
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json)
Hash identifier: xv/Foh2a6B/DnXS4FSso0PzWn9giRo044Moi1qo/wv4=
Subject key identifier: AE:D5:30:E6:E7:F5:7A:EC:AE:FA:AC:64:8F:34:04:FC:AA:3A:4E:41
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
Manifest number: 9B
Signing time: Fri 25 Sep 2026 05:58:47 +0000
Manifest this update: Fri 25 Sep 2026 05:58:46 +0000
Manifest next update: Fri 02 Oct 2026 05:58:46 +0000
Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: xDo1ln0uVsC/fJa+ZFB5BoNpvmZooG/iQgaF50yStYc=)
2: 828D0130B71911F18A35C1CA6C11F970.roa (hash: UkCQ9gv6ic/KKPT0IIpRmrPJG7QCTlStC/0d7bvnzHo=)
3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=)
4: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Sep 25 05:58:46 2026 GMT
Not After : Oct 2 05:58:46 2026 GMT
Subject: CN=6ab60d97-c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:73:cd:8e:0c:22:9e:fc:14:34:81:99:c8:
9d:fb:13:48:cb:29:a0:57:22:97:0a:b7:22:e4:56:
c9:e6:08:79:07:c1:9a:cf:c8:7c:3d:3c:e7:eb:c4:
fd:75:d0:f7:f1:0e:2c:c7:66:1d:67:b9:7c:44:9e:
97:9d:bb:05:09:b3:bb:0b:e8:d7:e6:13:f1:17:35:
ec:b3:52:7c:14:b9:e4:e5:7f:73:b2:1e:e2:33:a1:
22:82:70:be:be:48:c6:c6:1a:e3:d6:72:43:c7:0c:
33:6d:b6:74:1e:7c:e6:26:84:26:30:39:15:42:83:
a4:e3:7b:35:25:91:e3:52:78:9e:d9:4e:c7:97:e5:
96:3b:77:01:15:56:e4:d5:ff:8e:dc:52:77:58:7b:
7b:c9:2c:50:8c:b9:3e:f8:16:c8:fe:9a:70:e2:cf:
00:b7:87:ea:c3:a5:5f:c3:83:df:7e:c0:54:e3:90:
53:33:1a:e1:45:35:b2:38:14:c5:40:91:7e:f7:a2:
5f:9a:3d:5c:d5:c7:56:65:1a:b1:24:ce:cf:b3:8f:
26:d2:9b:08:43:3f:02:b2:c4:fc:e9:d8:f7:7a:4d:
5b:33:30:b3:9c:e6:62:04:98:cc:be:4f:7a:9f:69:
fb:43:c7:bc:8e:c5:25:a4:cf:9d:50:82:42:29:13:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:30:E6:E7:F5:7A:EC:AE:FA:AC:64:8F:34:04:FC:AA:3A:4E:41
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b8:48:67:71:2c:2f:ac:f6:ba:bb:7a:c9:9a:a5:3c:b2:db:
e3:2b:bf:2b:82:9c:c8:dc:c7:65:54:e5:df:af:2f:39:e9:91:
7b:42:67:49:0c:ce:16:cb:8a:51:c5:1a:37:6f:61:b7:df:69:
49:5d:2f:2f:cd:dd:15:0e:4c:b0:76:bb:aa:40:94:90:87:4c:
12:2f:26:b7:cd:42:cc:a6:9e:79:2a:17:2e:6d:84:36:54:2d:
83:df:3e:95:50:79:bc:7c:2f:74:0f:7f:01:b9:b8:cf:46:a6:
32:ac:a8:cd:fa:07:47:cd:a9:cb:7d:e2:43:8c:86:e7:8c:7c:
e3:67:7e:dd:25:7a:89:35:b5:2f:13:52:b9:ef:55:a3:67:6f:
4c:92:95:2e:c9:ac:1a:17:f7:e4:cd:45:29:9f:3c:b7:70:56:
33:5b:66:2a:9f:be:cc:f2:dd:c4:29:18:79:31:32:8a:71:0f:
c4:5e:c0:4a:ad:a8:9c:cd:ec:21:c5:1f:d4:f0:fb:f6:9f:50:
dc:10:8e:de:4a:22:9c:20:02:b2:be:94:32:5e:a0:33:f7:53:
03:fa:ba:b4:3f:25:f1:67:a2:f7:c9:7e:3e:74:2f:fe:f9:c9:
3b:1b:fd:72:8e:d4:47:9b:b1:53:8e:94:72:06:f5:60:da:f2:
ef:21:89:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJGRTExMTAvBgNVBAUTKDBDNThDNjk2OUVFNjRDNDE5MUFBQjY2OTYzRjQwOUQ0
NUFFQUY2OTgwHhcNMjYwOTI1MDU1ODQ2WhcNMjYxMDAyMDU1ODQ2WjAYMRYwFAYD
VQQDEw02YWI2MGQ5Ny1jMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGBzzY4MIp78FDSBmcid+xNIyymgVyKXCrci5FbJ5gh5B8Gaz8h8PTzn68T9
ddD38Q4sx2YdZ7l8RJ6XnbsFCbO7C+jX5hPxFzXss1J8FLnk5X9zsh7iM6EignC+
vkjGxhrj1nJDxwwzbbZ0HnzmJoQmMDkVQoOk43s1JZHjUnie2U7Hl+WWO3cBFVbk
1f+O3FJ3WHt7ySxQjLk++BbI/ppw4s8At4fqw6Vfw4PffsBU45BTMxrhRTWyOBTF
QJF+96Jfmj1c1cdWZRqxJM7Ps48m0psIQz8CssT86dj3ek1bMzCznOZiBJjMvk96
n2n7Q8e8jsUlpM+dUIJCKRNTJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7VMObn
9XrsrvqsZI80BPyqOk5BMB8GA1UdIwQYMBaAFAxYxpae5kxBkaq2aWP0CdRa6vaY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GQjI4RDlGMERD
OUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRFR1JxclpwWV9RSjFGcnE5
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkZFMS9GQjI4RDlGMERDOUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRF
R1JxclpwWV9RSjFGcnE5cGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLhIZ3EsL6z2urt6yZqlPLLb4yu/K4KcyNzHZVTl368vOemRe0JnSQzOFsuK
UcUaN29ht99pSV0vL83dFQ5MsHa7qkCUkIdMEi8mt81CzKaeeSoXLm2ENlQtg98+
lVB5vHwvdA9/Abm4z0amMqyozfoHR82py33iQ4yG54x842d+3SV6iTW1LxNSue9V
o2dvTJKVLsmsGhf35M1FKZ88t3BWM1tmKp++zPLdxCkYeTEyinEPxF7ASq2onM3s
IcUf1PD79p9Q3BCO3koinCACsr6UMl6gM/dTA/q6tD8l8Wei98l+PnQv/vnJOxv9
co7UR5uxU46Ucgb1YNry7yGJIA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:30:03 2026 by rpki-client