5:6e:37:19:99:3d:1b:4e:40:
df:d2:f9:3e:66:c2:77:d3:7d:a3:ae:20:1e:ad:b0:19:81:31:
e8:06:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:12 2026 by rpki-client