
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier: yzjdSNG4hy4LMna4wSSmLXHrTkHhqm/b/unpJGIhW+k=
Subject key identifier: F6:29:0E:54:5B:D0:4D:72:86:24:AA:28:3A:5E:50:6E:88:AF:86:BE
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number: CC
Signing time: Mon 21 Sep 2026 06:43:45 +0000
Manifest this update: Mon 21 Sep 2026 06:43:45 +0000
Manifest next update: Mon 28 Sep 2026 06:43:45 +0000
Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: +MBvpqMVOVsazEsht4VANW2Je4wFBMdezADtbK9IvVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Validity
Not Before: Sep 21 06:43:45 2026 GMT
Not After : Sep 28 06:43:45 2026 GMT
Subject: CN=6ab0d221-d9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:c3:b6:72:14:e3:f0:c1:71:ab:c3:ed:31:
b3:54:b6:d4:5a:3e:c1:78:4b:5a:fb:71:16:05:c5:
ff:55:fc:ac:a2:bc:47:25:8a:2f:d5:95:25:ce:eb:
58:49:c8:bb:73:ce:ef:91:ff:a9:51:b1:eb:62:cc:
ca:83:a4:ab:11:79:f7:f5:32:a3:98:53:39:64:24:
6d:22:1c:87:7d:88:af:33:3d:73:0f:bc:1d:f8:5c:
f1:4c:67:a0:7d:6c:f3:75:d1:d4:2e:a7:68:0a:28:
3d:79:c2:99:01:d1:77:94:ac:c9:51:fb:51:76:d7:
71:b7:bd:23:e2:a9:85:13:66:1c:d5:74:49:38:24:
ad:88:7d:3a:38:6d:8d:c7:96:99:48:ef:12:5a:95:
a6:33:f4:ff:be:f2:9f:6d:cb:f8:fb:c0:4e:b4:33:
72:97:bc:20:da:6f:ad:77:32:07:05:59:07:01:68:
9e:dd:1c:2e:ee:24:d7:e2:26:92:5c:4a:10:1a:ee:
5a:d3:71:33:c5:aa:98:74:52:bb:b2:ec:03:fa:a0:
6d:46:62:d8:c5:b1:b4:68:e8:17:b0:29:e8:76:77:
ed:a7:76:0b:62:03:e7:1d:54:39:13:90:7a:03:fa:
06:59:25:60:48:2b:3a:1e:c0:0c:3c:71:b4:cd:cf:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:0E:54:5B:D0:4D:72:86:24:AA:28:3A:5E:50:6E:88:AF:86:BE
X509v3 Authority Key Identifier:
keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:cf:71:bc:65:a3:71:18:90:79:bb:8a:5f:bc:38:2d:53:
67:b9:ae:29:ca:c0:b3:c6:94:53:aa:4c:62:09:e5:dd:54:7e:
86:54:80:d1:4d:d7:2b:3e:b4:90:19:05:db:eb:78:94:74:20:
d1:20:07:14:a7:0a:68:71:81:6a:c0:ed:d8:ae:61:6d:23:2e:
00:f7:9e:5a:b9:f4:6b:bc:68:7b:f0:01:51:ec:64:57:6f:1d:
92:a7:65:d9:6f:6c:bb:04:f2:f7:96:a9:73:bb:96:73:4d:c1:
30:cd:05:91:8b:3d:af:16:fc:2f:96:7e:f1:6f:19:61:89:ae:
16:eb:c1:ef:db:23:ff:6d:39:f4:c0:2c:22:9a:01:48:8e:89:
40:10:97:cd:98:47:a3:a1:e6:de:b4:bf:1c:97:13:8e:a7:2a:
ca:93:e0:82:66:55:b9:40:75:82:e0:f4:81:64:a2:0f:72:29:
70:19:1e:48:30:11:58:ad:b2:9a:90:40:3b:9f:1b:0b:55:f1:
b4:fb:4c:9f:5c:ce:34:3b:cb:f8:c2:66:e1:fa:01:53:52:40:
7f:d1:f9:0b:91:04:c7:81:8b:6d:60:9c:0c:ce:5b:84:07:ce:
cd:aa:1e:66:ed:9d:b3:21:a3:52:64:24:5a:58:7d:a0:e7:04:
84:cf:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:29:41 2026 by rpki-client