
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier: MonAZ3OYWZ1SgqPiZyGoWJoN8nVret8e48bm9DY8ApA=
Subject key identifier: B3:CE:8F:C7:69:40:5C:FB:C3:72:94:64:B7:7C:EE:E7:EF:0A:66:6F
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 163B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number: 1628
Signing time: Fri 02 Oct 2026 16:50:49 +0000
Manifest this update: Fri 02 Oct 2026 16:50:48 +0000
Manifest next update: Fri 09 Oct 2026 16:50:48 +0000
Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: zcDacPlqkVU7ATqHTf7NTEooYH3vYXOTPtJCmAbtneY=)
2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: M1ZUrzl+jKIMD6ElMH+tXNtg61CpYpjge7sFvol2TsM=)
3: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: R5ZyeSm5g+p8lvebB9/qu+mRhPpgoRy54VDsJgvPDUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5691 (0x163b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: Oct 2 16:50:48 2026 GMT
Not After : Oct 9 16:50:48 2026 GMT
Subject: CN=6abfe0e9-483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:91:2a:61:3f:d8:22:cb:35:69:7e:87:fd:
48:5b:47:61:f3:ba:8d:40:a6:12:64:19:dd:b7:e3:
7b:69:e1:f9:86:8e:2b:13:c1:2d:b7:cb:83:a5:39:
ae:0e:3e:ac:7b:75:03:30:b4:fc:3b:f7:41:e4:4f:
b1:77:6f:0c:75:17:57:b3:13:a7:dc:f1:0f:62:44:
14:72:1e:60:5d:6a:d8:79:41:ee:f7:87:21:05:6d:
e7:92:4b:ea:ff:57:ca:1f:2c:83:ba:70:d5:6b:ec:
15:15:79:61:14:4d:6c:48:e6:9d:e7:56:db:f4:27:
76:b8:fc:bc:7c:e7:a4:db:22:ae:58:53:86:08:9a:
eb:b9:fa:b1:e0:f3:ee:71:a6:ed:9e:2f:66:f7:7a:
48:42:ff:e4:22:44:78:7d:a9:5a:7e:d0:c4:fa:e6:
62:dc:93:a8:02:3a:86:f1:41:22:55:09:67:6c:73:
3b:b2:7b:8f:d0:e9:b6:70:92:a5:06:84:13:72:3b:
c3:d4:50:96:bd:89:d9:02:a4:98:82:3d:23:bc:51:
48:ca:3d:e2:af:2a:c9:e0:ad:eb:59:ef:13:4d:3c:
e6:3f:51:7e:33:45:e3:9b:26:37:4f:72:f3:95:02:
f1:46:8f:e0:de:cb:73:62:eb:f9:16:80:2c:5c:93:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:8F:C7:69:40:5C:FB:C3:72:94:64:B7:7C:EE:E7:EF:0A:66:6F
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c3:af:77:17:be:ec:02:c3:c7:46:39:b5:a9:41:16:a5:07:
8a:ae:76:34:a6:8b:06:bc:39:e9:fa:76:81:c4:4a:8c:f8:58:
7a:2f:db:f6:39:73:29:34:99:1e:c5:8a:18:7c:e9:71:b9:a8:
13:48:10:cb:36:af:71:a2:8d:0b:91:5d:a4:d1:56:1d:3e:19:
f4:5e:5b:9b:58:9e:e2:cd:a3:24:19:34:31:f8:e2:cb:25:0a:
f6:32:5e:3b:f9:35:77:5b:e7:b5:c7:52:e2:24:99:3e:1d:a6:
a1:1b:57:5e:97:36:b8:5e:06:90:b7:14:aa:88:33:d5:a4:f7:
f8:1a:f8:45:73:12:1f:6f:2a:30:19:fc:fc:12:a3:1e:1a:ec:
aa:50:ea:b5:fe:14:7b:5c:bd:58:ca:39:63:6c:f9:15:d3:9f:
19:33:d8:f0:ab:67:da:fc:d4:09:d0:c1:9c:d9:6a:ed:1f:9d:
a2:09:00:7f:54:1d:94:68:aa:78:4f:31:bc:da:65:1b:07:4b:
84:c6:ff:1b:9e:88:7f:35:22:a1:08:b1:14:b3:19:e4:c1:8d:
23:6a:00:de:fd:0c:22:1b:0e:fc:c2:51:c1:51:6b:47:04:5a:
a2:a1:97:dd:47:35:80:ba:fa:d0:37:09:83:f6:60:65:55:f7:
98:70:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:53:46 2026 by rpki-client