
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: 0AT4FpMoiBuFxq/4/7eX6Luchoa27eZB2fEHNScFyu0=
Subject key identifier: FD:5D:B9:F3:25:76:53:39:50:25:4E:5F:63:73:34:1A:5C:8E:9F:34
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: 011A
Signing time: Sat 05 Sep 2026 05:44:51 +0000
Manifest this update: Sat 05 Sep 2026 05:44:50 +0000
Manifest next update: Sat 12 Sep 2026 05:44:50 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: Dp4ZQrpdX8jg3ZujzY+GtoDA7SwX58lyGDeOqI1+How=)
2: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
3: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
4: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 05:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Sep 5 05:44:50 2026 GMT
Not After : Sep 12 05:44:50 2026 GMT
Subject: CN=6a9bac52-0bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:5d:52:85:43:29:4b:15:3f:56:a9:55:b4:
99:6f:a7:73:ae:79:17:0f:d7:16:f0:d3:3b:26:5a:
97:ed:1a:d2:bb:fa:13:99:5b:0e:60:2e:27:ec:30:
99:cc:5d:c4:49:e9:02:b8:bf:ef:76:2e:a9:16:9c:
da:5c:4a:fa:b0:78:b7:54:c3:1f:e1:78:9c:9d:7f:
df:cf:24:95:71:fb:5f:02:57:99:5d:56:ad:e5:c3:
cc:af:62:56:0c:56:dc:58:91:1c:83:4d:d5:39:18:
8a:4d:14:62:b0:6b:bf:2a:3f:0a:cd:e0:76:dd:30:
fd:fa:b1:e8:36:c4:6a:6f:29:0e:45:d9:d2:38:c9:
1a:8b:0b:b4:29:86:61:ae:13:6d:c4:41:e9:a5:19:
c5:12:37:a2:b2:5b:3f:48:70:c9:64:c0:93:d2:67:
0b:d5:da:08:83:fb:52:1a:de:ab:50:69:e5:8c:c1:
c8:5f:3e:a1:7f:82:80:d9:c7:f1:e4:d5:bb:88:17:
65:54:ae:00:db:4d:71:5d:a5:e8:83:c8:59:f9:3b:
02:67:48:70:de:08:eb:86:6c:8a:ff:a4:4c:28:df:
32:ca:c5:2e:3f:02:e1:8f:0b:50:84:d6:3c:75:b9:
6f:d6:7e:1e:6d:04:fb:35:88:cd:17:7f:5a:3f:7a:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:B9:F3:25:76:53:39:50:25:4E:5F:63:73:34:1A:5C:8E:9F:34
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:eb:9d:a2:c8:1f:52:fa:39:56:f8:09:52:97:c7:01:28:d7:
2c:ca:b3:5e:bf:95:b5:d0:48:c0:11:1d:84:93:54:8e:16:13:
3b:41:5d:3b:5c:0a:ff:5c:a2:da:b1:30:31:7e:82:2b:e0:0f:
c2:a2:c2:ca:03:60:65:5c:da:c2:36:9f:37:be:1d:14:5f:d5:
65:c7:f1:60:4b:70:44:13:14:d4:ab:19:0c:d6:53:9f:fa:27:
f9:9b:6d:8d:ec:34:06:2a:ee:3e:95:8e:b8:25:ca:f4:33:ed:
d7:4c:52:cb:e5:e8:56:84:68:8f:51:7e:83:a2:4b:6f:5c:fc:
ae:65:1b:2e:7f:f8:f6:a4:04:75:08:7f:cb:00:db:c9:44:2b:
4e:d7:9f:d0:46:27:12:c5:4f:05:ff:4d:5b:76:5c:b2:b4:b8:
54:d3:79:2c:3f:47:18:13:8c:e7:0c:97:94:9c:e1:8b:d2:dc:
a2:b3:32:73:9a:2c:5e:ed:8a:0a:ff:67:72:cc:06:41:52:58:
27:bf:0f:0b:44:9c:38:49:e3:50:f7:ae:5f:2a:39:cb:dc:7d:
67:a7:57:4b:59:e6:bd:cc:f7:6d:68:ff:f4:3a:76:af:62:c7:
20:7d:04:16:59:d2:5d:39:e4:73:14:0a:6f:24:7a:db:f2:c2:
05:0e:41:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJBODQxMTAvBgNVBAUTKEY0OTQ5NkY5NURGOTU4ODgxQkY0QjdFOTcyRTUxQjZG
M0NBNTlERkEwHhcNMjYwOTA1MDU0NDUwWhcNMjYwOTEyMDU0NDUwWjAYMRYwFAYD
VQQDEw02YTliYWM1Mi0wYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0OpdUoVDKUsVP1apVbSZb6dzrnkXD9cW8NM7JlqX7RrSu/oTmVsOYC4n7DCZ
zF3ESekCuL/vdi6pFpzaXEr6sHi3VMMf4XicnX/fzySVcftfAleZXVat5cPMr2JW
DFbcWJEcg03VORiKTRRisGu/Kj8KzeB23TD9+rHoNsRqbykORdnSOMkaiwu0KYZh
rhNtxEHppRnFEjeisls/SHDJZMCT0mcL1doIg/tSGt6rUGnljMHIXz6hf4KA2cfx
5NW7iBdlVK4A201xXaXog8hZ+TsCZ0hw3gjrhmyK/6RMKN8yysUuPwLhjwtQhNY8
dblv1n4ebQT7NYjNF39aP3pmpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1dufMl
dlM5UCVOX2NzNBpcjp80MB8GA1UdIwQYMBaAFPSUlvld+ViIG/S36XLlG288pZ36
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkE4NC83MkMxMDQ1QzA1
MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi85SlNXLVYzNVdJZ2I5TGZwY3VVYmJ6eWxu
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5mby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkE4NC83MkMxMDQ1QzA1MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi85SlNXLVYzNVdJ
Z2I5TGZwY3VVYmJ6eWxuZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf+udosgfUvo5VvgJUpfHASjXLMqzXr+VtdBIwBEdhJNUjhYTO0FdO1wK/1yi
2rEwMX6CK+APwqLCygNgZVzawjafN74dFF/VZcfxYEtwRBMU1KsZDNZTn/on+Ztt
jew0BiruPpWOuCXK9DPt10xSy+XoVoRoj1F+g6JLb1z8rmUbLn/49qQEdQh/ywDb
yUQrTtef0EYnEsVPBf9NW3ZcsrS4VNN5LD9HGBOM5wyXlJzhi9LcorMyc5osXu2K
Cv9ncswGQVJYJ78PC0ScOEnjUPeuXyo5y9x9Z6dXS1nmvcz3bWj/9Dp2r2LHIH0E
FlnSXTnkcxQKbyR62/LCBQ5Bjg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:43:44 2026 by rpki-client