
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier: 2DA4UFeceIVTcJAGJp2kGq1tyB3EowvbpgvXcz1J9zs=
Subject key identifier: EA:20:C3:AB:2C:62:73:FC:FB:B3:4D:18:DC:A4:8B:46:A5:22:84:E8
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial: 1A12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number: 19EF
Signing time: Fri 06 Mar 2026 16:13:42 +0000
Manifest this update: Fri 06 Mar 2026 16:13:42 +0000
Manifest next update: Fri 13 Mar 2026 16:13:42 +0000
Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: PtVMlbOs59ixWwYk9gdEfMD84DJpO/suZZZrgoTFcN8=)
2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
3: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
4: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6674 (0x1a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Validity
Not Before: Mar 6 16:13:42 2026 GMT
Not After : Mar 13 16:13:42 2026 GMT
Subject: CN=69aafd36-f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:6f:69:55:69:a8:70:45:55:93:58:61:8c:
83:09:4b:cf:89:27:04:89:77:c9:22:ad:5e:d8:86:
a5:65:fb:d2:1e:4a:cb:4d:b9:6d:7c:ef:7b:5a:b8:
1c:41:f7:48:48:ae:04:84:3a:04:be:03:da:bf:74:
6a:db:36:5a:f7:ad:34:44:20:7c:f3:84:1f:f0:d6:
ab:32:4c:65:28:e1:ba:eb:11:61:fd:61:56:d6:22:
5b:30:98:03:14:50:29:6e:a7:d1:5e:97:0f:4f:3f:
fa:e1:69:e3:b0:e4:b2:f6:03:c2:3c:af:bb:7e:7d:
f3:e1:6e:08:e9:1b:7d:da:51:de:18:16:ba:62:6d:
da:aa:27:76:03:97:72:59:9d:b4:c6:91:ab:4f:de:
cd:f9:01:24:8e:b9:58:c0:f8:bd:5f:0d:14:a2:80:
4e:45:29:3c:f7:a3:13:70:2a:e1:68:46:61:a3:20:
4c:cc:1c:e7:54:b9:48:a4:99:8d:5f:04:e1:f4:3d:
91:19:cc:15:4b:af:57:be:4c:77:d5:95:63:c7:22:
e6:ad:0c:b1:f3:ec:4f:91:e6:62:6f:14:a0:f2:22:
24:58:87:64:a9:86:7e:f6:78:ec:8c:a2:16:be:e0:
e8:66:9f:2d:04:58:e8:f7:1d:7b:e1:0d:08:dc:0b:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:C3:AB:2C:62:73:FC:FB:B3:4D:18:DC:A4:8B:46:A5:22:84:E8
X509v3 Authority Key Identifier:
keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:14:33:fe:9f:78:5e:b1:42:e0:25:e9:6e:27:85:43:1e:
68:ef:c8:0d:38:90:cd:ca:25:fe:3b:31:fc:a2:ea:4a:82:42:
28:27:65:29:5e:97:71:fe:d7:f6:1e:2c:3e:97:54:b3:e4:e2:
41:50:31:85:a5:38:b9:9f:14:e4:5e:08:45:a0:e5:82:ff:63:
8f:6f:c3:5a:7c:72:b0:4e:2d:3b:71:e1:95:2b:2a:3d:1b:b8:
0b:bd:12:5e:e8:ad:f1:59:0c:38:18:e5:8a:98:20:05:21:57:
b6:1d:af:47:5b:60:c8:a3:b4:0f:f8:64:e6:d4:5a:3e:a2:04:
24:91:71:61:d9:21:4c:fd:81:38:f5:42:b7:68:27:ae:be:9e:
ee:6c:5d:1d:ed:56:47:50:ff:eb:1e:88:f7:49:0e:87:00:9d:
bb:76:3f:e2:77:47:8f:92:de:81:05:17:ec:30:4e:d1:be:b9:
9c:0a:a3:01:d3:c8:6d:6f:8e:c8:a6:5a:a0:33:c0:ab:9e:93:
1c:85:50:79:fc:b8:7e:90:0e:fe:56:55:60:c5:1d:50:fe:5f:
db:54:25:bb:36:7a:a6:93:9c:aa:72:e4:5b:f2:b2:19:f4:8b:
75:63:58:ec:88:ce:38:a0:ca:14:ba:f2:74:32:c1:0a:0b:4a:
2f:95:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 08:03:47 2026 by rpki-client