
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier: HxJpYlU3VKm79WcfH7i3OafZJgVkqjoRKGN33e6iOAY=
Subject key identifier: 3F:0E:3D:E2:3A:AB:62:84:66:82:33:95:93:0B:14:7D:27:FF:9A:6D
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number: 018E
Signing time: Mon 05 Oct 2026 04:50:52 +0000
Manifest this update: Mon 05 Oct 2026 04:50:52 +0000
Manifest next update: Mon 12 Oct 2026 04:50:52 +0000
Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: xt2vIIrn4m89JAr5NdphxCDsgP2bK6AmpoSD0jgkeTo=)
2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Validity
Not Before: Oct 5 04:50:52 2026 GMT
Not After : Oct 12 04:50:52 2026 GMT
Subject: CN=6ac32cac-04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:5f:dd:25:dc:21:0f:00:db:a9:fb:3e:94:
73:35:41:b1:2a:5a:81:43:a0:6b:f6:2e:7c:85:61:
6c:e1:6d:85:a9:89:95:f3:64:ec:fe:cd:fb:77:5c:
26:f4:b7:5a:5f:8e:62:1e:80:46:be:8b:f5:e1:3e:
3a:0c:e5:1b:b5:e7:29:97:2e:2d:78:ab:1e:02:85:
48:c7:e9:91:d4:64:37:91:57:b5:4c:47:2a:56:cf:
a8:ef:38:0c:6f:58:4e:e7:90:7b:48:c3:d0:21:a4:
9c:c8:b0:8c:94:8a:3a:05:ea:e7:d8:4c:24:85:2c:
c4:48:89:24:c0:3e:82:9e:ab:f8:5f:75:c0:f0:8a:
28:18:2b:e4:9b:ac:5e:46:c0:8e:f0:bd:bc:5d:84:
9e:ba:b8:36:f1:aa:87:08:20:a5:40:fe:ce:21:82:
40:ed:fc:46:41:8a:36:34:42:f9:d7:25:c7:4c:28:
f1:73:37:f2:81:59:46:e1:58:74:e4:f5:0f:5f:c1:
dc:0a:fd:8b:c5:c1:7b:9e:62:92:43:5c:8f:bd:03:
53:5d:35:89:e1:7d:dd:c8:84:75:30:6f:4d:8c:38:
78:54:09:28:55:2c:f0:6b:2a:c3:1e:e1:31:b8:47:
d5:38:bd:3d:b8:5a:c9:8a:68:59:5b:3d:7a:5c:90:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:3D:E2:3A:AB:62:84:66:82:33:95:93:0B:14:7D:27:FF:9A:6D
X509v3 Authority Key Identifier:
keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:33:21:40:3a:f3:47:4b:2c:86:0f:ae:fc:b7:d8:4a:08:6a:
03:99:d1:d0:fa:4d:d5:36:23:94:e6:1b:c9:b1:37:21:c5:06:
04:61:b8:6a:13:cb:c8:9a:a8:41:21:fc:3c:43:53:27:43:77:
d7:d1:f4:75:2e:94:62:73:ff:63:38:45:3c:86:ee:6b:6d:18:
9b:89:cc:96:6b:a2:bd:d2:5a:a2:83:f6:1e:b8:3e:f7:7c:e3:
d7:38:4a:3e:f3:2c:74:17:e8:d4:c2:2f:3f:f7:c2:2a:b7:a8:
29:d1:89:3e:99:86:78:d6:cb:fa:db:91:d8:da:26:2c:08:68:
3e:25:67:bd:c2:ea:5a:9e:f6:31:df:3a:7d:54:15:ef:ee:70:
dd:14:6d:28:92:36:9e:4a:79:f7:d6:b7:18:29:47:38:69:ca:
09:11:8a:d5:bd:d8:1f:a8:97:09:88:d2:81:41:fd:63:74:e2:
8e:49:54:bf:06:43:9a:1b:d6:9b:f3:b5:24:1a:1b:e5:f4:3b:
0c:ba:e8:39:23:04:fe:b5:90:20:78:61:cf:bf:46:cd:2e:0a:
11:49:59:3c:ae:cf:2b:85:61:3a:f5:34:cc:45:6c:dc:05:f0:
7f:09:99:78:2e:dd:e7:fb:a9:54:ca:a0:9a:13:a3:dc:f7:81:
5c:51:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:35 2026 by rpki-client