
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: +tMu8WWTS1cTTc9Yu8T5wSG85QVeY2pKX/ymM4Mbs/w=
Subject key identifier: D3:A9:10:17:09:AE:2C:C0:73:D0:08:6B:7E:41:37:71:74:2D:ED:5E
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: 012E
Signing time: Wed 23 Sep 2026 05:25:50 +0000
Manifest this update: Wed 23 Sep 2026 05:25:49 +0000
Manifest next update: Wed 30 Sep 2026 05:25:49 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: VpIwUYWlkxinAKqonKsmLsSn21DDDelsveKH1yoDRs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Sep 23 05:25:49 2026 GMT
Not After : Sep 30 05:25:49 2026 GMT
Subject: CN=6ab362dd-2050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:b3:ef:d5:9b:7c:ae:de:14:d2:8b:b7:a2:
7f:5b:ff:12:3d:e7:76:e4:81:52:72:20:39:03:2e:
ae:72:ed:06:62:f0:d0:6e:2f:5f:01:f2:12:a2:33:
3f:29:76:97:43:ea:cf:18:5f:80:cc:db:50:bf:96:
8c:6d:3c:c4:43:b5:32:09:74:0c:dd:c2:17:dd:e0:
c2:09:9d:04:27:83:29:af:39:0f:ea:8e:c3:8f:1f:
3f:1e:5f:6f:0e:d9:e8:fc:70:14:7a:66:97:73:2a:
0d:b4:6c:02:4b:1d:25:bc:31:98:f9:2f:4d:7d:2d:
5a:8c:a8:99:e6:e7:38:fc:3f:e2:27:84:38:8a:9b:
58:78:ec:3d:9f:4e:6d:ea:16:b8:97:39:74:b2:55:
60:54:44:38:5e:5f:d0:79:c6:bc:e0:b2:f4:00:61:
d7:a6:b5:4b:65:d6:05:2d:ef:20:e5:5e:64:5d:84:
15:ce:59:34:ef:ce:66:39:7c:fa:af:d4:f5:b6:ff:
57:7b:2c:5a:bb:d7:98:99:78:d6:6b:10:cb:2c:23:
a2:c0:7c:08:35:4c:20:52:ee:29:f3:d2:0c:99:58:
66:4f:14:d7:96:87:93:aa:ef:bc:bb:6a:3c:49:77:
9f:b4:5a:90:8b:57:35:40:6d:89:80:d9:c9:f8:e9:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:10:17:09:AE:2C:C0:73:D0:08:6B:7E:41:37:71:74:2D:ED:5E
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d0:50:1c:85:20:86:e8:26:2c:37:a6:be:e1:6b:b9:94:09:
e9:9b:de:bf:15:3c:1d:31:2c:76:fa:ce:7c:c9:45:51:e6:56:
86:8a:90:df:70:69:bb:7a:2f:7a:e3:23:be:13:15:1a:26:a6:
8d:55:5e:94:f3:d2:73:14:c3:72:06:78:7f:b4:15:ac:1d:79:
c0:83:29:0a:32:e3:0e:7d:e8:1f:0b:9b:64:13:b6:54:1c:a1:
72:7e:2f:ac:99:e0:a6:0b:93:7d:c9:9c:81:30:27:54:46:30:
8f:c7:f5:ac:39:28:c9:b0:9e:96:c3:1f:77:ca:de:7a:5b:cd:
26:04:cb:9a:f0:12:a4:10:aa:5e:60:a7:e1:e2:d3:df:b2:6a:
b4:87:c1:5a:a0:4d:44:51:c0:a1:76:49:53:b2:fe:38:ac:04:
92:20:57:dd:da:73:21:5d:d4:da:ca:d2:1e:5b:1b:78:ff:ec:
83:39:0d:66:13:86:36:2c:68:cc:28:e5:98:ab:1f:78:77:d4:
81:18:e1:40:6f:b1:da:53:ff:04:34:1b:e3:7a:fc:04:29:fc:
4a:d3:24:4a:90:c6:3a:06:65:c6:50:b2:22:89:63:76:42:f1:
b6:a6:a8:a0:4c:c4:88:f1:f8:15:3f:c1:e5:30:e5:09:63:57:
f8:39:4b:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYxRUUxMTAvBgNVBAUTKEY2NzcxNkE3RDM3RERCMDNEQzU2RDAzQUI5MDJBNzIw
MzdFQTE5RDkwHhcNMjYwOTIzMDUyNTQ5WhcNMjYwOTMwMDUyNTQ5WjAYMRYwFAYD
VQQDEw02YWIzNjJkZC0yMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtOz79WbfK7eFNKLt6J/W/8SPed25IFSciA5Ay6ucu0GYvDQbi9fAfISojM/
KXaXQ+rPGF+AzNtQv5aMbTzEQ7UyCXQM3cIX3eDCCZ0EJ4MprzkP6o7Djx8/Hl9v
Dtno/HAUemaXcyoNtGwCSx0lvDGY+S9NfS1ajKiZ5uc4/D/iJ4Q4iptYeOw9n05t
6ha4lzl0slVgVEQ4Xl/Qeca84LL0AGHXprVLZdYFLe8g5V5kXYQVzlk0785mOXz6
r9T1tv9Xeyxau9eYmXjWaxDLLCOiwHwINUwgUu4p89IMmVhmTxTXloeTqu+8u2o8
SXeftFqQi1c1QG2JgNnJ+OnHyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOpEBcJ
rizAc9AIa35BN3F0Le1eMB8GA1UdIwQYMBaAFPZ3FqfTfdsD3FbQOrkCpyA36hnZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFFRS9GMzJDRjRFOEU3
NTExMUVGQkVEODFCMEVDNEY5QUUwMi85bmNXcDlOOTJ3UGNWdEE2dVFLbklEZnFH
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjFFRS9GMzJDRjRFOEU3NTExMUVGQkVEODFCMEVDNEY5QUUwMi85bmNXcDlOOTJ3
UGNWdEE2dVFLbklEZnFHZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFtBQHIUghugmLDemvuFruZQJ6ZvevxU8HTEsdvrOfMlFUeZWhoqQ33Bpu3ov
euMjvhMVGiamjVVelPPScxTDcgZ4f7QVrB15wIMpCjLjDn3oHwubZBO2VByhcn4v
rJngpguTfcmcgTAnVEYwj8f1rDkoybCelsMfd8reelvNJgTLmvASpBCqXmCn4eLT
37JqtIfBWqBNRFHAoXZJU7L+OKwEkiBX3dpzIV3U2srSHlsbeP/sgzkNZhOGNixo
zCjlmKsfeHfUgRjhQG+x2lP/BDQb43r8BCn8StMkSpDGOgZlxlCyIoljdkLxtqao
oEzEiPH4FT/B5TDlCWNX+DlL0g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:28:37 2026 by rpki-client