
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier: YnnOWueiCiv/oFcfTBbBIgDx8jnFDLIF9AHExV9gpmI=
Subject key identifier: D5:D8:2C:CF:2F:C2:4D:EF:39:37:2C:70:6A:FE:64:57:A0:73:12:29
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number: 0127
Signing time: Mon 01 Jun 2026 06:52:40 +0000
Manifest this update: Mon 01 Jun 2026 06:52:39 +0000
Manifest next update: Mon 08 Jun 2026 06:52:39 +0000
Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: K5aBlEYFZZCnUwM1y5O83Th/Oa9CJ3D32lKXpS+rcT4=)
2: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: 5Lek0/TY1VnVxY+8seA94qWb37v69wiqgc1rAck09Kw=)
3: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: Nl4kN6jm52cuyAkdi4em+9Vsp1W9ZdwhxrwVDXbPRaA=)
4: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=)
5: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: eSNXNT3NWZ6GsZhGHaO1BXwN0Y2Sx0KnClUlxO8jfHM=)
6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: /HIHLpwd0S664HfhvVwLMbh80nHNNDuDIVOHq1h+TQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Jun 1 06:52:39 2026 GMT
Not After : Jun 8 06:52:39 2026 GMT
Subject: CN=6a1d2c38-0013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:b2:2d:ea:da:3a:d3:0a:e9:7a:ed:35:8f:
f5:15:7b:27:a1:de:58:a0:d5:5f:4b:61:72:86:30:
30:80:ba:33:ac:e1:48:15:38:b0:db:f6:fe:ee:0e:
c6:53:4a:99:a8:77:4d:90:a1:fa:95:2f:3b:0c:ba:
bd:f7:f9:aa:44:87:8d:98:91:2b:7a:b3:6d:22:06:
00:bb:3a:13:20:5b:3b:9c:d6:96:39:81:30:f7:28:
99:8a:24:86:39:b6:dc:98:92:76:96:64:1f:76:3c:
1f:df:2c:05:77:7c:9d:f2:b3:fe:94:b4:6a:d1:44:
0a:22:c5:4c:0a:38:93:36:65:d1:2f:b5:c1:f7:7f:
af:55:52:c6:d6:72:13:67:41:d9:23:72:b2:a4:4e:
9c:bd:36:e1:0d:53:aa:41:35:26:cd:43:b6:9e:e3:
80:62:e0:0c:e5:71:38:b3:bd:be:46:9d:8e:78:97:
35:8f:56:55:f0:99:85:3e:78:b8:f6:c1:ae:f9:71:
d1:0d:15:d6:ac:c9:53:ca:af:2b:f2:1e:66:97:c2:
67:56:e6:0a:31:4c:4f:f4:5e:f6:bf:17:bb:c9:f3:
ed:e5:0b:26:49:fe:4c:f4:96:88:46:73:50:2c:2a:
cd:58:9a:c2:b0:ed:64:c8:94:89:db:c1:89:c6:44:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:2C:CF:2F:C2:4D:EF:39:37:2C:70:6A:FE:64:57:A0:73:12:29
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:4f:5d:01:d6:a8:34:4a:58:2e:fd:d5:4c:15:12:c1:9e:
f7:60:29:c5:33:70:73:88:70:dd:13:0b:da:3f:cf:03:48:7e:
77:a1:bf:ea:bf:c4:51:65:5c:0c:d7:a4:e2:fb:83:84:2f:a4:
7f:82:3e:0c:fb:c3:6d:31:bf:21:c6:0d:b7:de:93:23:9f:fd:
00:ea:b1:ea:f9:8a:4c:c7:46:41:d9:22:57:a0:d2:de:1f:82:
81:1a:eb:b0:56:c0:cf:52:ad:62:c1:63:1f:87:4a:41:88:92:
5d:90:4b:64:81:a5:8c:e1:3d:17:22:e9:66:20:f5:3f:f5:f8:
b7:a2:42:8b:4e:e7:7f:3a:c1:09:88:8a:29:74:c6:ed:34:12:
4d:a4:0a:c9:26:b5:4d:65:b8:c4:8e:00:9e:3b:31:23:f4:c1:
f9:c8:02:27:71:15:dd:02:43:05:9b:84:06:a1:cb:d2:e8:74:
d8:73:b4:1a:b7:59:c7:43:a9:99:8a:f5:1c:c5:6b:3a:44:62:
3b:b7:06:93:c2:eb:d0:02:de:40:0f:b6:f6:85:84:46:bf:46:
c9:c3:0f:7f:1a:b1:2a:96:f4:c5:34:3f:cf:4e:33:ef:46:55:
50:e6:d1:d9:6d:a2:d3:6d:3f:e5:05:b8:22:93:9e:37:3c:7a:
b2:d7:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:38 2026 by rpki-client