
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File: u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier: 4Q3LHxSlb55XKBOvUY2IgO7XkG0ZQz3LOhfiCu9AO1g=
Subject key identifier: A1:FE:B5:BA:7F:86:14:B9:62:03:75:66:03:AB:2C:F6:D3:32:71:A0
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer: /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number: 9B
Signing time: Mon 21 Sep 2026 07:21:36 +0000
Manifest this update: Mon 21 Sep 2026 07:21:35 +0000
Manifest next update: Mon 28 Sep 2026 07:21:35 +0000
Files and hashes: 1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: rMekWRoFUj5GpjZzU7JEb0hXNpBo7uJvZlGmrNLjbrY=)
2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: cQJLuCSOM+o2aUzG2mT2OZwzOyveUbTM2bM6yH/VclY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Validity
Not Before: Sep 21 07:21:35 2026 GMT
Not After : Sep 28 07:21:35 2026 GMT
Subject: CN=6ab0db00-1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:0b:c5:29:a3:ef:d4:10:cd:9b:bf:b9:75:
89:fe:70:27:81:5f:7c:9c:2d:02:33:a0:a5:da:17:
25:16:69:04:37:78:80:df:6b:bc:6d:b0:dc:86:7f:
a3:be:9a:84:d6:48:13:61:8b:95:60:d3:86:f5:85:
9c:65:d1:0a:50:90:c0:2f:cf:31:6f:68:f2:58:8f:
9e:71:47:e3:57:52:4d:83:bd:86:b3:39:73:e2:d4:
13:e2:d3:a7:62:aa:c4:eb:11:24:9c:a6:94:0a:95:
6a:47:04:96:1b:a1:85:b8:3b:bb:ce:86:75:09:8a:
a3:03:c8:25:18:11:9e:de:ab:ce:35:fe:4f:bd:b8:
e8:e6:9e:95:7b:82:42:f2:1f:70:19:bb:05:83:df:
59:2c:b6:c4:87:31:51:be:e9:45:35:b8:b0:54:18:
41:08:cb:bd:78:b6:40:20:d4:c3:1c:ed:24:7e:f1:
f7:68:93:7f:a8:0a:ce:af:0f:38:cd:f9:49:40:5a:
93:e2:4d:9f:ea:62:f5:5c:be:29:eb:51:f9:d4:32:
47:32:58:d2:ee:f4:1f:fd:27:ac:70:79:2c:6b:30:
44:ca:01:2b:5b:e0:ed:86:66:80:eb:ce:03:f3:8d:
48:3e:73:ec:77:00:57:19:fe:ef:f5:ba:d4:a3:e0:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:B5:BA:7F:86:14:B9:62:03:75:66:03:AB:2C:F6:D3:32:71:A0
X509v3 Authority Key Identifier:
keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:e5:38:c3:a7:8a:d6:f4:fc:1e:32:2a:5b:db:dd:43:b4:3e:
1b:7c:98:9d:34:e0:2c:d9:7d:e3:0e:19:d7:8c:bb:b8:ff:fb:
a9:6b:85:b8:1d:c6:8e:e7:86:31:52:f4:4c:97:37:ac:8b:63:
84:1b:ce:5a:1d:97:d5:7c:65:77:5e:26:b2:9e:a9:82:e9:fc:
ea:3b:ec:f9:65:c7:7e:c7:49:d9:cc:aa:05:a2:a1:91:e4:9c:
c0:3e:c7:eb:92:02:68:a8:18:b4:46:39:3d:ed:c2:b7:52:98:
10:dd:b1:86:52:9b:60:c6:61:fb:d9:4a:b7:e7:f5:d4:14:f1:
bc:67:7d:ba:38:ae:ea:e2:72:d2:7d:17:7b:0f:50:71:22:2a:
f3:ac:82:92:e1:b3:55:e8:d9:b2:d6:6c:35:b6:14:2a:22:b2:
a6:7b:96:87:36:92:db:ab:64:53:3f:e7:ca:a3:36:e3:91:af:
e9:6a:f4:43:97:4d:21:36:9b:9c:dd:54:13:de:18:c3:a0:27:
bc:72:54:a4:97:0b:e5:6d:63:0f:29:b9:25:82:c5:e7:67:9f:
29:20:34:72:57:84:fe:c1:f0:c1:9f:c6:ea:56:b1:9d:28:8c:
4f:86:28:f1:11:c6:7e:84:4e:a5:98:e1:98:ed:51:23:c6:44:
f0:cc:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:52:34 2026 by rpki-client