
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier: qL9cjIf+06MDhW/+PjTMkTvJujcL01zL1KTvkNsNT9I=
Subject key identifier: 13:EB:8F:9F:17:33:0C:D6:0A:26:A5:85:29:74:00:F3:DE:00:27:AF
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial: 07EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number: 07E3
Signing time: Sat 04 Apr 2026 21:04:16 +0000
Manifest this update: Sat 04 Apr 2026 21:04:15 +0000
Manifest next update: Sat 11 Apr 2026 21:04:15 +0000
Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: 1FvTPUy/Gw2oTsllBuvSSEU8SDh+yvUlo0Xmzwhje+0=)
2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: 0iiqZOwTOdunhzu7xr1TU0hPXfMeSWYQaRpR8izF2Uc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Validity
Not Before: Apr 4 21:04:15 2026 GMT
Not After : Apr 11 21:04:15 2026 GMT
Subject: CN=69d17ccf-cdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:b3:b5:09:ca:b7:f1:18:42:9f:ae:4a:e8:
06:83:55:f5:7a:52:9c:81:87:a0:fe:dc:38:f0:af:
80:d1:30:34:b6:6d:05:9b:3a:4a:d4:7b:e5:a9:bb:
d2:3f:74:35:fb:e9:1f:b7:8e:b0:a0:e3:47:8e:55:
db:96:7f:2b:fc:b1:0d:30:12:91:a6:5f:9a:ed:b1:
b6:53:c4:3a:a8:35:77:df:e8:5b:76:b3:90:b3:8d:
07:87:79:b3:86:1e:64:75:a0:1d:5f:80:0c:03:f3:
94:c5:30:62:67:31:b0:d6:62:20:72:0c:62:b6:79:
1d:48:96:df:a0:48:ed:90:30:d9:2a:a2:f3:8c:c4:
2c:3a:3d:e2:4b:d1:ac:7e:1c:02:1d:77:25:7e:b6:
de:4e:7f:7a:4e:a4:7d:b5:e0:5d:0d:b5:74:66:c0:
09:ee:d9:4d:ac:a0:e3:fa:de:35:7b:0c:31:c9:fc:
d5:ae:04:ad:a0:4b:17:50:2c:9f:9d:31:09:cb:30:
b5:4f:53:64:f9:69:d6:3d:90:08:f9:24:50:d0:b0:
61:e2:27:94:db:0f:9f:02:89:b9:00:72:e8:b5:00:
d2:72:e9:db:fc:18:ab:21:44:4d:1c:2b:e2:79:f1:
48:49:7f:58:c3:2c:a5:07:81:47:82:b0:36:0a:ce:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:8F:9F:17:33:0C:D6:0A:26:A5:85:29:74:00:F3:DE:00:27:AF
X509v3 Authority Key Identifier:
keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:f0:81:b6:e9:f9:98:7f:14:43:05:2b:d9:61:3e:aa:50:
b4:10:de:b0:66:80:01:6a:af:7e:42:5e:5a:dc:43:1b:f8:2f:
8a:9f:2e:9c:8b:6b:04:00:87:1f:4d:fb:fa:a1:ab:58:75:c2:
7c:21:0c:69:fd:66:68:e9:eb:50:22:58:e9:ca:3a:4b:a7:af:
2d:83:9e:e3:13:8e:d9:8a:e3:ad:96:93:e6:9b:70:0d:ab:42:
a2:9b:b2:8c:55:b4:77:c7:95:15:b6:f1:13:4b:13:67:c6:2d:
90:21:8c:e5:ad:e6:bc:91:96:5b:c5:0d:ce:8a:d8:a1:25:18:
34:93:81:32:ec:31:24:a2:46:42:c0:c1:11:4c:38:64:18:65:
6a:54:73:6c:44:06:f8:d4:8d:50:c9:cd:5d:2d:4b:e7:3a:04:
e9:52:b1:34:42:f6:8d:fc:44:7b:78:4a:a1:a5:cb:b8:f8:37:
9e:ac:aa:45:a5:46:cb:95:44:01:27:19:93:9f:07:f3:00:8a:
19:0b:85:fd:29:66:e9:ad:44:37:f1:94:d5:d0:45:14:b3:da:
e9:50:52:5f:06:cb:8e:38:9c:76:40:b0:e4:77:35:35:58:48:
bb:3c:a7:67:11:c8:55:42:50:a9:93:a1:27:eb:7f:cd:cc:e3:
67:74:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client