
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json)
Hash identifier: 8odfKOUAsOGWUl6F46IDYLt3Sd7C5JPwpH2hQVSpHF4=
Subject key identifier: F9:FB:E8:43:8C:47:54:F7:C9:E5:59:D6:61:77:85:01:7F:73:42:80
Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD
Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
Manifest number: 017C
Signing time: Mon 27 Jul 2026 06:28:45 +0000
Manifest this update: Mon 27 Jul 2026 06:28:45 +0000
Manifest next update: Mon 03 Aug 2026 06:28:45 +0000
Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: ynGNoWyzKzubdFJMWzhtQa7bbRskrNGeLJMEBbX2Be0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl
rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
Validity
Not Before: Jul 27 06:28:45 2026 GMT
Not After : Aug 3 06:28:45 2026 GMT
Subject: CN=6a66fa9d-be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:c8:51:43:08:ec:c8:cc:94:06:5d:51:8a:
8a:fe:4e:52:80:4a:86:df:f9:53:90:45:24:4f:a2:
c6:1d:91:19:e9:7d:9f:e7:5a:bf:07:54:f0:4b:6b:
3e:d6:12:7a:a0:4a:81:db:69:78:99:eb:e6:89:aa:
c3:76:7f:12:b7:a5:e3:d5:7a:23:f8:94:3a:b8:ec:
ab:2e:74:7c:7a:ec:11:a6:c0:c0:8d:67:bc:78:c8:
42:05:7f:2a:cf:8d:7e:2d:2a:dc:55:37:10:63:9f:
21:ef:4a:09:19:6a:bb:15:32:fd:45:8c:2c:94:69:
70:09:27:4d:11:5e:d3:2d:d9:2d:3d:7b:d8:59:fc:
a0:9e:53:ad:4a:01:39:8a:b3:5f:63:31:8c:e7:4f:
df:a2:a9:2b:a8:ad:01:b7:4c:05:21:59:35:a9:05:
41:ad:9f:29:01:1b:e1:2b:3b:85:96:48:16:7a:e4:
e5:da:d1:1a:2e:7b:a3:3d:be:75:b7:85:7a:5c:7e:
58:4b:68:1d:10:ad:e8:e1:41:e8:95:56:c0:46:a4:
b2:93:20:c1:a4:a8:99:e2:54:db:c1:5f:74:f3:b1:
9d:65:96:cb:ab:32:f5:8c:38:9e:ea:4c:5a:d1:78:
1b:06:6e:7e:bc:90:e6:ce:e1:86:55:fc:fa:e8:ad:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:E8:43:8C:47:54:F7:C9:E5:59:D6:61:77:85:01:7F:73:42:80
X509v3 Authority Key Identifier:
keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c0:fd:db:af:33:d2:cb:de:74:5d:73:6c:d6:a7:15:84:4c:
24:3b:ed:95:68:e7:71:c1:17:f3:30:70:19:f1:c6:a7:0b:b1:
46:29:d4:23:8b:cc:24:1e:61:4f:ae:79:d3:26:8c:72:4b:5d:
4f:84:b6:bc:8f:6f:58:3f:b2:5a:5a:5c:69:0d:03:ec:32:09:
f5:57:01:9e:fe:08:24:ef:85:52:b6:74:dd:bc:b7:6d:7e:b5:
cb:5f:9c:92:45:78:29:f4:d3:a4:bb:0d:ce:02:91:e8:34:71:
68:15:9c:e8:94:7e:6c:66:05:4c:ee:21:4f:a1:28:d0:d9:33:
2e:11:fa:85:b9:85:e4:0f:4b:8d:67:6f:65:92:9d:42:9c:97:
cc:71:41:f0:1e:4c:ab:c4:3e:ce:f6:e6:70:df:d4:87:a9:44:
3c:a5:ca:ee:21:b5:4f:18:39:f2:50:b8:a1:81:bb:9b:c5:2a:
82:79:87:f4:b7:fa:ba:25:27:09:22:55:8f:5a:05:fb:32:76:
fd:57:1a:7c:ac:61:0b:45:70:9c:71:61:0d:4b:93:57:49:4b:
25:d5:0c:76:1e:30:2b:72:b9:b2:fc:74:53:75:ae:f5:8f:bf:
7f:cd:4a:b5:3b:3e:8a:c1:cf:8f:df:eb:8f:e8:dc:5d:1e:6b:
eb:3e:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:42 2026 by rpki-client