
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier: tdsacb4NbY+Pp712xMM/xkQhqjI8HqF+JGKJn5ckcX0=
Subject key identifier: D6:06:D6:E5:99:1A:D6:0D:D7:28:47:36:2D:C0:D7:56:D5:6F:32:5F
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer: /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number: A7
Signing time: Tue 13 Oct 2026 07:50:58 +0000
Manifest this update: Tue 13 Oct 2026 07:50:57 +0000
Manifest next update: Tue 20 Oct 2026 07:50:57 +0000
Files and hashes: 1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: tD/5U4r/+Z7ecPRGO5Frxe/ViAVnqIg5RNl/BwPAoT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Validity
Not Before: Oct 13 07:50:57 2026 GMT
Not After : Oct 20 07:50:57 2026 GMT
Subject: CN=6acde2e2-2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:72:a7:28:95:24:9d:77:ed:c4:c4:58:4c:
8a:50:1f:f2:e2:61:3a:07:14:15:b6:4f:38:92:dc:
5f:fd:49:cb:8e:49:7e:24:31:21:77:02:46:d1:a8:
0f:49:0c:66:b2:d9:d1:a6:8a:6f:bd:98:8b:03:b2:
50:2c:6b:b2:75:10:0c:35:bc:27:4b:31:71:52:ea:
b0:89:59:b1:a5:fa:c4:2a:0c:cf:a8:95:41:a0:e7:
49:22:94:5e:2c:9c:29:83:a0:27:b9:fd:0a:2f:37:
5e:7b:08:6e:fc:24:6e:e3:4c:22:a3:5e:cc:ea:ed:
64:23:1d:71:eb:73:7a:d3:87:0b:fb:0c:3c:4e:37:
71:a6:49:18:e7:b1:42:28:39:95:b0:87:00:eb:ad:
ce:04:fb:c7:a2:98:eb:01:66:02:a6:fc:82:bb:ab:
41:36:12:78:3c:ab:4c:ba:4e:fd:67:cc:3c:f8:ef:
42:38:8d:31:51:3a:a3:76:84:e5:bd:59:72:31:1a:
73:47:84:5f:66:11:1f:fa:d2:b5:4d:28:55:39:dd:
1c:3d:70:ef:ec:6a:0c:2d:f3:96:5b:ca:73:c7:4e:
73:6c:fb:56:fa:7e:5c:d2:fc:b0:67:1a:9c:ed:82:
c5:8c:ac:af:d3:57:64:81:e3:63:d5:09:16:f4:ee:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:D6:E5:99:1A:D6:0D:D7:28:47:36:2D:C0:D7:56:D5:6F:32:5F
X509v3 Authority Key Identifier:
keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:62:b3:44:a0:cb:e4:07:2c:d6:6f:70:99:05:1e:83:e1:
27:01:74:03:e2:10:25:4d:b5:af:75:ca:af:15:a1:5e:aa:f1:
a0:9b:97:c8:97:5b:1a:5a:c8:57:34:58:f4:7b:5b:eb:6f:4e:
ed:bf:72:57:cd:0e:25:cb:bc:ca:11:77:80:0e:59:cf:04:34:
6c:85:d6:73:ed:e5:a5:12:7d:af:30:70:04:8c:5e:f6:6e:e2:
6d:71:01:88:48:2f:5f:7a:10:89:49:94:f4:0a:6f:fd:7b:2d:
49:bb:51:cd:e6:77:a8:36:fb:44:6a:c0:eb:3f:19:2f:d6:e2:
9d:3f:6c:e9:34:bb:e6:ba:29:8d:08:90:e1:7f:52:53:aa:25:
0c:29:79:b1:24:8d:77:3c:c6:10:c6:a0:81:55:70:7c:49:03:
8d:d3:44:bb:07:93:39:d3:b8:4d:56:68:43:28:5d:fb:ad:c0:
55:49:2f:c8:62:a6:a8:c4:ab:01:36:c2:17:96:b7:d0:7e:a4:
20:c8:07:6f:18:f9:66:ac:db:96:80:83:ff:5a:99:02:29:e6:
5c:3e:b6:5a:d5:5c:50:06:1b:15:75:40:de:8f:85:17:19:55:
c5:ac:10:5a:94:50:f5:73:f8:ce:26:80:1d:70:c2:02:4b:d8:
a5:7e:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:37:43 2026 by rpki-client