
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier: 9DQ4OTYQ8/RCMjA7D6Wvp1DHTCtpu8lt5cZUdP5jtPo=
Subject key identifier: 11:78:CA:EF:CF:B1:CB:BF:58:A1:E2:A9:73:06:FF:C2:E5:72:B1:78
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number: 0AF4
Signing time: Tue 18 Aug 2026 21:24:16 +0000
Manifest this update: Tue 18 Aug 2026 21:24:16 +0000
Manifest next update: Tue 25 Aug 2026 21:24:16 +0000
Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: 5SXP64S/0J30QU8m0muWmqBZo355jgt+8pDZfEFO0y8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Validity
Not Before: Aug 18 21:24:16 2026 GMT
Not After : Aug 25 21:24:16 2026 GMT
Subject: CN=6a84cd80-f7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:28:8b:c9:14:95:a4:13:0b:3f:10:d4:28:
d0:2b:1c:d7:ea:a2:53:72:14:dd:0f:69:33:85:a2:
d1:78:5f:0d:23:19:06:26:9d:90:f9:a8:af:2b:3a:
bd:07:c4:d3:81:33:54:eb:d3:ff:35:56:ae:bb:77:
1f:dd:e0:1d:ff:12:3d:1d:07:8b:a3:8b:50:f4:74:
2e:48:27:65:10:ea:37:de:8d:67:e3:0e:fb:d6:ad:
a0:b6:e1:c3:56:0e:0a:d3:e7:33:a0:88:4a:5f:68:
57:08:c3:3e:86:b0:b2:16:dd:81:c9:c6:b6:16:30:
bd:1e:32:49:ff:fd:7e:92:9a:79:f7:fc:6b:f5:87:
23:31:70:d4:93:aa:66:b4:fc:9c:fa:05:b1:89:a9:
eb:f4:32:6f:06:88:76:e4:68:08:b9:bc:47:4a:f3:
eb:00:7c:41:a8:55:67:34:b1:84:5f:ca:67:3c:75:
fc:32:0a:99:6c:d3:41:1c:39:80:74:1c:05:a2:dc:
ae:50:27:a2:ba:b5:41:7c:a9:c0:20:7e:73:f3:ce:
c8:2f:f8:fc:54:b4:e9:7b:cc:70:bc:77:8b:71:d6:
30:33:86:6a:ac:57:ab:94:55:06:28:0d:7f:f9:ec:
56:a8:bd:41:8b:dd:1b:80:15:5f:33:5f:3e:db:16:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:CA:EF:CF:B1:CB:BF:58:A1:E2:A9:73:06:FF:C2:E5:72:B1:78
X509v3 Authority Key Identifier:
keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:65:10:29:d0:48:7d:a5:45:85:35:40:ad:91:6e:49:f0:3d:
7a:30:e2:ed:fc:ca:fc:b9:22:f0:27:b4:ac:d4:5e:26:9a:5f:
9e:d5:84:76:e3:3e:53:23:b6:4f:c3:4f:25:2a:8a:f4:f3:f7:
89:6f:93:be:36:d5:0a:8d:8a:4d:da:5f:93:0b:72:36:3b:0b:
95:75:5c:55:01:26:ec:81:04:86:18:a5:dc:98:44:91:9d:63:
a7:89:88:1d:7d:a1:dd:bf:67:86:a7:b3:3d:d5:03:5f:68:ca:
cd:17:f5:fc:95:7c:85:8f:30:b8:e0:f5:87:ad:3c:b9:b2:df:
15:c1:6d:65:c1:a1:fc:6a:82:06:7b:33:c5:f6:1b:ca:d4:49:
2d:a8:6f:d6:81:60:24:74:1a:5f:83:a1:10:b9:51:87:44:36:
40:19:d0:19:f3:ae:01:02:be:eb:6b:ed:d5:a8:87:8d:c2:cc:
b0:d1:b0:8d:93:db:c9:6c:e6:12:a0:77:12:44:52:ce:05:77:
19:b3:9b:67:6e:73:72:ac:0f:34:d2:82:19:89:15:01:e1:6c:
14:d4:07:f9:e2:38:80:95:ba:b4:65:1e:92:cf:b3:d5:96:1c:
05:79:6a:26:52:00:e6:2e:86:66:8d:14:fb:06:88:ae:8e:db:
fa:66:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:33 2026 by rpki-client