
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier: 1Lzb/WD697jTlT/U3q7NLtpYXWeS4tArDnNNHZGzGfs=
Subject key identifier: 29:5A:20:E7:5E:C9:82:48:4B:6A:78:54:9A:B1:38:39:B9:33:6C:C7
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number: 094E
Signing time: Tue 22 Sep 2026 19:56:37 +0000
Manifest this update: Tue 22 Sep 2026 19:56:36 +0000
Manifest next update: Tue 29 Sep 2026 19:56:36 +0000
Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: pCLBeASqP7V7M1g58J7ELsCqf17kQgCaEQjxveb/SzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Validity
Not Before: Sep 22 19:56:36 2026 GMT
Not After : Sep 29 19:56:36 2026 GMT
Subject: CN=6ab2dd75-0151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:d3:f7:a3:9f:e5:ce:57:8c:3c:fc:e8:92:
05:1b:e7:ad:66:b5:8a:3d:f1:21:54:2d:b4:a5:a2:
d1:ce:02:c7:3d:a8:d2:1a:16:87:c3:67:3f:43:3a:
51:b4:1a:21:b2:42:2b:59:bf:2b:14:12:a4:2b:88:
94:b1:f3:7a:8b:08:9f:4f:3a:22:49:91:9c:89:02:
dc:b4:93:b9:f1:4b:79:e6:01:bb:54:56:06:88:3e:
ba:7c:d1:72:ad:9d:f0:bb:d1:fe:ca:d8:51:43:23:
cc:b1:3f:5d:7d:53:d9:18:af:b8:26:15:b3:49:76:
3e:4b:75:24:d0:74:a0:52:51:fd:f9:a9:7d:08:ad:
ff:8b:55:54:22:f6:0d:b6:50:5a:59:d2:8a:f2:82:
87:b0:8c:54:5b:60:5e:a4:2b:eb:cf:f9:74:3c:79:
bc:82:1b:00:0e:87:3c:e2:d1:e5:4d:88:eb:3b:a9:
f7:68:cb:bc:76:b0:a5:ae:b9:de:5e:a1:ef:ad:bb:
26:3d:de:18:1b:67:f6:f3:79:d8:dc:32:01:c0:7c:
6f:eb:ac:8a:65:64:89:f5:cc:16:e2:f1:0b:36:40:
be:af:c3:d3:b8:c8:11:c8:c1:c0:ba:da:0f:22:d1:
96:ee:53:dd:3a:cf:1f:fe:58:47:9e:8e:02:71:c2:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:20:E7:5E:C9:82:48:4B:6A:78:54:9A:B1:38:39:B9:33:6C:C7
X509v3 Authority Key Identifier:
keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a1:a2:11:13:ec:1c:73:c8:59:30:15:9c:64:d0:6f:c9:6f:
cf:7b:33:c0:81:54:95:ce:23:47:ca:96:e4:a0:50:30:e1:64:
0c:09:ed:fb:9c:ff:5d:38:c9:9c:65:ea:c3:a6:78:87:88:ae:
ae:5d:88:4a:cf:a1:46:08:51:50:39:5d:8f:aa:95:26:56:5d:
f1:45:60:df:01:fb:8d:8c:f5:54:c5:c2:f1:6c:55:6d:e5:b5:
9f:dc:31:47:c4:f2:72:76:fd:f6:29:c6:b1:f0:fc:d9:ae:bb:
2d:d0:3d:31:b1:69:9a:4d:a9:bb:30:80:08:58:93:59:b3:b3:
56:09:47:a9:80:9c:ec:35:be:53:11:fb:d0:55:3f:56:53:ce:
04:f9:6e:4b:44:a0:c9:1a:54:6c:5d:f4:59:9b:f6:5b:0f:f9:
9b:f2:20:20:bc:4e:fc:aa:ea:71:2d:a0:f2:96:d5:2e:ae:ec:
a6:86:d7:0c:f9:eb:17:fe:e7:ce:de:a5:fc:ec:58:af:19:94:
3a:a4:ff:ba:40:9f:a8:77:22:65:c4:3b:31:28:f6:e2:51:df:
10:95:f4:22:32:f1:4e:2d:e3:1f:b4:c9:3e:ae:67:d3:04:ec:
4f:72:e8:a2:60:5a:76:b9:0b:1f:76:58:96:68:dc:4e:b1:80:
4b:5d:9c:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5
RURDNjZGQkEwHhcNMjYwOTIyMTk1NjM2WhcNMjYwOTI5MTk1NjM2WjAYMRYwFAYD
VQQDEw02YWIyZGQ3NS0wMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAXT96Of5c5XjDz86JIFG+etZrWKPfEhVC20paLRzgLHPajSGhaHw2c/QzpR
tBohskIrWb8rFBKkK4iUsfN6iwifTzoiSZGciQLctJO58Ut55gG7VFYGiD66fNFy
rZ3wu9H+ythRQyPMsT9dfVPZGK+4JhWzSXY+S3Uk0HSgUlH9+al9CK3/i1VUIvYN
tlBaWdKK8oKHsIxUW2BepCvrz/l0PHm8ghsADoc84tHlTYjrO6n3aMu8drClrrne
XqHvrbsmPd4YG2f283nY3DIBwHxv66yKZWSJ9cwW4vELNkC+r8PTuMgRyMHAutoP
ItGW7lPdOs8f/lhHno4CccK/hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClaIOde
yYJIS2p4VJqxODm5M2zHMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3
QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di
N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw
N1c3VGc1QTU5QjZlM0diN28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeqGiERPsHHPIWTAVnGTQb8lvz3szwIFUlc4jR8qW5KBQMOFkDAnt+5z/XTjJ
nGXqw6Z4h4iurl2ISs+hRghRUDldj6qVJlZd8UVg3wH7jYz1VMXC8WxVbeW1n9wx
R8Tycnb99inGsfD82a67LdA9MbFpmk2puzCACFiTWbOzVglHqYCc7DW+UxH70FU/
VlPOBPluS0SgyRpUbF30WZv2Ww/5m/IgILxO/KrqcS2g8pbVLq7spobXDPnrF/7n
zt6l/OxYrxmUOqT/ukCfqHciZcQ7MSj24lHfEJX0IjLxTi3jH7TJPq5n0wTsT3Lo
omBadrkLH3ZYlmjcTrGAS12cfg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:34:39 2026 by rpki-client