
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
File: 9ZPdA-kcUCBobrRYJqjm3Vh395g.mft (raw, json)
Hash identifier: MADNLJDYxivEnh1aKd/xK8zCWlvtJrq+J5DudALT3zQ=
Subject key identifier: BC:EB:32:EC:D4:17:9E:CC:BD:69:EA:2C:11:10:B3:C7:63:68:23:8E
Authority key identifier: F5:93:DD:03:E9:1C:50:20:68:6E:B4:58:26:A8:E6:DD:58:77:F7:98
Certificate issuer: /CN=A9146179/serialNumber=F593DD03E91C5020686EB45826A8E6DD5877F798
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ZPdA-kcUCBobrRYJqjm3Vh395g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
Manifest number: 0169
Signing time: Thu 23 Jul 2026 07:08:43 +0000
Manifest this update: Thu 23 Jul 2026 07:08:43 +0000
Manifest next update: Thu 30 Jul 2026 07:08:43 +0000
Files and hashes: 1: 9ZPdA-kcUCBobrRYJqjm3Vh395g.crl (hash: WHv5oXV2F3MvPWdSFxXIUnxPUhZY9TIDGqAUktmlpz8=)
2: 65801D5C4E9611F1984CD686A2EE528E.roa (hash: 0STq7VqebKliI5vlGUFDEjgk7/H9DlR1fMoXTLQZ18k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.crl
rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ZPdA-kcUCBobrRYJqjm3Vh395g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=F593DD03E91C5020686EB45826A8E6DD5877F798
Validity
Not Before: Jul 23 07:08:43 2026 GMT
Not After : Jul 30 07:08:43 2026 GMT
Subject: CN=6a61bdfb-2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:9c:42:74:90:17:a6:e5:84:4c:cc:16:ab:
f3:19:d3:2f:19:4f:48:7f:d7:b1:2b:76:49:60:39:
24:c9:98:8a:34:e2:74:e3:fe:e6:31:94:81:62:50:
63:4b:ed:da:ff:de:f3:38:53:3f:52:32:1e:4a:79:
fb:15:ff:a1:34:1c:50:9c:37:ad:21:8b:49:a1:db:
49:e3:14:e3:c2:77:e6:a9:83:f1:7e:90:03:ea:e6:
e2:05:e9:83:1d:b2:a4:cc:a2:52:91:cc:f9:e5:a3:
0d:2b:f1:76:07:6a:87:8b:1e:9a:3e:38:e7:b6:02:
61:18:7b:58:14:b7:3f:60:f0:0c:01:11:30:1e:98:
97:d1:3b:0c:83:c4:87:b1:64:3d:2f:d0:06:2f:65:
4b:77:15:7d:19:9e:ff:31:75:db:51:f1:82:6b:a3:
78:81:9e:f4:62:de:4d:9f:b3:1e:c0:88:4e:7f:45:
a2:f7:98:08:46:58:fa:9e:95:5d:b9:7d:ec:33:70:
8c:59:b2:48:25:a6:31:60:75:4a:76:70:c3:36:ed:
cd:55:99:71:73:63:4a:ea:af:f2:a5:dd:fe:cb:63:
35:a5:93:0d:51:b7:5b:3c:55:83:51:a3:b6:c2:20:
86:e7:a1:2a:ca:a0:41:e3:de:08:34:a1:38:cd:e7:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:32:EC:D4:17:9E:CC:BD:69:EA:2C:11:10:B3:C7:63:68:23:8E
X509v3 Authority Key Identifier:
keyid:F5:93:DD:03:E9:1C:50:20:68:6E:B4:58:26:A8:E6:DD:58:77:F7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ZPdA-kcUCBobrRYJqjm3Vh395g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/9ZPdA-kcUCBobrRYJqjm3Vh395g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:a3:75:a0:94:a8:8e:e1:e1:32:42:5a:15:9b:72:83:ee:
