
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier: fW3Q2ILo6jB7a3JSWIS+gl6uoEWGunk1COlcyUiraP8=
Subject key identifier: 11:6B:85:CC:0F:DE:C0:39:A8:51:F5:E7:EA:33:18:77:17:2B:46:69
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 16:32:21 +0000
Manifest this update: Fri 24 Jul 2026 16:32:20 +0000
Manifest next update: Fri 31 Jul 2026 16:32:20 +0000
Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: W0bW14f4nBEPV1n1HBLQRFsNEAsLz5aJZ6stQ+9vy5g=)
2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6663 (0x1a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Jul 24 16:32:20 2026 GMT
Not After : Jul 31 16:32:20 2026 GMT
Subject: CN=6a639395-7f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:64:fb:9f:7f:6f:6a:52:d3:e5:a8:b0:bd:5b:
3d:e0:9a:5e:1a:45:c4:33:7d:4d:5b:eb:4d:1c:fc:
03:1f:cd:5e:dc:c6:6d:f5:4f:1f:1d:d4:dc:46:47:
54:94:46:eb:ec:28:44:e2:6c:1b:47:d6:ca:46:6b:
ee:01:13:19:49:37:1e:4c:44:13:03:e5:00:c0:ac:
73:83:77:ad:51:0e:45:a2:dd:38:56:4d:2a:2d:0a:
fe:0c:54:53:cf:15:04:e2:61:fb:0f:42:e5:c6:f9:
2c:1c:68:30:77:5f:a3:de:03:02:95:f3:ea:89:32:
91:53:cc:12:1d:b0:5c:ee:e5:98:19:50:cf:c9:ad:
b2:c6:31:f2:eb:ab:20:2d:33:99:29:30:34:a9:b0:
2c:7b:c2:9f:72:69:a5:ed:d5:ba:05:d3:9a:f3:0f:
72:b4:d9:48:0d:28:15:94:9b:22:c7:e5:e1:c5:33:
92:ac:f7:f7:75:d0:b0:36:57:77:3d:49:01:d3:83:
6e:52:e0:96:a7:b2:8d:23:70:72:f2:3e:3e:7f:fa:
80:58:00:d6:0e:19:f8:0b:db:12:1f:93:21:b0:d0:
b4:5f:fb:b9:2f:1f:c9:58:16:c4:8e:9f:6f:0a:2c:
c1:1f:be:c6:98:cb:5d:69:2c:1a:82:3b:9b:16:9e:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:85:CC:0F:DE:C0:39:A8:51:F5:E7:EA:33:18:77:17:2B:46:69
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:a1:88:42:c7:f7:55:a8:3d:73:2e:62:53:44:38:47:30:a0:
8a:b4:2e:39:10:9a:ca:22:9a:0b:dc:11:ee:bf:6e:70:bf:a2:
46:79:35:e2:0d:60:d1:31:37:b0:a2:ce:0d:1c:37:72:86:0b:
26:0d:dd:00:a5:6b:9f:bf:5f:15:50:f4:ea:67:e6:b4:35:1a:
fc:08:cc:9b:1b:43:df:cf:22:b8:ce:34:44:2f:5b:39:1d:8a:
33:85:36:15:0b:14:53:ec:46:32:de:8a:ac:7d:ae:95:1c:f8:
b8:4e:e8:77:63:71:e4:35:71:c8:78:ac:6e:7e:e6:04:f1:38:
d7:ff:b2:8c:04:3d:89:a0:af:7e:cb:a3:bb:38:fa:4c:45:3b:
bf:71:34:e5:2d:6c:fc:80:0c:cf:ba:7c:31:18:af:d4:e2:10:
6e:1a:2c:a9:41:8d:68:52:45:cb:39:a3:a6:23:ee:b7:67:d9:
a3:a0:d1:bf:cb:09:1d:65:82:5e:57:26:c2:3d:ad:fa:b5:d5:
1a:1a:c8:2a:c7:61:ee:a6:66:1a:8f:9f:da:86:50:88:cf:9f:
a4:79:b7:11:1c:61:7c:6d:06:eb:44:7e:35:19:15:f6:c1:a1:
04:13:6e:51:77:18:e1:80:d9:ee:81:a6:46:4b:d9:37:5c:4f:
07:49:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:00 2026 by rpki-client