
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: nYaS9NMUzfAxXskNIH+5f11xStT/n4Av7eSe/llAeIE=
Subject key identifier: 52:26:99:EF:32:CE:F9:FB:C0:96:C9:D2:CD:0D:DA:E9:FB:AC:B2:C8
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 046C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 0431
Signing time: Thu 23 Jul 2026 01:14:46 +0000
Manifest this update: Thu 23 Jul 2026 01:14:45 +0000
Manifest next update: Thu 30 Jul 2026 01:14:45 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: IovV2oVEBJwGfXVtCZhSVQl5zytsbY0u/+FkpELDDCE=)
2: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: +41red2tJMPOB/jumA+A/4ePkbLyzmti0kymWLM8jq8=)
3: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: ZyJ9HBX0yGUnqABmPbxMrxF/SJbJK2wyjKSRKaAc5uc=)
4: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: YnCZAx6Vfk4uiVS1odGK66l07BTuJZ1PvvCIcb6IGxU=)
5: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: HFuAlz1pB2WhoWwjkVWqpjZASIHDAofBkXq+bJlRjXo=)
6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: DRwmAzweL4Ak2BD5SjTPzNdg10RjC2Co8/02Zwfk4E8=)
7: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: xrhJ6oOtjqtoN4oZ8R45zvFsOJEMMHzVAd11yOFYLrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Jul 23 01:14:45 2026 GMT
Not After : Jul 30 01:14:45 2026 GMT
Subject: CN=6a616b05-1179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:2f:de:83:d6:82:72:cc:ca:40:46:19:dc:
fa:26:75:12:2c:0c:28:38:af:5e:74:19:00:26:46:
3a:6d:56:11:82:24:33:ce:f1:e6:39:e6:88:9f:2e:
6a:1e:b4:b9:32:42:b3:6e:19:10:dc:1f:a8:ad:07:
17:b7:7a:5f:68:f6:65:70:0a:2e:6c:34:ec:21:c9:
30:63:06:54:ab:a7:b9:0d:df:fa:d9:05:a3:70:c4:
8f:da:bf:76:46:17:c0:f1:e3:c9:c4:c6:0f:a3:1b:
be:62:b8:72:00:9e:6c:19:2d:4e:27:39:7b:6a:5d:
44:f2:cc:5e:3b:f6:ee:98:7a:48:5b:8e:ef:94:31:
e5:43:87:9b:eb:85:84:96:ed:76:4d:b4:2b:0b:ae:
72:13:35:0e:50:57:86:8b:d9:9e:d2:0f:91:3e:98:
3f:50:d6:49:6e:dd:c4:fe:a5:ec:94:75:18:c4:1d:
c9:bb:0b:de:50:dd:8b:3a:4d:f7:2b:e1:2e:4c:54:
65:15:7f:d2:bf:67:47:b2:8b:f5:bd:f0:07:b0:0d:
1c:34:01:6a:c1:e9:0b:1c:15:4f:c6:8f:5e:0f:bd:
4f:13:a8:76:fc:ea:5d:41:48:59:47:de:0f:8a:d4:
92:bf:da:ec:9a:6c:3f:17:31:1b:51:2b:e3:e8:ee:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:26:99:EF:32:CE:F9:FB:C0:96:C9:D2:CD:0D:DA:E9:FB:AC:B2:C8
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:16:0e:bb:7a:77:8d:75:a1:d6:25:13:48:de:01:b7:b6:05:
b8:b3:d3:9e:9f:32:14:1c:49:2f:8a:3d:20:da:f0:d2:7d:a5:
46:cd:53:98:d9:3e:00:bd:c3:2c:21:43:c4:d2:43:bf:91:52:
9c:0f:4a:0d:06:47:49:0c:cf:d3:77:17:15:7d:7c:70:d3:57:
52:71:ea:19:d8:0a:cb:70:1c:0d:9e:c8:86:85:06:89:60:48:
6b:28:f9:48:fa:fd:f3:40:a7:f1:92:d1:ea:1b:6a:48:b0:71:
37:b3:9e:17:0e:a3:62:fd:ba:bc:6a:ba:07:90:35:0f:14:3a:
16:d2:c4:28:5a:b4:c1:c6:42:0d:a3:cb:dc:fa:2c:10:f9:a7:
b0:dd:15:4e:9d:0c:fc:b3:2b:92:0f:08:b3:92:48:ce:a7:93:
a6:20:05:2b:81:c8:11:9b:02:a5:05:88:3e:92:bb:a7:6a:5b:
3e:a1:e3:24:af:1f:2b:6a:be:ff:20:6d:fd:b7:3a:61:5a:bf:
34:91:26:73:94:84:dd:5d:8a:e1:1b:3a:74:ee:3a:4b:5a:9d:
77:c9:1c:de:36:73:36:59:16:d2:81:8f:f6:63:3e:22:21:47:
35:c1:f6:0e:39:d9:fc:31:f2:be:02:21:17:94:0a:2f:a2:bf:
9e:26:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:09:20 2026 by rpki-client