
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json)
Hash identifier: 0dE/G0dKUpYCamdWaRZoXdLis6gPS+MDcffqHfYNbHc=
Subject key identifier: CC:59:94:DD:EC:64:F5:04:35:5D:38:CE:2C:DD:CE:0B:69:25:DB:55
Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Certificate serial: 086A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
Manifest number: 0861
Signing time: Sun 20 Sep 2026 20:49:56 +0000
Manifest this update: Sun 20 Sep 2026 20:49:56 +0000
Manifest next update: Sun 27 Sep 2026 20:49:56 +0000
Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 8Q6zO9CTaDT6hF/JCUajakkl91YecdGrW5/jAue6OZo=)
2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: w1Eixs82vTy/afrqMKLd9Os1QWh9YrXBF1bbSYUcZa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2
Validity
Not Before: Sep 20 20:49:56 2026 GMT
Not After : Sep 27 20:49:56 2026 GMT
Subject: CN=6ab046f4-7a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:03:d7:db:40:d4:e6:7c:c1:8a:53:d8:2e:
74:0d:c5:7b:6c:ec:a9:64:7d:a6:ad:f8:2d:c5:66:
91:a5:67:3a:8b:86:da:71:80:27:18:13:6c:4a:30:
c9:ea:a9:2d:4c:d7:8f:11:ea:b2:f1:e8:3a:98:94:
c8:39:24:6b:9d:4f:6b:dd:70:f1:4b:8e:38:80:60:
43:45:d2:fb:7e:7b:de:62:9d:ed:c1:b9:e5:2a:4b:
82:8a:c1:33:c6:ee:2c:1d:32:e2:9d:80:11:64:70:
0b:83:86:3d:d8:86:a2:45:91:53:b1:9c:78:73:61:
20:59:8a:8d:da:40:ca:83:9e:a9:37:45:41:1c:c2:
3f:6f:35:20:6c:fb:0d:20:36:75:3b:fd:24:13:a4:
ba:fd:03:6f:ce:20:f1:d0:45:49:81:e5:d2:d1:89:
13:5e:82:ff:e7:b7:81:7b:28:10:81:80:a7:f4:03:
22:28:70:c3:c2:3c:f9:7f:36:f7:e7:26:ef:5c:7a:
13:34:36:47:ec:0a:b5:cd:ae:26:a2:12:61:39:a0:
12:9d:d6:b4:d2:e7:60:22:5a:d8:46:1f:45:3a:98:
ab:2b:02:1d:03:30:ee:af:3a:32:4e:91:f5:3c:24:
69:5b:2c:c3:40:a3:6e:67:72:1a:c7:97:6c:6a:59:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:94:DD:EC:64:F5:04:35:5D:38:CE:2C:DD:CE:0B:69:25:DB:55
X509v3 Authority Key Identifier:
keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:ca:52:e5:a1:19:a6:dd:86:1b:57:d9:10:d8:09:b6:c8:
b5:b9:6a:4d:3d:d4:57:ae:a2:b0:db:d5:b8:e9:ab:1c:ac:da:
63:c8:7a:f2:d2:c3:be:be:0f:73:c8:8b:5b:5c:a4:85:65:97:
17:c3:93:cb:b4:de:92:e3:88:fe:63:41:7c:9a:c9:f2:d0:d8:
d3:8c:0e:b5:9f:08:2e:df:d2:90:62:f7:7f:b6:66:ff:e3:d6:
64:43:17:c5:c7:38:17:28:ed:9c:fe:b0:a1:f0:cd:fe:55:a0:
b2:b2:54:f9:c5:ac:8a:73:af:54:2f:af:04:d8:65:c3:4c:64:
85:7a:a6:fb:c6:7c:9c:82:c1:e7:9a:61:b2:60:b9:b3:d4:0e:
8b:41:a0:46:ab:ba:64:9a:9d:a2:88:59:6e:eb:aa:9b:81:fb:
30:02:c7:40:dd:9b:a6:fe:1f:0c:b7:aa:95:ed:28:6a:b7:c8:
47:73:30:ee:3f:ce:2b:30:54:45:4c:47:a4:ff:b8:c0:f7:72:
80:6e:6f:a4:e5:21:12:41:bc:32:dc:d9:40:ee:0f:13:ee:17:
c4:c0:2a:93:66:da:69:ce:12:bf:a8:af:ba:85:26:23:22:79:
20:14:e9:48:54:fc:8d:bc:6e:b2:25:93:09:cb:2d:fe:7f:39:
f4:5f:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:11:27 2026 by rpki-client