
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json)
Hash identifier: ovoLVaX2x/EfPURxUVfLA0kjpFWDc22e9i02pJdcTM0=
Subject key identifier: 5E:D5:AC:B5:D9:39:45:76:53:23:06:C3:3D:C0:F9:61:6A:A1:A1:27
Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
Manifest number: 0190
Signing time: Thu 21 May 2026 04:24:35 +0000
Manifest this update: Thu 21 May 2026 04:24:34 +0000
Manifest next update: Thu 28 May 2026 04:24:34 +0000
Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: R6KkeavgwyAorA5gPutaLMAp3wheCmYZ5HYWJjjL+lA=)
2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: XhN04AM2ixPyN1th7HJDdAiI6EaLVoSWkSawWRUqLfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Validity
Not Before: May 21 04:24:34 2026 GMT
Not After : May 28 04:24:34 2026 GMT
Subject: CN=6a0e8903-326d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:ed:f4:ab:13:74:ad:af:0e:15:59:03:b2:
cb:cd:c7:45:d4:0e:26:76:bb:67:88:78:58:36:6a:
85:2a:df:f1:df:9c:60:1a:3e:c6:0c:0f:25:f7:9d:
43:84:4d:34:67:a3:91:ee:44:92:de:d3:67:18:94:
56:3a:98:96:45:13:bc:51:aa:2c:9d:ed:c5:08:a3:
de:1b:e1:a0:1d:ff:8c:e4:d2:30:6f:2a:a7:34:97:
0e:29:d3:47:6a:e6:38:07:7d:5b:02:76:d5:d9:20:
ee:c7:d2:0c:98:a0:ca:f5:8e:80:a5:b7:4d:88:d2:
74:d8:36:29:5f:be:a2:13:45:7b:03:b9:2b:98:7a:
80:cd:e9:0e:71:87:b8:11:45:fa:5f:cc:27:3e:18:
34:3d:d4:21:45:a2:b2:13:ce:35:66:c2:76:79:19:
c7:ea:29:91:b0:07:c6:a3:02:07:61:66:14:5e:08:
8d:77:93:8c:68:c7:b0:83:bf:89:e2:f5:eb:e1:a7:
73:49:f0:37:4b:8f:b9:17:b3:18:13:49:c2:03:b1:
fe:70:e7:09:e4:4e:68:ef:b9:2f:c1:51:10:ee:04:
ee:dd:c9:03:6a:3c:cf:f8:63:25:44:4c:16:71:6e:
3d:23:65:a8:ff:6f:87:7d:6b:c5:ea:b0:1b:98:33:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:AC:B5:D9:39:45:76:53:23:06:C3:3D:C0:F9:61:6A:A1:A1:27
X509v3 Authority Key Identifier:
keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bd:b3:73:ec:ea:06:69:c6:28:96:b1:36:60:6f:c8:0a:ac:
e3:95:8c:fc:66:f6:70:b2:59:fc:b1:55:f4:a5:7d:1c:05:9b:
a5:27:db:f1:dc:ab:76:c6:c2:3c:eb:1b:5c:93:7d:c7:4e:a9:
41:73:84:f6:fd:a6:61:c6:02:1f:e5:d3:f4:bc:19:4a:cb:7f:
63:1e:ab:19:c7:f6:67:92:fd:3c:86:ff:d2:77:0d:5d:6f:8e:
9b:5e:46:10:20:ca:8b:5c:1b:ed:ec:1d:21:26:81:0f:e4:d8:
4f:73:b1:fd:6b:a7:ef:df:09:1b:a7:7e:28:e6:07:62:3a:04:
5b:8a:af:c0:04:35:ae:a5:f0:8a:a3:7d:b3:fb:15:e2:42:16:
d7:8a:89:cf:c8:c5:d6:2e:a7:ac:b4:42:10:6b:9d:d7:5a:e3:
56:f2:1b:1b:54:7b:b9:57:56:26:c5:5e:cc:81:9a:9a:c8:d2:
06:1e:a9:24:40:0c:84:24:90:cf:d5:a4:54:a1:af:43:f2:1e:
b1:ad:44:16:b1:e1:96:b7:62:fa:43:e3:54:c0:d9:49:5d:f1:
c3:75:df:73:bf:23:9b:10:6f:46:fe:7f:ba:50:d1:1f:fc:8d:
f4:3b:82:42:3e:36:ee:b5:26:83:bf:31:7e:1b:3e:08:6c:2d:
01:7f:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:14 2026 by rpki-client