
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json)
Hash identifier: Dqa2wG9bHvFxqcw0X355ClRuKUtik3XnPT3gJ8RvWFk=
Subject key identifier: 4D:17:99:5B:89:18:1F:95:9D:2B:BB:36:CA:2C:38:99:23:F5:DD:AA
Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61
Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
Manifest number: 016B
Signing time: Fri 25 Sep 2026 04:57:08 +0000
Manifest this update: Fri 25 Sep 2026 04:57:08 +0000
Manifest next update: Fri 02 Oct 2026 04:57:08 +0000
Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: MpaQl85TouJtlaxg9KzgPGvURjALco3BvpOR82XJsis=)
2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: qsrn91pM8G1hIO7HWIMSnDb/hEEeWuHWX7WAk8f2MwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl
rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161
Validity
Not Before: Sep 25 04:57:08 2026 GMT
Not After : Oct 2 04:57:08 2026 GMT
Subject: CN=6ab5ff24-f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:21:14:9b:f4:e0:3d:8e:fe:09:7d:44:b4:
4b:b7:5e:6f:dd:0a:70:f9:0d:65:6c:24:41:86:71:
ab:30:43:42:ba:bc:0a:d9:f1:0e:3d:ff:64:d7:ba:
9d:3f:0e:ed:58:b2:94:4e:a9:f3:c8:5d:ba:b9:4c:
52:5c:35:26:e6:4d:1f:8d:c5:5e:32:b9:63:78:e6:
42:cf:00:b8:e9:06:e5:cf:b9:1e:47:4e:45:69:29:
38:56:98:25:92:45:ca:3d:0f:1c:29:45:3d:83:0e:
24:e1:f3:6a:57:03:5c:33:6b:00:4d:04:ee:3a:81:
5e:1f:be:6f:e0:06:8f:86:3f:f7:04:d6:6f:b7:08:
a6:8e:4c:bb:24:cf:6d:7e:a1:3a:1e:3a:b1:a1:dc:
05:b9:3d:de:49:7a:fa:70:bd:69:19:00:d5:30:70:
15:cc:42:8e:7d:34:2d:46:de:a5:e4:27:b6:30:98:
83:7d:88:71:8a:89:c5:7f:03:ce:a7:06:9e:13:64:
65:26:95:3a:4c:2c:1d:c6:29:f9:fa:f6:1e:ed:20:
21:0f:05:4d:f6:76:48:d8:ea:9f:41:eb:fd:f3:e5:
45:25:88:a1:4b:28:d7:4b:44:23:0c:97:09:cf:25:
af:85:ff:03:22:6d:0e:66:1f:af:3e:2d:5f:67:7e:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:99:5B:89:18:1F:95:9D:2B:BB:36:CA:2C:38:99:23:F5:DD:AA
X509v3 Authority Key Identifier:
keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:03:ef:e9:d2:b4:1e:c6:dc:18:1f:d7:c0:d6:28:55:cb:
6a:b9:4b:ee:72:2e:e2:8c:3e:44:c8:05:4b:55:0b:65:da:d5:
da:5f:34:9a:fc:62:a7:da:09:d6:2b:8e:01:38:c2:9c:8e:35:
6c:a6:8d:cb:44:27:3a:e9:ed:c7:e6:52:d9:4b:47:7e:41:9b:
53:8a:52:d0:e4:7d:3c:cf:04:67:64:ef:fa:ea:69:ad:0f:d9:
f9:c7:03:ac:25:95:a8:ae:cc:0d:9d:7b:79:28:f8:91:3f:2c:
11:ef:18:e8:8a:ab:e2:62:4e:e4:87:31:f2:66:11:b3:4e:f8:
32:c3:52:6b:13:33:21:7b:67:47:31:67:ab:1d:f6:84:b1:9e:
3f:5c:3a:31:9a:9c:94:de:f1:5f:c4:44:21:44:38:2c:17:cc:
e7:28:ca:23:39:9f:9e:1a:d8:81:e3:4c:35:f8:3a:30:99:6c:
16:a8:69:9f:67:2c:1c:ae:1d:a8:63:bd:af:24:d4:29:2d:43:
6d:e4:42:d1:e6:95:6f:ba:22:b0:e4:b9:1e:8e:35:c6:03:b1:
5f:00:91:61:f7:57:e8:50:d0:2d:bc:4a:2d:ce:4e:cd:64:21:
c3:06:fb:a4:0d:ec:81:38:ed:af:48:3c:5a:e4:c6:23:78:f5:
65:65:ec:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdCMjQxMTAvBgNVBAUTKEY1M0JDRkI4QzcyQzFBM0FCNjVFMEVBODhFM0ExQTIx
RDI4Q0QxNjEwHhcNMjYwOTI1MDQ1NzA4WhcNMjYxMDAyMDQ1NzA4WjAYMRYwFAYD
VQQDEw02YWI1ZmYyNC1mMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzI0hFJv04D2O/gl9RLRLt15v3Qpw+Q1lbCRBhnGrMENCurwK2fEOPf9k17qd
Pw7tWLKUTqnzyF26uUxSXDUm5k0fjcVeMrljeOZCzwC46Qblz7keR05FaSk4Vpgl
kkXKPQ8cKUU9gw4k4fNqVwNcM2sATQTuOoFeH75v4AaPhj/3BNZvtwimjky7JM9t
fqE6HjqxodwFuT3eSXr6cL1pGQDVMHAVzEKOfTQtRt6l5Ce2MJiDfYhxionFfwPO
pwaeE2RlJpU6TCwdxin5+vYe7SAhDwVN9nZI2OqfQev98+VFJYihSyjXS0QjDJcJ
zyWvhf8DIm0OZh+vPi1fZ36knwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0XmVuJ
GB+VnSu7NsosOJkj9d2qMB8GA1UdIwQYMBaAFPU7z7jHLBo6tl4OqI46GiHSjNFh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xRTRGM0E1QzhG
NzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dqcTJYZzZvampvYUlkS00w
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0IyNC8xRTRGM0E1QzhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dq
cTJYZzZvampvYUlkS00wV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXV8D7+nStB7G3Bgf18DWKFXLarlL7nIu4ow+RMgFS1ULZdrV2l80mvxip9oJ
1iuOATjCnI41bKaNy0QnOuntx+ZS2UtHfkGbU4pS0OR9PM8EZ2Tv+upprQ/Z+ccD
rCWVqK7MDZ17eSj4kT8sEe8Y6Iqr4mJO5Icx8mYRs074MsNSaxMzIXtnRzFnqx32
hLGeP1w6MZqclN7xX8REIUQ4LBfM5yjKIzmfnhrYgeNMNfg6MJlsFqhpn2csHK4d
qGO9ryTUKS1DbeRC0eaVb7oisOS5Ho41xgOxXwCRYfdX6FDQLbxKLc5OzWQhwwb7
pA3sgTjtr0g8WuTGI3j1ZWXsQA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:10:39 2026 by rpki-client