
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier: 0Tg9LNc403PQ36pTqXXnM5r6DPaVojRJbQTQjyu9btQ=
Subject key identifier: 98:BD:7E:51:87:18:89:C2:2B:75:9D:57:AE:7B:6E:48:94:C3:42:8D
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number: 063A
Signing time: Thu 24 Sep 2026 22:34:40 +0000
Manifest this update: Thu 24 Sep 2026 22:34:39 +0000
Manifest next update: Thu 01 Oct 2026 22:34:39 +0000
Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: lUZ/l4JZJUfT33zY1YY8fheIh+HO4yTbPHk0b2E7rRk=)
2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: bT0CPgLPKWM/kUdjakieKJEvRcvSEX5+8obnsl7sVh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Sep 24 22:34:39 2026 GMT
Not After : Oct 1 22:34:39 2026 GMT
Subject: CN=6ab5a580-1e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:e3:36:fc:91:3a:ed:a2:5b:78:32:50:df:
9a:c4:58:67:62:41:ab:75:ae:5e:40:d4:3b:e8:4a:
66:25:6e:aa:2c:6e:86:a5:63:b5:73:7d:1e:17:a9:
8f:f9:6f:40:16:81:e9:d8:ee:7d:01:19:9d:7d:b3:
f6:2a:cf:77:1f:1e:7e:0f:a6:52:44:44:eb:5a:69:
eb:b7:a1:bf:ed:e5:89:63:10:04:b6:d5:7a:a0:45:
f0:42:7e:d8:db:46:56:f8:be:25:0c:04:97:70:97:
f2:3c:29:61:5b:a7:e2:fe:77:30:45:2b:54:34:83:
8c:5a:8e:62:85:f5:9d:00:5c:23:a0:37:0f:e2:52:
a1:74:20:62:9e:f0:1e:fa:f6:1f:68:95:78:72:56:
23:6a:a6:1f:81:b2:70:d9:65:e3:26:b3:f6:46:d2:
79:05:6d:77:28:36:74:60:5c:9d:38:c4:98:b5:f8:
8f:e1:31:71:2b:c6:69:14:24:0b:27:0e:83:b2:95:
61:f5:58:12:6f:c7:0b:52:f3:e7:85:f8:0c:fe:21:
86:72:01:74:6f:35:4d:ad:2b:4f:98:f3:fd:65:a6:
aa:a7:50:2d:ad:45:2a:04:4a:43:3a:f2:72:c0:f1:
54:ec:b1:e2:a2:d7:4c:68:0c:34:d9:7c:6c:f4:94:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:7E:51:87:18:89:C2:2B:75:9D:57:AE:7B:6E:48:94:C3:42:8D
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:96:98:65:03:45:e7:37:27:97:e7:c1:c5:b9:4e:0e:bc:1e:
1e:7e:a5:73:05:cc:33:dc:3c:2f:87:ce:d3:11:49:98:be:8e:
88:9c:c7:d5:95:bd:c9:ab:ae:cb:ec:26:46:17:7e:c6:0c:36:
4a:c7:e6:3a:af:2b:39:2f:09:7d:f0:1a:e8:95:b7:93:8d:7e:
d9:08:37:89:e0:e9:72:11:fd:6c:8b:b1:db:78:ec:47:65:b7:
6a:f8:e1:9e:b3:ec:71:13:47:0c:72:38:d5:96:55:cd:8f:c1:
06:31:5a:51:02:1a:6c:cb:4a:29:d3:cf:1b:3a:de:85:dc:41:
aa:24:70:69:61:6c:a4:6d:8e:12:24:42:40:2e:4a:80:0f:69:
4f:31:6c:b9:c1:ab:56:43:68:f7:7c:f1:47:89:f8:65:1b:a7:
37:db:d3:0d:03:d3:60:20:2e:6e:e2:e9:8a:a4:d8:f6:a0:18:
7a:4a:97:43:cb:83:3d:21:1f:bf:c0:64:7d:88:27:c2:a2:ff:
7d:ef:ef:89:bf:28:75:57:c1:bb:08:bd:9a:4e:fa:de:ad:d7:
87:43:1f:c2:a6:07:26:66:bc:96:b1:fe:c8:cf:b1:49:63:c2:
00:7c:d3:be:1c:98:17:44:34:6f:2b:7c:50:1f:98:62:e2:93:
26:73:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:32:22 2026 by rpki-client