b9:9b:31:eb:0c:f2:c8:df:6e:fb:2d:1d:4b:0d:9d:6a:db:44:
41:5d:9f:6e:11:fd:69:ae:4e:56:8f:b1:31:3a:43:ef:38:0d:
d6:5e:cc:f6:b4:96:37:fd:d0:34:a5:58:87:86:95:d8:9c:64:
54:0d:b8:f3:f1:e4:08:e9:7e:2c:2b:6b:e2:bb:0a:17:6d:b8:
b6:00:c3:1a:38:97:44:11:58:9a:e5:81:96:2e:6b:55:d9:f9:
41:22:25:06:27:a6:fd:e7:ea:af:b5:57:aa:a7:78:8c:e7:53:
82:60:eb:3f:85:e0:d9:29:6f:e9:9a:04:e4:d0:9a:54:7d:09:
d8:ac:51:3b:98:12:d2:75:2a:d7:b0:cc:46:91:de:60:97:20:
4c:00:da:20:b1:67:f9:62:ff:14:96:0d:a1:71:9e:ab:6d:84:
23:9f:f2:a0:75:ba:c5:67:6e:08:71:b3:17:ee:6b:2f:ea:0f:
4a:a0:d1:08:93:97:15:17:73:3b:1c:44:6d:7a:92:99:eb:d5:
53:d9:f4:40:85:f7:00:58:d1:bc:f7:d0:66:5b:53:f5:94:01:
5c:5e:c5:aa:a1:55:d9:75:ad:78:38:3b:75:df:66:90:4a:98:
78:81:60:08
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NjE3OTExMC8GA1UEBRMoRjU5M0REMDNFOTFDNTAyMDY4NkVCNDU4MjZBOEU2REQ1
ODc3Rjc5ODAeFw0yNjA3MjMwNzA4NDNaFw0yNjA3MzAwNzA4NDNaMBgxFjAUBgNV
BAMTDTZhNjFiZGZiLTI2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQGZxCdJAXpuWETMwWq/MZ0y8ZT0h/17ErdklgOSTJmIo04nTj/uYxlIFiUGNL
7dr/3vM4Uz9SMh5KefsV/6E0HFCcN60hi0mh20njFOPCd+apg/F+kAPq5uIF6YMd
sqTMolKRzPnlow0r8XYHaoeLHpo+OOe2AmEYe1gUtz9g8AwBETAemJfROwyDxIex
ZD0v0AYvZUt3FX0Znv8xddtR8YJro3iBnvRi3k2fsx7AiE5/RaL3mAhGWPqelV25
fewzcIxZskglpjFgdUp2cMM27c1VmXFzY0rqr/Kl3f7LYzWlkw1Rt1s8VYNRo7bC
IIbnoSrKoEHj3gg0oTjN5+lTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvOsy7NQX
nsy9aeosERCzx2NoI44wHwYDVR0jBBgwFoAU9ZPdA+kcUCBobrRYJqjm3Vh395gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzRCRkQ5QkJDQUE3
QzExRUZBMzNCRkQ3N0M0RjlBRTAyLzlaUGRBLWtjVUNCb2JyUllKcWptM1ZoMzk1
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOVpQZEEta2NVQ0JvYnJSWUpxam0zVmgzOTVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
MTc5LzRCRkQ5QkJDQUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyLzlaUGRBLWtjVUNC
b2JyUllKcWptM1ZoMzk1Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHtaN1oJSojuHhMkJaFZtyg+65mzHrDPLI3277LR1LDZ1q20RBXZ9uEf1prk5W
j7ExOkPvOA3WXsz2tJY3/dA0pViHhpXYnGRUDbjz8eQI6X4sK2viuwoXbbi2AMMa
OJdEEVia5YGWLmtV2flBIiUGJ6b95+qvtVeqp3iM51OCYOs/heDZKW/pmgTk0JpU
fQnYrFE7mBLSdSrXsMxGkd5glyBMANogsWf5Yv8Ulg2hcZ6rbYQjn/KgdbrFZ24I
cbMX7msv6g9KoNEIk5cVF3M7HERtepKZ69VT2fRAhfcAWNG899BmW1P1lAFcXsWq
oVXZda14ODt132aQSph4gWAI
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:09 2026 by rpki-client