
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier: +UUnJvNNOnYtwGQwoqjO82F4gwbyE0Okjut8FLVg/iM=
Subject key identifier: 0D:04:27:C1:6E:46:EE:E0:5B:3D:25:E7:D6:D0:9E:16:AF:8E:CA:99
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number: 0190
Signing time: Sun 01 Mar 2026 04:14:44 +0000
Manifest this update: Sun 01 Mar 2026 04:14:43 +0000
Manifest next update: Sun 08 Mar 2026 04:14:43 +0000
Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: Au8z63OjtMmnvufI8ZDgvZn5XaCtVsp75H5/TdnX48Q=)
2: 6224AEA6D37C11F09FF59A7EC4F9AE02.roa (hash: FsN6NtpG2M7LZysJUE+Ni8KVYWjahNaxPAoE6IyDSoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Validity
Not Before: Mar 1 04:14:43 2026 GMT
Not After : Mar 8 04:14:43 2026 GMT
Subject: CN=69a3bd33-eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:62:c0:82:7e:71:e7:6d:f2:1f:13:d2:c7:
13:ea:7e:d5:2d:66:1b:a7:bf:d5:03:94:56:6c:0c:
d8:b8:9d:7c:75:68:1d:25:eb:b6:2a:66:86:f5:26:
5f:11:43:23:29:ee:77:04:c8:fa:bf:34:94:8e:30:
47:25:ed:1d:da:de:a0:2f:cf:2d:c2:22:81:7b:df:
19:16:03:be:07:fb:24:4c:c0:08:a4:81:72:bc:9e:
06:b9:c0:09:b5:79:21:92:dd:90:1f:95:37:4f:a5:
75:e5:ae:b8:52:4c:d5:68:be:e9:ec:47:9a:cc:1f:
2e:f6:47:d4:18:8c:60:7f:54:8f:1c:2c:e8:09:bf:
bb:f0:ef:a9:a6:eb:1f:55:6a:80:2e:b8:00:6e:7e:
6b:b3:32:c7:b9:e7:e1:03:d9:16:88:41:37:b4:8a:
fc:00:3c:ef:98:08:f9:f8:a4:77:e1:92:0a:72:16:
c7:e8:b9:7a:4e:c2:f6:71:64:d3:87:7e:14:38:fd:
e4:1b:6a:2b:66:aa:40:bb:ff:e3:2a:41:2b:03:4e:
64:48:0d:a7:4c:0b:c3:21:05:96:8c:06:af:5e:85:
38:b9:9a:23:33:4f:c3:72:b6:6d:19:26:71:5f:f9:
fe:03:a2:3c:46:39:d7:a1:3c:d5:01:df:a9:9d:9e:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:27:C1:6E:46:EE:E0:5B:3D:25:E7:D6:D0:9E:16:AF:8E:CA:99
X509v3 Authority Key Identifier:
keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:33:ed:66:e4:3b:da:84:27:49:b7:6c:4a:ad:cd:fa:27:
46:7a:05:88:f0:d2:1f:ba:c7:20:fd:da:95:a6:df:fd:2d:ca:
55:d6:d8:78:ce:b6:0f:f3:d4:8b:53:cb:5d:b3:5d:ab:c3:ed:
0b:f4:87:16:56:cc:dc:db:63:5d:fe:66:97:95:26:5e:8f:c5:
63:4b:e2:7d:2f:c1:dd:f9:2a:4a:eb:f5:c0:63:98:32:8d:49:
fb:df:2d:2e:25:f3:fb:ac:bc:b0:4a:7b:f5:3a:53:57:81:e1:
a4:dc:f3:ae:a6:7f:89:ca:ce:bb:e9:81:37:2b:43:b2:fb:cd:
87:6e:bc:be:d2:5b:07:2f:e5:e7:38:d7:7f:d5:14:1b:b9:f4:
a7:88:dd:a7:be:29:85:5c:e2:a2:fa:02:62:7f:59:6d:ea:c9:
44:2d:d4:cb:aa:a2:5b:09:75:21:fd:4e:ff:d9:ab:cb:7f:00:
8e:ec:41:42:65:8a:0f:21:91:ce:09:b8:b5:4d:30:bc:2b:ab:
86:50:4c:c8:0e:f9:37:32:55:a9:74:37:5a:9d:6a:67:ec:de:
f0:5a:65:3f:79:3b:fb:36:ec:23:66:7d:d1:2b:0f:b2:be:dc:
ee:36:49:2d:87:57:a7:73:80:7e:39:76:20:a5:4e:63:36:93:
fe:c4:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:14 2026 by rpki-client