
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: 8lMrC4Eo60rUkv4fajXDcwJ+9LPS9xvFkec9mX0Cai0=
Subject key identifier: FC:B5:8F:70:BA:FC:EB:D0:0B:DE:FB:F3:42:14:9F:51:13:46:83:1E
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 04F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 04F2
Signing time: Thu 08 Oct 2026 23:51:18 +0000
Manifest this update: Thu 08 Oct 2026 23:51:18 +0000
Manifest next update: Thu 15 Oct 2026 23:51:18 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: X14W4Br27ygNtm4+0ldrlq0ORX8GRLRUonBO7Zi/Vq4=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Oct 8 23:51:18 2026 GMT
Not After : Oct 15 23:51:18 2026 GMT
Subject: CN=6ac82c76-9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:9d:33:03:e5:36:18:26:a0:9e:7a:8d:84:
7c:bb:64:ee:da:ec:35:a3:cb:02:05:f4:dc:39:37:
39:d2:c9:07:1e:14:df:35:be:37:1f:73:31:62:ed:
cd:48:cc:cb:62:38:56:2e:77:2d:10:2c:17:c4:2b:
0c:6d:90:a1:9c:bb:b1:f1:07:f1:f9:94:fa:25:49:
61:49:23:0a:8d:1a:d4:e8:55:8b:aa:19:9b:61:35:
16:d7:17:a4:13:c2:78:37:47:56:f0:bc:e1:97:b6:
8b:75:a5:64:d7:ee:d9:e7:1f:5f:2f:d8:b8:ad:49:
4a:db:26:da:a9:7f:4c:32:22:80:09:7d:9b:00:ae:
28:73:4a:66:a2:91:95:40:18:7f:a8:82:ac:23:e6:
18:b0:26:e9:01:66:78:c4:18:33:96:33:b9:84:a9:
b6:ab:ad:0e:9d:eb:e0:6a:df:66:e9:ff:fd:dc:7c:
4d:e0:7e:4b:d0:27:7c:52:5a:bf:96:aa:fd:23:27:
df:39:0d:06:88:c0:65:dc:d5:57:cf:12:e0:a2:0c:
02:d9:2d:ff:fb:16:7a:26:21:0f:70:73:9f:e5:91:
92:2f:4f:21:62:ca:4a:86:78:60:e8:f9:de:77:c3:
f7:24:00:43:7f:44:d3:51:97:21:91:aa:e8:c0:9c:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:8F:70:BA:FC:EB:D0:0B:DE:FB:F3:42:14:9F:51:13:46:83:1E
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:78:b6:cc:7f:2f:5b:65:43:b7:8b:7f:e3:ab:45:fa:41:
b1:c1:77:72:0f:29:03:1c:31:c2:61:a5:86:8c:99:42:45:1a:
c3:e4:20:e2:5b:ab:ac:00:cb:64:0b:62:46:2b:1a:f0:f6:4d:
47:ce:88:5b:c4:74:65:2c:a2:2e:96:49:fc:f9:c4:15:6d:cc:
dc:39:9e:90:5a:5e:ab:af:7f:76:ed:74:c5:0f:b3:6f:85:d6:
3c:2b:0c:fe:91:2f:b5:a0:21:4a:63:73:e0:88:b1:90:36:59:
78:f4:56:01:2f:17:c7:43:65:ca:6b:d6:1b:44:a7:a9:59:c2:
57:b7:a9:ef:bd:e3:14:b8:eb:07:fa:f5:47:6d:3a:12:f3:a6:
b3:c8:61:3c:c8:a3:68:38:62:fb:24:d7:e2:9d:fa:fd:95:08:
a7:5c:c9:0f:23:dd:69:08:f7:a9:17:a1:8f:da:70:c9:ae:d0:
9a:f3:54:ea:bb:33:11:89:b7:90:ae:3d:fe:77:b3:30:1e:9c:
20:8a:00:d8:13:c9:89:8d:25:aa:95:2b:cb:10:ea:88:44:13:
6a:76:21:19:ac:53:56:9d:6e:62:b3:da:38:ba:8a:f3:de:1b:
73:6a:20:5f:26:0f:ea:7d:0a:6c:fb:e6:e5:eb:65:d5:7a:75:
27:f2:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:46:55 2026 by rpki-client