
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json)
Hash identifier: Xk7D2s0i2ewLpLgqZwruYuEcucfTFgGOXzjwakoUBHg=
Subject key identifier: EC:AC:4F:B0:3E:66:62:28:27:5B:BA:77:8A:C5:F6:97:B7:16:40:28
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial: 0ECF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
Manifest number: 0EC6
Signing time: Tue 22 Sep 2026 17:35:28 +0000
Manifest this update: Tue 22 Sep 2026 17:35:27 +0000
Manifest next update: Tue 29 Sep 2026 17:35:27 +0000
Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: SSg4xUL/QMnGBOjL3adcucQ4A8XLg2tx1v66UM9BEms=)
2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: LM+95GqjtsyvqLmUf+wU2Z1LJHVrYnuCnNyUrFH0YlA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Validity
Not Before: Sep 22 17:35:27 2026 GMT
Not After : Sep 29 17:35:27 2026 GMT
Subject: CN=6ab2bc5f-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:2c:e9:e7:5c:e6:46:92:f6:e6:8f:e6:49:
a1:d9:80:87:39:d3:d7:77:39:7f:dd:5c:38:4a:73:
d1:7b:40:87:b2:5c:fc:d0:eb:06:bc:30:42:ca:ac:
94:29:b4:33:ce:c3:95:42:d2:90:22:0a:7c:4a:71:
4f:39:ce:0e:f3:c9:73:20:af:b6:46:71:ef:d8:1e:
d2:d1:01:b4:e8:46:0c:58:14:80:2e:a6:6e:7e:fa:
a7:df:fe:01:da:55:a9:03:47:b5:b2:c9:51:17:1c:
7a:1f:56:e2:85:dc:a1:a2:f1:af:f7:66:9a:dc:0a:
e6:c7:de:03:6a:8f:7d:0b:e3:35:d5:39:1f:7c:76:
a3:c9:76:10:27:53:61:50:63:29:94:c1:04:9a:3d:
b6:19:f5:46:96:a1:e7:c0:86:23:43:07:3f:9c:c7:
6f:2b:0f:b1:9e:7b:1b:06:b8:65:0e:4d:3b:ad:23:
31:46:04:0e:22:b5:64:19:05:a5:0b:12:9b:c1:36:
90:0c:42:76:4d:4e:77:c2:90:d2:7f:12:c2:27:5a:
91:ff:01:39:a0:55:53:d1:c9:d3:62:b4:9b:d4:86:
f5:51:6b:a4:8b:b7:f2:82:c9:89:e6:b4:ef:1b:eb:
dd:4a:a9:b9:17:cc:b9:16:32:8d:77:65:b7:8c:af:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:4F:B0:3E:66:62:28:27:5B:BA:77:8A:C5:F6:97:B7:16:40:28
X509v3 Authority Key Identifier:
keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:33:8f:97:f8:0a:01:95:10:ca:ab:65:93:35:dc:7e:41:
df:e7:a9:58:bd:e6:34:08:79:3a:13:c8:f7:83:1a:8f:b3:88:
a5:cd:f2:f8:ba:73:b2:04:b3:b7:c9:05:71:c3:db:d6:82:2f:
c5:6a:6e:1e:85:62:66:49:b8:92:56:ce:00:08:1f:62:ef:be:
5a:b2:04:65:81:54:3b:05:0c:7a:0a:26:5e:51:86:e1:bb:9c:
75:e8:22:7e:47:68:03:f3:48:87:1f:75:7c:a6:5d:3c:c4:14:
41:bb:71:d1:44:91:8e:12:fe:32:14:e7:34:9d:ee:e8:5f:a3:
5b:55:58:82:eb:d9:7a:44:44:da:d8:5d:6a:8a:23:39:1b:cc:
72:6d:a8:4e:66:97:21:7e:29:83:74:3b:43:99:b0:87:d8:8e:
50:50:47:a9:3c:cb:4c:b7:d6:9f:5d:56:56:3d:ce:51:87:23:
e4:b3:43:89:d5:f3:1a:a0:f0:8e:73:33:35:48:2c:bf:2a:1f:
f6:2f:55:fb:88:fe:66:52:ba:e1:01:fe:ce:44:0a:e6:e8:c9:
7c:c7:06:b9:2b:ee:6b:99:74:dc:61:9a:0b:c5:7e:1c:e6:d1:
30:dd:38:dc:99:d7:0f:bc:02:57:44:61:27:c4:49:93:43:10:
1f:1e:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:27:28 2026 by rpki-client