
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json)
Hash identifier: z21p9lGhth+xpi+ut4ZUFJVwDK6iY8DuPxdzL1SYOVk=
Subject key identifier: 87:0F:62:14:28:7C:76:38:63:36:89:33:87:AD:23:A8:26:3D:C0:3C
Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83
Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
Manifest number: 0258
Signing time: Sun 04 Oct 2026 19:31:42 +0000
Manifest this update: Sun 04 Oct 2026 19:31:42 +0000
Manifest next update: Sun 11 Oct 2026 19:31:42 +0000
Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: fOsPfK7n1FO86lfDqIH/4T5gKjHen1ftA0sSaWrh9TE=)
2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl
rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
Validity
Not Before: Oct 4 19:31:42 2026 GMT
Not After : Oct 11 19:31:42 2026 GMT
Subject: CN=6ac2a99e-16d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:de:7d:43:cf:1c:55:23:c0:30:0e:28:3f:86:
50:93:00:87:b3:b5:98:71:b5:34:cf:25:2e:20:6f:
c9:3d:bc:1d:8c:40:78:3c:08:66:97:53:cc:8c:31:
6e:a6:a0:89:b7:c3:58:6d:4b:8c:95:b8:44:82:5b:
18:d7:81:a2:a5:5e:cb:f4:02:6c:0a:46:70:74:8a:
a2:fb:16:f6:64:86:87:d1:a4:66:b9:c0:b7:a1:9e:
7e:f3:bc:8a:cd:c0:89:e1:54:39:bc:d2:a1:f3:c1:
3a:c3:d3:97:c2:18:02:ca:ee:d4:c3:18:a8:64:32:
97:56:4e:36:f4:d7:a1:29:3a:79:c9:32:e1:f3:65:
33:1c:33:7e:76:37:06:58:3b:52:dd:3a:4c:d8:2c:
f5:23:81:2f:11:b0:aa:e3:fb:0c:99:88:ff:af:56:
b8:5e:ba:06:a5:d6:21:93:93:02:72:99:c0:4e:62:
78:55:fc:b1:ff:3e:5a:ae:7b:6c:c2:b7:9f:d8:31:
f6:e9:8b:7f:2b:a8:c7:a2:d7:80:3c:85:8f:ff:7e:
b9:d9:07:f1:7d:0b:b6:fb:a7:c0:a4:b3:2e:24:47:
5e:21:b3:17:e4:b1:1d:4c:a6:86:0a:68:e0:85:f2:
47:4d:c8:cb:b9:b3:11:3d:49:74:e8:90:05:2e:a2:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:62:14:28:7C:76:38:63:36:89:33:87:AD:23:A8:26:3D:C0:3C
X509v3 Authority Key Identifier:
keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:1c:29:13:ff:4f:3e:17:4c:fc:0e:47:aa:05:aa:ed:80:10:
09:72:56:97:62:40:25:22:d6:fe:96:7a:fa:7c:3b:84:ad:84:
4a:f8:aa:a9:ff:2d:77:22:eb:14:ab:af:ed:7e:4d:fd:f0:12:
59:db:e0:e1:d1:a4:ae:26:80:e5:c0:b7:9a:4b:5d:ad:7f:ef:
5a:38:fb:17:07:6e:d9:ce:ac:d0:8d:0e:7c:bf:a8:84:41:b6:
9f:5c:62:0f:af:bc:68:de:c5:44:b2:b7:66:35:60:6e:61:43:
d2:fd:0b:3c:0b:cc:0d:52:cc:5a:b0:28:36:b2:6e:5a:fb:b7:
62:e6:f8:1c:ed:bb:b4:cc:3c:08:97:33:19:79:08:b5:19:bb:
c1:4a:fc:73:00:e1:62:8e:5e:15:2f:73:01:e8:df:81:1b:3a:
a7:f5:5b:e8:66:e5:06:de:27:90:b7:7c:29:fd:cd:05:35:52:
c9:79:bb:f8:ae:2d:f2:10:e2:bb:22:69:fe:27:9e:70:97:5d:
3b:31:84:f8:8e:2a:23:50:15:91:e3:92:c8:87:fb:91:62:f1:
b5:66:1d:6a:9f:cc:34:d7:ca:e7:c5:8e:b4:ff:0b:5a:91:f4:
7b:8b:66:ec:bf:fb:2b:b6:68:af:c4:40:25:e1:14:bd:9c:d0:
81:59:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:17:06 2026 by rpki-client