
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: SWNLndV/Y/Kq41/1Mf1NYvD1tANS7mAfuvQr3z9EqzE=
Subject key identifier: 2C:F5:E3:24:AF:E3:53:8B:67:29:B4:04:55:D7:70:6C:9C:0D:29:82
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: 9F
Signing time: Sun 05 Apr 2026 06:44:45 +0000
Manifest this update: Sun 05 Apr 2026 06:44:44 +0000
Manifest next update: Sun 12 Apr 2026 06:44:44 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: qnmFrOvzWxkG9C11ZQvbyWk7meVAtPZSKz3SDL3lIAI=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: Apr 5 06:44:44 2026 GMT
Not After : Apr 12 06:44:44 2026 GMT
Subject: CN=69d204dd-52e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:b6:83:e1:40:d6:9d:aa:c3:59:53:e4:b8:
ad:02:98:4a:1d:38:a9:fd:cd:31:86:07:11:91:f9:
3b:21:47:ea:6b:64:6c:20:c7:a4:69:2e:f6:50:f3:
55:c8:85:b4:19:83:d7:2f:c9:b4:3c:e6:a6:89:62:
21:09:a0:23:5d:bb:24:b3:d1:82:ec:04:48:c6:6c:
1a:e6:f7:e8:26:84:df:f0:f1:ea:7e:cf:64:5c:42:
19:c7:da:19:08:6c:27:c5:df:08:9f:8b:c0:b0:5b:
b8:18:a5:b0:23:d0:a4:df:76:0b:40:b3:ca:20:91:
be:1b:d3:69:31:06:bb:2e:eb:aa:7c:87:fc:c8:f7:
0c:22:6d:d5:e8:2b:c9:6f:32:63:d0:a1:ff:ac:5d:
bc:9a:14:e4:96:f5:2c:b7:a3:7e:99:ee:62:8c:08:
f3:42:84:5d:40:02:de:31:73:8b:b1:89:2c:e4:49:
b9:b3:23:1c:29:59:7d:e7:1a:11:96:3e:6a:14:eb:
a1:f9:c2:31:51:25:9e:a6:81:74:c3:fe:eb:5f:be:
e8:8a:48:c4:e1:fc:a7:af:96:22:28:0a:bd:b2:e0:
c9:1e:04:d5:72:53:4b:29:2c:54:25:39:ad:89:88:
46:6a:33:74:bb:0d:ff:58:48:91:56:1c:11:fa:0a:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F5:E3:24:AF:E3:53:8B:67:29:B4:04:55:D7:70:6C:9C:0D:29:82
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6b:3c:8f:70:e1:99:50:9a:05:ab:35:d4:b8:06:b9:98:2c:
15:e6:03:5a:3f:1a:33:e1:a0:25:34:85:19:02:80:41:db:6e:
41:d6:85:37:ed:48:54:3c:2d:94:38:02:e7:e8:e9:b1:3f:95:
84:1c:eb:d5:c1:b9:3c:bf:48:59:03:f8:79:a3:71:2d:79:a3:
de:84:10:c5:e4:b8:d7:57:a6:c5:e5:c5:42:9b:1c:cc:20:7f:
16:ad:7a:52:7a:57:2d:a9:f5:c8:40:14:ee:fb:a8:49:48:68:
dd:ca:43:72:03:dc:45:4a:91:dd:0e:6b:91:ae:1e:5f:f7:32:
1c:25:cd:d1:b2:d2:4a:c7:cf:8e:e6:db:ca:08:79:fb:1c:f5:
5a:2d:08:97:6b:1d:25:f8:cc:2d:3e:6a:09:1c:c8:ea:b2:af:
4e:a3:37:e7:32:34:b9:35:17:ff:5f:74:06:73:39:c9:32:4b:
81:24:43:19:8f:17:60:1d:92:e6:7b:f6:cc:5f:b0:75:d9:6d:
1d:68:b2:87:0d:1a:20:31:a2:ea:07:b3:c4:89:d1:b2:4d:a6:
ce:88:1b:42:e2:20:bf:d0:7f:64:51:07:9b:3b:aa:0d:eb:78:
d2:04:10:cc:d8:48:c6:b9:95:50:fc:9b:8f:ff:a0:9f:85:5c:
db:b3:40:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCOUExMTAvBgNVBAUTKEMzRENEOTVBNzI0QUQ2RTNCOTg3NEM2RTRENkIzOUVC
Q0UxNDJDRDQwHhcNMjYwNDA1MDY0NDQ0WhcNMjYwNDEyMDY0NDQ0WjAYMRYwFAYD
VQQDEw02OWQyMDRkZC01MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpS2g+FA1p2qw1lT5LitAphKHTip/c0xhgcRkfk7IUfqa2RsIMekaS72UPNV
yIW0GYPXL8m0POamiWIhCaAjXbsks9GC7ARIxmwa5vfoJoTf8PHqfs9kXEIZx9oZ
CGwnxd8In4vAsFu4GKWwI9Ck33YLQLPKIJG+G9NpMQa7LuuqfIf8yPcMIm3V6CvJ
bzJj0KH/rF28mhTklvUst6N+me5ijAjzQoRdQALeMXOLsYks5Em5syMcKVl95xoR
lj5qFOuh+cIxUSWepoF0w/7rX77oikjE4fynr5YiKAq9suDJHgTVclNLKSxUJTmt
iYhGajN0uw3/WEiRVhwR+gp9ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCz14ySv
41OLZym0BFXXcGycDSmCMB8GA1UdIwQYMBaAFMPc2VpyStbjuYdMbk1rOevOFCzU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI5QS8yMjdBQzQ4NjQ1
QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1TzVoMHh1VFdzNTY4NFVM
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1
TzVoMHh1VFdzNTY4NFVMTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs2s8j3DhmVCaBas11LgGuZgsFeYDWj8aM+GgJTSFGQKAQdtuQdaFN+1IVDwt
lDgC5+jpsT+VhBzr1cG5PL9IWQP4eaNxLXmj3oQQxeS411emxeXFQpsczCB/Fq16
UnpXLan1yEAU7vuoSUho3cpDcgPcRUqR3Q5rka4eX/cyHCXN0bLSSsfPjubbygh5
+xz1Wi0Il2sdJfjMLT5qCRzI6rKvTqM35zI0uTUX/190BnM5yTJLgSRDGY8XYB2S
5nv2zF+wddltHWiyhw0aIDGi6gezxInRsk2mzogbQuIgv9B/ZFEHmzuqDet40gQQ
zNhIxrmVUPybj/+gn4Vc27NApw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:22 2026 by rpki-client