
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier: HQDXn6tXpSD8msUEbr6y9iSt7mSoOpGoM2X/79jHXkM=
Subject key identifier: 7E:F6:79:AA:60:74:A8:15:28:09:18:75:FF:25:52:E5:FF:C3:28:5C
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number: 0A9D
Signing time: Mon 22 Jun 2026 21:10:18 +0000
Manifest this update: Mon 22 Jun 2026 21:10:18 +0000
Manifest next update: Mon 29 Jun 2026 21:10:18 +0000
Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: ZNBgBU/iwazNv4LPWu9Nl/IMjLxND4n4BoM/cCYp+O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Validity
Not Before: Jun 22 21:10:18 2026 GMT
Not After : Jun 29 21:10:18 2026 GMT
Subject: CN=6a39a4ba-a6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:96:d4:0d:89:62:b9:75:fc:ef:c3:f1:a0:
26:63:fa:d1:8e:04:07:7b:41:ed:c4:b6:57:bd:62:
29:2f:f5:26:cd:04:8d:43:73:96:fb:97:d4:9e:87:
a0:97:58:6d:10:99:30:6c:63:07:3b:d0:c8:ba:62:
07:fa:da:3b:5a:53:48:80:03:a2:19:a7:2b:de:96:
61:b3:50:18:c5:7c:a1:47:22:85:4b:65:4d:2b:5c:
b3:1a:01:a1:15:17:2a:8b:2a:a2:8e:80:62:d0:97:
b6:8c:cf:d9:3e:fa:b4:07:7d:de:7d:cd:72:80:32:
02:76:01:27:db:08:18:13:36:23:aa:64:02:07:d0:
37:5f:60:e2:46:3c:d0:d0:7d:23:d0:75:2f:78:84:
ef:78:ca:4b:c8:52:8c:87:d8:a9:6b:85:36:eb:86:
88:85:71:13:5d:51:1e:c6:8b:1d:4d:a3:99:e8:d0:
62:c8:c5:9f:ab:1f:d0:cc:15:5c:86:a0:31:75:91:
ba:23:db:31:dc:30:9b:d9:f8:74:4b:f5:c3:52:fe:
de:12:03:de:ac:8d:6c:23:72:19:d7:64:67:76:7c:
92:83:7d:2a:78:3f:d4:20:3e:3b:36:fd:43:c0:8c:
4f:40:cf:ee:0d:e3:c5:19:5d:ce:78:58:9a:ac:36:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:79:AA:60:74:A8:15:28:09:18:75:FF:25:52:E5:FF:C3:28:5C
X509v3 Authority Key Identifier:
keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:96:db:67:1e:a5:42:e6:6c:fb:eb:27:0f:32:ed:b4:20:
e5:48:e3:05:5a:41:6a:3e:7f:6b:99:4d:14:09:59:3e:c4:57:
ad:50:ab:a4:56:da:25:ab:46:a3:ff:5f:b5:a4:f3:5d:e3:55:
c2:6e:4c:e0:b2:10:28:10:f1:83:5b:28:e7:22:df:01:bc:a0:
6b:fb:89:12:ea:dc:84:a2:90:4a:b2:78:55:e8:d0:f2:71:53:
b3:d5:30:94:13:4d:f3:09:e8:2f:f9:66:29:64:a7:98:1d:63:
a1:e0:18:fc:eb:bd:3a:89:a8:2a:fe:91:1a:a7:81:57:a5:ef:
2a:5e:27:ef:ae:66:d9:ae:f2:30:d1:c9:3f:45:35:fb:b9:ad:
af:38:47:e4:55:bb:88:30:38:80:86:0a:9b:44:bf:ae:cf:c5:
be:e5:91:eb:2a:40:c2:45:2f:5a:ca:bd:8c:24:61:1f:e1:cf:
01:e0:bb:20:70:68:a8:00:2a:f4:ff:53:d8:57:5f:ba:14:95:
43:16:17:ca:69:6f:81:1f:8c:c1:8b:3e:f3:25:83:65:47:74:
43:95:34:b4:68:1f:92:3e:58:75:e1:11:3b:82:24:c9:02:87:
2c:ae:06:c8:f6:9e:a3:b9:b2:e5:70:96:05:6e:50:16:48:e6:
91:47:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:08 2026 by rpki-client