
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json)
Hash identifier: pWxn+UHnD58XUxYbpzWciJjcihi0PQdtKedBO9V7yXs=
Subject key identifier: 9E:9C:6A:0F:9C:01:5F:D1:67:79:60:C1:1B:38:BB:91:3F:35:92:BE
Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
Manifest number: 0540
Signing time: Thu 24 Sep 2026 23:18:25 +0000
Manifest this update: Thu 24 Sep 2026 23:18:24 +0000
Manifest next update: Thu 01 Oct 2026 23:18:24 +0000
Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: 90N34vivj6ZU/iRBpHd1oav0aL3BIdHJCxH7wAl4ZZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl
rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Validity
Not Before: Sep 24 23:18:24 2026 GMT
Not After : Oct 1 23:18:24 2026 GMT
Subject: CN=6ab5afc1-b6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:a2:10:8c:55:0c:42:a9:63:92:ef:f1:f0:
e1:ec:f8:1b:04:43:de:4a:df:4a:7d:b4:0a:47:ab:
e7:73:d6:78:db:f9:5c:ae:f9:c5:45:13:2e:a5:f9:
d2:21:27:40:53:c1:1f:6c:74:25:37:d0:92:6c:81:
b4:59:7e:93:8d:dc:c3:bb:7c:49:24:ba:20:35:d8:
cd:d5:bd:90:d8:14:07:7d:7c:85:05:8f:75:5a:98:
c1:45:02:bf:e7:a4:55:f0:de:d3:0d:d7:b8:9a:2c:
32:b6:ca:a7:aa:8e:55:44:18:6c:7f:8e:10:01:94:
58:ca:cf:c7:86:fc:6d:80:26:ff:b1:37:3c:3d:a2:
39:e6:fe:a0:f0:2d:40:07:4f:e2:fb:b6:06:b9:46:
80:06:8b:f2:ad:01:60:b5:7f:be:e3:a9:ba:78:37:
cd:c0:6b:e5:13:76:a3:97:76:58:be:b4:5f:1c:a4:
1a:dd:a0:19:ef:29:2d:b9:4d:86:5f:f0:06:de:64:
ea:90:88:0f:bf:16:23:0e:d7:f3:67:fc:28:8b:a6:
25:1f:a9:a0:70:98:8f:d1:79:c1:f2:29:0f:73:43:
4c:ec:68:2f:13:f0:97:de:4c:ce:1e:5d:74:a0:db:
36:83:32:ca:37:c1:13:3b:26:b5:10:47:c9:dc:c8:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:6A:0F:9C:01:5F:D1:67:79:60:C1:1B:38:BB:91:3F:35:92:BE
X509v3 Authority Key Identifier:
keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:7f:d6:20:90:e7:e1:56:59:29:5f:f1:fd:92:d3:40:1c:
02:87:9f:16:0b:c5:86:e6:64:76:d8:8e:80:b8:36:c8:66:59:
d1:f9:c1:da:78:3f:f4:00:17:2b:49:98:d9:dc:76:7f:89:55:
e4:4a:87:45:5f:92:11:8f:64:a5:16:65:c4:e4:dc:52:5a:2b:
9f:ac:a9:f9:4c:3e:9e:58:dc:99:b9:27:59:f4:0b:32:ac:31:
e1:b1:59:31:a6:c0:48:3b:30:c6:8c:f6:93:7c:eb:98:e2:2e:
ed:fe:8e:92:f3:97:43:e7:05:78:75:4d:e6:a9:b9:38:a9:bb:
f8:f9:16:f9:cf:b9:0f:98:7c:85:f5:48:52:d8:81:b4:b7:dd:
23:44:92:83:94:a9:63:bd:f1:6f:9c:81:da:87:b7:1b:ad:4c:
91:6b:2c:e1:21:38:fa:80:9e:0b:79:55:81:0e:ee:7b:79:35:
17:f9:14:ee:5d:80:40:9c:a0:28:4c:6a:c8:83:f0:4a:12:bf:
07:c0:fd:c0:61:da:29:18:ea:df:d2:d1:7d:90:88:97:32:13:
7d:e0:72:5b:35:17:f9:7b:8f:a0:0a:b7:99:a0:21:f7:81:b3:
03:c5:9e:04:41:ee:09:79:8e:7b:52:1c:48:ac:a3:9c:7d:0c:
c5:25:9a:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3
ODlBQTAxMDcwHhcNMjYwOTI0MjMxODI0WhcNMjYxMDAxMjMxODI0WjAYMRYwFAYD
VQQDEw02YWI1YWZjMS1iNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YGiEIxVDEKpY5Lv8fDh7PgbBEPeSt9KfbQKR6vnc9Z42/lcrvnFRRMupfnS
ISdAU8EfbHQlN9CSbIG0WX6TjdzDu3xJJLogNdjN1b2Q2BQHfXyFBY91WpjBRQK/
56RV8N7TDde4miwytsqnqo5VRBhsf44QAZRYys/HhvxtgCb/sTc8PaI55v6g8C1A
B0/i+7YGuUaABovyrQFgtX++46m6eDfNwGvlE3ajl3ZYvrRfHKQa3aAZ7yktuU2G
X/AG3mTqkIgPvxYjDtfzZ/woi6YlH6mgcJiP0XnB8ikPc0NM7GgvE/CX3kzOHl10
oNs2gzLKN8ETOya1EEfJ3MhPPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6cag+c
AV/RZ3lgwRs4u5E/NZK+MB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ
Mk1ac0paMGpzNXg0bXFBUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWhx/1iCQ5+FWWSlf8f2S00AcAoefFgvFhuZkdtiOgLg2yGZZ0fnB2ng/9AAX
K0mY2dx2f4lV5EqHRV+SEY9kpRZlxOTcUlorn6yp+Uw+nljcmbknWfQLMqwx4bFZ
MabASDswxoz2k3zrmOIu7f6OkvOXQ+cFeHVN5qm5OKm7+PkW+c+5D5h8hfVIUtiB
tLfdI0SSg5SpY73xb5yB2oe3G61MkWss4SE4+oCeC3lVgQ7ue3k1F/kU7l2AQJyg
KExqyIPwShK/B8D9wGHaKRjq39LRfZCIlzITfeByWzUX+XuPoAq3maAh94GzA8We
BEHuCXmOe1IcSKyjnH0MxSWa3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:12 2026 by rpki-client