
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier: YjvTuSfNEhMp3fE/rpjOvwP8aFd5rtrjVMjyWs0G9CQ=
Subject key identifier: 3F:4C:F6:D5:4B:C5:C3:54:1C:92:E0:6C:15:C6:B0:BC:CD:4F:7A:28
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number: 01E2
Signing time: Mon 27 Jul 2026 05:06:23 +0000
Manifest this update: Mon 27 Jul 2026 05:06:22 +0000
Manifest next update: Mon 03 Aug 2026 05:06:22 +0000
Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: YmwhmoNi84KscisAzZqKJdlvzAUbPQtb1Wv8HhyMB1g=)
2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: 9ihywTWH8D0AsKW3lVgSJVrGmFJI4l3WNEZsqdCL8R8=)
3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: 7i/+pU2Et59KGbh7B5+qqFDZaAktF1/YoczW2JWdHFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Jul 27 05:06:22 2026 GMT
Not After : Aug 3 05:06:22 2026 GMT
Subject: CN=6a66e74f-4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:df:98:64:1b:71:08:c5:2f:41:b0:4b:75:
d7:ac:83:a5:ba:da:cf:ab:de:2f:4d:5b:45:a5:56:
9f:d5:5d:34:f5:2d:65:cd:0b:b9:17:0c:de:eb:51:
4a:ff:b7:45:ad:ef:6e:ec:5e:88:fa:86:1f:01:62:
84:f8:82:60:62:c3:5f:a4:55:a8:34:e3:d7:76:14:
59:24:44:4f:bd:2d:b0:d0:a0:d7:3c:3e:db:fc:5b:
f8:50:9f:b8:46:e4:91:6a:09:51:4d:63:5f:05:60:
ae:d4:44:78:d3:a4:e2:7d:df:f9:23:d8:8f:3c:7c:
92:dd:37:39:be:42:f3:f2:09:87:cd:4b:ff:98:75:
89:ff:e7:95:19:41:ae:94:2b:c6:77:65:71:a8:60:
91:ed:e9:50:1c:69:33:1c:35:28:ce:ea:76:34:47:
c4:5f:7b:81:29:f1:15:df:fb:e3:da:81:6f:b6:44:
e9:0b:3b:83:3d:8a:f1:01:f0:40:9e:02:9c:5c:3b:
17:5d:f4:ed:8b:3d:46:61:bc:4d:e2:05:b0:b2:31:
d9:36:f9:3a:2d:a1:11:2a:40:fa:5e:84:27:14:a5:
be:d0:bd:12:a6:ad:9b:c1:e1:6d:eb:5c:45:0c:2a:
40:59:02:c9:b7:17:03:2b:c7:56:64:4b:7b:1b:bc:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:F6:D5:4B:C5:C3:54:1C:92:E0:6C:15:C6:B0:BC:CD:4F:7A:28
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:35:42:f2:ac:13:5f:3b:81:0b:88:78:4e:d2:7d:57:2a:a7:
4c:b7:d5:ef:b7:1b:d6:bb:36:ce:cc:a5:af:5c:f3:96:ec:2a:
d7:1e:f0:b0:c8:c1:ef:89:c5:0d:0c:da:b0:81:93:75:82:09:
a1:fb:c8:39:13:3f:0f:22:23:5a:10:1b:bf:a5:98:2e:6a:b2:
f2:16:d2:4b:d5:aa:72:76:c6:c6:39:05:e9:dd:2d:63:76:8d:
9f:35:d1:0f:8a:39:60:2d:eb:37:ee:3d:d9:ce:2c:b2:9e:12:
de:40:23:5d:34:de:d4:27:b8:e6:4f:ca:f2:f2:03:ff:4f:38:
a7:46:ea:25:9f:4c:48:d7:f9:6f:7e:8e:ac:32:53:3e:fe:3e:
b4:2d:32:20:e2:7a:d2:21:52:5e:bf:cb:80:64:c6:bc:e4:67:
f0:d7:30:f6:46:2b:52:b5:4a:8f:a3:0c:c2:62:bf:61:ff:9e:
da:2f:59:6a:e4:a8:a5:7b:f9:61:8c:c1:a5:db:d7:8c:5f:06:
b5:2a:a8:94:d2:76:75:16:40:70:82:14:40:17:fb:f8:6d:a9:
ec:8d:0a:e3:b4:75:16:df:1d:88:80:4d:62:18:c4:99:8a:55:
bb:74:57:6b:04:af:b8:a8:49:ac:3f:b4:52:36:23:01:0c:74:
71:74:1c:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw
Q0UwQzI5RkEwHhcNMjYwNzI3MDUwNjIyWhcNMjYwODAzMDUwNjIyWjAYMRYwFAYD
VQQDEw02YTY2ZTc0Zi00ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlVPfmGQbcQjFL0GwS3XXrIOlutrPq94vTVtFpVaf1V009S1lzQu5Fwze61FK
/7dFre9u7F6I+oYfAWKE+IJgYsNfpFWoNOPXdhRZJERPvS2w0KDXPD7b/Fv4UJ+4
RuSRaglRTWNfBWCu1ER406Tifd/5I9iPPHyS3Tc5vkLz8gmHzUv/mHWJ/+eVGUGu
lCvGd2VxqGCR7elQHGkzHDUozup2NEfEX3uBKfEV3/vj2oFvtkTpCzuDPYrxAfBA
ngKcXDsXXfTtiz1GYbxN4gWwsjHZNvk6LaERKkD6XoQnFKW+0L0Spq2bweFt61xF
DCpAWQLJtxcDK8dWZEt7G7wq6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9M9tVL
xcNUHJLgbBXGsLzNT3ooMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC
NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU
MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZzVC8qwTXzuBC4h4TtJ9VyqnTLfV77cb1rs2zsylr1zzluwq1x7wsMjB74nF
DQzasIGTdYIJofvIORM/DyIjWhAbv6WYLmqy8hbSS9WqcnbGxjkF6d0tY3aNnzXR
D4o5YC3rN+492c4ssp4S3kAjXTTe1Ce45k/K8vID/084p0bqJZ9MSNf5b36OrDJT
Pv4+tC0yIOJ60iFSXr/LgGTGvORn8Ncw9kYrUrVKj6MMwmK/Yf+e2i9ZauSopXv5
YYzBpdvXjF8GtSqolNJ2dRZAcIIUQBf7+G2p7I0K47R1Ft8diIBNYhjEmYpVu3RX
awSvuKhJrD+0UjYjAQx0cXQcHQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:59 2026 by rpki-client