
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: Ye1HvyBGJspp7lTTM0HE+1XHlELHTqnx/1ZjBcZNhNU=
Subject key identifier: 03:92:91:BD:8C:65:23:5D:DE:4B:E6:CD:C4:3C:88:21:EE:66:B8:BC
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 048C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 0451
Signing time: Tue 22 Sep 2026 23:52:45 +0000
Manifest this update: Tue 22 Sep 2026 23:52:45 +0000
Manifest next update: Tue 29 Sep 2026 23:52:45 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: RBUjoCaBRi97fIf02zUjRQ8funVgtjI/Y8xurEl0qdI=)
2: E0AE0960457811EDA501504AC4F9AE02.roa (hash: DRwmAzweL4Ak2BD5SjTPzNdg10RjC2Co8/02Zwfk4E8=)
3: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: xrhJ6oOtjqtoN4oZ8R45zvFsOJEMMHzVAd11yOFYLrQ=)
4: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: +41red2tJMPOB/jumA+A/4ePkbLyzmti0kymWLM8jq8=)
5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: YnCZAx6Vfk4uiVS1odGK66l07BTuJZ1PvvCIcb6IGxU=)
6: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: HFuAlz1pB2WhoWwjkVWqpjZASIHDAofBkXq+bJlRjXo=)
7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: ZyJ9HBX0yGUnqABmPbxMrxF/SJbJK2wyjKSRKaAc5uc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Sep 22 23:52:45 2026 GMT
Not After : Sep 29 23:52:45 2026 GMT
Subject: CN=6ab314cd-4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:26:df:58:35:60:34:8b:c6:c8:e3:26:ab:
b9:25:fb:06:a8:0f:30:0e:3b:4c:37:1a:0e:a1:aa:
1e:86:f7:4c:69:e4:7d:ae:f9:d6:3f:61:d1:f0:f7:
93:41:46:db:84:08:0d:ab:ec:dc:bb:20:f2:3e:f1:
ad:ce:f5:a4:12:de:e7:7c:b8:fd:33:5f:66:5f:e4:
ba:01:d6:3c:cb:57:27:b8:d5:4d:f1:9b:39:05:af:
44:56:80:4c:2d:57:dc:a8:52:a5:3c:fe:20:cf:4a:
08:ed:fd:50:a4:1a:eb:53:dd:69:e5:33:09:7d:33:
c2:8c:b0:00:7f:94:1f:1b:ee:1e:db:42:bd:dc:8a:
0d:7f:4d:38:27:2d:22:fc:bc:35:c2:70:70:c2:c8:
f9:a7:25:c3:44:a6:03:af:a0:38:02:c9:12:12:7e:
a8:dd:ce:f5:4f:ce:51:d3:96:42:8b:dc:45:66:b5:
7d:48:87:f9:58:85:6a:66:dc:0f:28:08:21:e9:8d:
19:46:e8:1d:97:44:93:d1:c9:e0:51:88:2c:2a:f3:
3a:2b:54:bc:fe:86:f8:63:39:f5:40:de:80:41:8e:
79:a8:c9:20:cb:a8:18:61:8c:5d:0e:31:5d:0d:c2:
d4:8a:a1:e5:97:56:75:b6:e8:fd:da:61:20:64:7d:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:91:BD:8C:65:23:5D:DE:4B:E6:CD:C4:3C:88:21:EE:66:B8:BC
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:78:50:1d:41:48:f0:ee:d8:1d:cb:e6:62:ff:0e:21:52:
84:fa:c2:3f:92:a7:73:1d:d2:cd:28:84:56:12:ad:45:4c:90:
95:50:08:23:52:ae:cd:6a:45:25:09:70:a2:5f:d9:e7:d4:f6:
3d:44:65:4d:2d:7f:67:98:ce:1b:40:b9:fa:27:3f:c1:67:84:
ab:b4:ec:87:f6:ba:a0:54:eb:fd:d6:4a:99:fb:a2:b4:86:5a:
82:a6:a4:19:f2:02:35:d1:ea:d0:90:18:78:25:32:d1:2c:9b:
cd:c0:28:49:7c:e8:14:7d:17:62:a3:fc:cc:da:db:ad:7b:a1:
06:0f:44:c8:9e:ce:dd:2b:3f:2d:37:31:78:0e:ea:7f:a7:38:
35:5a:c5:cf:40:76:d6:46:20:30:dd:d4:e4:47:8d:01:70:e2:
d7:c2:2c:37:71:82:12:f0:c3:24:c2:66:5e:0f:d4:62:f2:75:
da:d6:f0:25:10:db:a0:aa:5a:b5:83:33:36:58:79:23:01:df:
b4:08:46:31:c3:52:78:87:2f:45:22:10:7c:40:e9:46:11:6d:
ae:6d:22:48:b2:1c:27:09:bb:0d:48:c0:0f:d8:96:ec:4a:bc:
c4:56:41:cb:71:f7:78:3f:a7:2e:22:e6:1a:56:2f:16:04:cd:
52:85:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:44:44 2026 by rpki-client