
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier: xR8I0iNQbdSQUMrSYJeQSr0DlEnDkKhMqTRaLOifBh8=
Subject key identifier: 30:BE:06:4C:41:B9:C9:A3:F9:FA:15:34:C4:00:20:0B:D8:F0:84:C5
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number: 0737
Signing time: Fri 02 Oct 2026 22:18:10 +0000
Manifest this update: Fri 02 Oct 2026 22:18:10 +0000
Manifest next update: Fri 09 Oct 2026 22:18:10 +0000
Files and hashes: 1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: fx/Pq0FDOAaBz4lgx1RBQKci4MgZn1Ls+pjEndRirFQ=)
2: 948A2714980211EB82357D6CC4F9AE02.roa (hash: JxJu+W/gFVrLs6UZ+M7EgRJNsak7W2VInKyM/kAMIno=)
3: 6F0C4648BAD411F19FACF2655111F970.roa (hash: KGuPhaCUK6U3dA09geGf8uE0dfr9WfFz3W0RYKdpPPE=)
4: A9F50C82B6D211F184098C525611F970.roa (hash: yRROUNXNyavQcY90UulYP8WUarRI7OnSxkqJ0fft9Xk=)
5: 51372B24BAFC11F198FD9E485D11F970.roa (hash: Gyti8YSBjmHh5W/Tfp6ofTGuVa9ZAeUsG2Kw3XU0Nz8=)
6: k-VKdqjyxyfVPObKglplJ0zR8mk.asa (hash: rh7ZcFK3ckU8NFOSw88ZHR1MmQYE/XjFTJI/To3S6cY=)
7: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: w1qtw8pmG5p6Y8wtfVj5xGwswTu9Tez4FzWsylopCUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Validity
Not Before: Oct 2 22:18:10 2026 GMT
Not After : Oct 9 22:18:10 2026 GMT
Subject: CN=6ac02da2-7f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:c6:38:9a:ef:1d:0d:bd:ab:c8:56:c3:78:
42:85:6b:6e:38:b9:f0:d7:99:ac:5b:dd:96:3d:ba:
91:13:1f:49:01:c8:98:ba:94:7a:32:f3:86:1b:d3:
9b:ac:09:ad:59:ef:25:c9:b9:fc:4c:6e:18:f5:28:
b5:c4:1c:2f:2a:74:79:8e:8a:13:f6:72:99:57:be:
78:41:e5:26:a4:3b:4d:0b:df:ba:47:66:2e:5f:22:
d7:bc:eb:21:a8:ff:f5:1d:bd:a2:df:55:e9:f3:a6:
ee:da:9e:56:f0:4e:c2:95:9e:d0:63:f7:55:84:c9:
21:f5:b4:c2:a3:a2:3e:57:f3:ea:f1:bd:e5:42:dd:
e3:2b:00:43:9f:76:d3:ad:25:29:fa:07:a1:a0:ce:
21:6b:93:2e:b7:3b:3f:a6:13:62:92:07:f6:df:dc:
13:2b:15:de:f4:e7:aa:fd:d4:26:38:72:4f:ad:2e:
56:5a:d1:9f:d9:b5:71:e1:98:49:ff:2a:b4:94:4d:
57:55:84:df:8e:8f:e8:f7:8c:1b:c4:8a:9c:c4:aa:
80:83:18:89:b3:05:fb:5b:2b:6a:bf:70:03:59:59:
7d:7c:34:0d:57:3d:f4:3b:2c:ce:3d:88:e6:a2:73:
b3:bf:26:bb:49:5c:9b:ad:34:77:6a:a0:18:67:74:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:06:4C:41:B9:C9:A3:F9:FA:15:34:C4:00:20:0B:D8:F0:84:C5
X509v3 Authority Key Identifier:
keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:b4:15:bf:d9:b4:03:54:ea:f1:d9:c4:fc:11:f9:43:0a:
27:11:46:1d:cd:ab:d9:60:26:75:53:04:1b:3a:7a:20:39:28:
b1:78:bd:57:c3:08:bd:e4:15:ff:fa:6e:61:08:b9:7d:63:7e:
73:ec:14:e8:e8:b9:b2:f6:99:8c:05:d0:3b:07:8e:17:54:79:
5b:a9:46:19:5c:76:2e:3e:89:13:29:47:a8:53:ca:3d:85:7b:
5a:9b:6d:20:4e:4a:b6:d8:cc:30:6b:b3:18:4a:82:78:32:52:
8e:d1:37:1a:60:27:4e:d2:d6:9f:c3:74:92:7a:ae:f1:96:f9:
71:99:b2:02:72:b1:58:4f:c2:45:23:3d:8e:3a:79:77:f6:17:
1b:8a:2b:4d:cf:f9:0f:47:90:7c:6c:9c:0a:cb:f6:d3:4a:05:
7e:ef:12:3c:ed:07:9e:46:c7:c2:73:9f:10:e9:da:3d:98:c5:
88:77:f3:bd:7f:3f:02:51:8f:10:c5:13:5b:04:10:61:63:78:
df:93:88:b4:84:91:4c:91:30:dc:83:56:bb:47:4b:33:20:d6:
cf:09:6c:06:4b:ab:5b:1d:d3:67:08:08:cf:26:c1:3e:08:0f:
a0:75:21:9e:83:bf:6a:72:e9:ad:40:b8:d7:9c:2e:e1:3a:32:
7d:0f:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:27 2026 by rpki-client