
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json)
Hash identifier: fyd8ZBpEvcR8D98Kgqg/VV0zr0GzXv0mdrL7o2OdT38=
Subject key identifier: 8D:BB:52:10:0A:1E:F7:16:E1:E5:E4:EF:71:EB:EE:DE:D1:A3:AD:1D
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
Manifest number: 03CC
Signing time: Sun 05 Apr 2026 00:24:52 +0000
Manifest this update: Sun 05 Apr 2026 00:24:51 +0000
Manifest next update: Sun 12 Apr 2026 00:24:51 +0000
Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: Ze8PlAnqj+siR0Q0iZ/ki5GlJU1ZUa/+6OdKc8+cvrE=)
2: 685F0CBA031211F1BBBCC8A9163D8C67.roa (hash: NxlgbUimOupPTjcXRwh01KDTfYdr+Bp3csROuFT6/PM=)
3: 3A904D64210111F181AE0DC81F3D8C67.roa (hash: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Apr 5 00:24:51 2026 GMT
Not After : Apr 12 00:24:51 2026 GMT
Subject: CN=69d1abd4-cfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:28:04:b6:71:d0:95:18:41:bb:a7:e1:6c:
5f:66:3f:9a:ab:2c:ad:72:f6:03:bf:16:07:f1:9a:
77:55:8a:64:b7:da:7a:36:6c:ea:7c:28:1d:47:c7:
91:54:e1:8a:f5:f6:38:e8:88:e5:c0:94:d6:0b:f1:
ea:55:1b:c3:a7:20:e9:1c:d8:ab:9e:00:3d:24:f5:
98:2e:65:ce:46:0d:93:cb:f8:77:12:33:b4:99:cb:
09:d6:f1:4a:0f:e2:3a:9f:82:17:6d:16:93:1d:25:
d9:52:2d:6a:04:a6:8b:ad:3b:33:3c:27:da:68:90:
5d:e5:9e:a8:b3:5b:1f:b3:28:bc:f5:65:1b:75:f7:
4b:a6:a4:05:0a:45:7e:51:31:35:21:62:49:f7:68:
33:8c:34:d8:68:6c:0f:c2:d6:fa:ee:87:88:91:9a:
83:72:52:f0:a4:e6:b8:a7:7b:b1:10:be:44:bf:98:
db:66:f0:4e:d5:17:3c:6b:e1:cc:5f:65:94:51:77:
d5:e8:4a:8f:97:a2:5b:7d:2f:39:d7:c2:d4:7a:b1:
73:05:a0:bd:34:e2:3c:14:74:62:02:7d:13:07:2c:
5a:b8:3e:1e:a7:99:08:08:a3:f1:67:8b:b5:82:07:
5b:e0:94:7d:13:8a:39:33:ea:ff:ce:dd:04:ad:c5:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:52:10:0A:1E:F7:16:E1:E5:E4:EF:71:EB:EE:DE:D1:A3:AD:1D
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:d3:5b:77:3a:25:b6:69:1a:f3:55:e4:80:66:28:8b:6b:
47:4c:bc:e8:60:e8:cc:a9:02:61:00:8a:41:55:bd:e3:12:1d:
53:7d:ac:8f:a9:e2:74:57:bd:8a:63:1a:12:ff:7d:11:8f:6f:
b2:16:e2:c2:bd:c9:c8:d2:49:00:a1:af:18:0b:e2:94:2f:42:
48:45:66:7c:95:5b:53:ab:6b:1c:0c:5e:51:b9:c7:94:83:02:
a0:fe:a3:fd:43:41:5f:b3:28:6a:10:e5:e0:f5:53:4f:42:d5:
6c:a8:fb:99:d8:2e:09:83:49:89:cd:0f:83:5c:c9:11:85:a1:
98:68:b0:4d:b6:21:eb:44:fa:e6:f7:86:b7:b3:7e:83:55:82:
2b:60:a5:26:c1:d0:9a:d4:33:61:a5:13:2b:dc:da:77:36:7a:
3e:14:b1:a3:01:d5:cf:1e:4a:57:63:f8:77:d8:69:5d:d2:cb:
cf:ed:5e:d3:9a:7b:6a:14:91:37:e3:0f:20:32:c9:30:b8:05:
b1:45:51:ab:e5:8b:f1:46:2c:22:eb:4f:8b:6c:28:c6:3f:08:
b7:f0:82:b1:af:ec:ac:45:44:c6:5e:7c:6e:a0:b5:03:0a:56:
0e:b2:9d:8f:ef:43:83:e4:11:a5:57:f1:ab:e9:9c:f0:4b:b9:
3e:d7:f8:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw
NDc0QzkxQzYwHhcNMjYwNDA1MDAyNDUxWhcNMjYwNDEyMDAyNDUxWjAYMRYwFAYD
VQQDEw02OWQxYWJkNC1jZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxo0oBLZx0JUYQbun4WxfZj+aqyytcvYDvxYH8Zp3VYpkt9p6NmzqfCgdR8eR
VOGK9fY46IjlwJTWC/HqVRvDpyDpHNirngA9JPWYLmXORg2Ty/h3EjO0mcsJ1vFK
D+I6n4IXbRaTHSXZUi1qBKaLrTszPCfaaJBd5Z6os1sfsyi89WUbdfdLpqQFCkV+
UTE1IWJJ92gzjDTYaGwPwtb67oeIkZqDclLwpOa4p3uxEL5Ev5jbZvBO1Rc8a+HM
X2WUUXfV6EqPl6JbfS8518LUerFzBaC9NOI8FHRiAn0TByxauD4ep5kICKPxZ4u1
ggdb4JR9E4o5M+r/zt0ErcVs4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI27UhAK
HvcW4eXk73Hr7t7Ro60dMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND
RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t
VHhnWnU2aE0xYklFZE1rY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVHPTW3c6JbZpGvNV5IBmKItrR0y86GDozKkCYQCKQVW94xIdU32sj6nidFe9
imMaEv99EY9vshbiwr3JyNJJAKGvGAvilC9CSEVmfJVbU6trHAxeUbnHlIMCoP6j
/UNBX7MoahDl4PVTT0LVbKj7mdguCYNJic0Pg1zJEYWhmGiwTbYh60T65veGt7N+
g1WCK2ClJsHQmtQzYaUTK9zadzZ6PhSxowHVzx5KV2P4d9hpXdLLz+1e05p7ahSR
N+MPIDLJMLgFsUVRq+WL8UYsIutPi2woxj8It/CCsa/srEVExl58bqC1AwpWDrKd
j+9Dg+QRpVfxq+mc8Eu5Ptf43g==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:16 2026 by rpki-client