
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: WMwV5FejKTTRHNy/X93QVc2kKjLBP3rp/yNiRfCtADw=
Subject key identifier: F8:23:43:95:76:6A:56:1B:B8:C6:B2:F1:F0:6C:0D:13:EE:DE:09:6D
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 19C3
Signing time: Wed 22 Jul 2026 16:29:48 +0000
Manifest this update: Wed 22 Jul 2026 16:29:48 +0000
Manifest next update: Wed 29 Jul 2026 16:29:48 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: bFzLcRDUltUD7g6n8m8dAmzPAHxsnP1qNcwBSn7FE2s=)
2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
3: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
4: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6662 (0x1a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Jul 22 16:29:48 2026 GMT
Not After : Jul 29 16:29:48 2026 GMT
Subject: CN=6a60effc-f2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:0b:0d:9e:5f:e3:46:f0:08:1f:30:d1:c1:
6b:89:d0:31:5f:70:61:89:99:b0:74:34:a4:0e:29:
9e:47:40:9f:00:c4:25:30:11:7e:96:f0:16:b8:8c:
c1:d0:61:a9:aa:38:6a:56:68:3d:27:3f:a5:c2:d8:
a1:37:6c:f3:9a:fc:a9:3c:7f:e4:89:e5:b6:9c:6e:
f6:e4:60:61:f8:24:4d:15:06:98:e9:d4:4c:d0:e5:
9e:31:70:33:04:03:48:e6:90:63:00:7a:45:74:2b:
8c:53:89:09:b9:23:81:f9:bb:5c:b3:cc:a6:78:e1:
04:84:bd:99:c1:aa:1c:72:66:4f:38:33:7c:54:ea:
9d:8e:31:93:87:0a:08:32:dc:79:d2:b0:e7:4b:2b:
08:4c:c9:59:fd:41:98:17:54:25:3e:ba:c3:75:01:
32:14:cd:bf:f4:f6:3f:89:8a:06:46:cf:71:77:21:
bb:7e:8e:4d:3b:79:19:af:e2:19:dd:fe:2d:a1:22:
84:3b:52:16:c3:71:da:38:f6:30:16:5b:51:6d:c5:
8c:c3:f0:e8:60:64:23:b1:81:d4:91:25:76:d7:e1:
11:95:0f:e9:a4:e0:7c:a9:ef:71:45:f7:31:37:da:
fd:1e:75:d0:4a:a9:dd:e8:4e:21:ed:8e:6b:47:15:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:43:95:76:6A:56:1B:B8:C6:B2:F1:F0:6C:0D:13:EE:DE:09:6D
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5e:e2:b7:cf:0e:54:da:e1:02:ae:7b:34:cf:ea:dc:70:d9:
c9:75:ba:30:ce:0e:45:72:fc:36:a9:34:73:1f:4c:93:7d:1f:
4d:da:f5:5c:af:4b:65:31:cc:4b:7f:d7:9a:6e:15:00:47:27:
be:b5:2f:72:24:f2:8b:58:14:50:5a:ab:c9:86:9a:ec:5e:8f:
15:60:5d:15:23:f0:33:3a:4e:c1:a5:0f:b0:6e:bd:48:5c:38:
52:fe:2f:51:b7:64:20:e1:d6:08:a8:a0:9f:af:3e:e0:f9:ae:
67:8c:ac:4a:f7:e5:dc:12:d1:f9:fd:94:4a:5e:20:f6:2b:20:
26:b5:66:43:d3:7a:1e:33:3d:c1:73:f0:5a:11:1a:d8:4e:95:
c3:5a:13:4d:99:52:93:4b:95:11:cb:5d:4f:4e:ed:31:e5:80:
f0:77:65:3f:03:a9:de:9a:e7:68:61:15:4c:68:77:ed:0f:db:
63:de:c1:1f:f0:e2:ec:ac:81:bf:da:8c:0b:bb:44:87:d4:e3:
0d:91:b8:60:db:34:96:6a:41:0c:be:28:df:a6:bc:7b:71:12:
11:3c:b5:57:62:3f:ea:59:d5:a8:4e:8d:99:71:93:0b:c2:bc:
da:2f:38:17:00:18:ce:35:5a:9b:62:d4:a2:50:80:32:85:cc:
c4:e6:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:09 2026 by rpki-client