
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: u9/1EXrasS5+LqdId/PUQ8tMAmk1eDHEQgMPaFIl5ig=
Subject key identifier: 95:DB:1A:67:64:65:B7:08:B9:73:B4:36:5C:F3:86:01:38:A6:58:E8
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: 0123
Signing time: Mon 01 Jun 2026 06:35:35 +0000
Manifest this update: Mon 01 Jun 2026 06:35:35 +0000
Manifest next update: Mon 08 Jun 2026 06:35:35 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: /dWw8Wv5xRfRCAd+QCa447iGV2Y3/cLMmNuhyuFsUlg=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: 7tTDB/tssfPu0ukhnLfqeZyRc0Pbk+Bf/jBD9Oepn9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Jun 1 06:35:35 2026 GMT
Not After : Jun 8 06:35:35 2026 GMT
Subject: CN=6a1d2837-d87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:10:f8:5e:24:74:1f:ef:12:26:bb:07:f1:
02:63:30:58:75:eb:c3:9b:32:79:a5:e9:b4:7e:b5:
dc:d8:15:92:44:71:c7:41:eb:22:2e:44:a6:a3:3b:
c9:7a:01:00:43:cd:e6:f8:8b:97:59:41:41:39:f6:
66:b2:bd:30:b5:fa:14:d0:9c:e0:69:46:c4:67:10:
9a:3e:6a:e2:5c:23:84:aa:76:06:37:b5:38:1a:11:
bc:d0:b6:b2:08:c8:d7:02:bb:75:db:51:39:a7:9b:
5a:e1:da:70:3d:0b:ba:cf:f9:63:3d:ef:dd:56:eb:
f5:70:b8:4d:e1:22:53:74:0a:63:3d:ba:79:d2:59:
af:e5:15:f8:8a:e1:89:23:8a:56:c6:29:d5:4f:94:
25:c9:dd:0a:7c:86:46:09:75:ae:14:40:62:d4:54:
49:b8:0e:9a:69:fb:d7:28:af:80:97:bf:37:ce:78:
d7:7f:e3:ed:06:82:62:89:f0:c8:7b:ab:6a:53:a4:
11:80:2b:98:04:88:29:a0:ab:68:f5:cb:7b:1c:13:
84:1b:fd:a7:50:0f:f5:cf:82:aa:33:95:9e:20:19:
df:10:87:ef:e2:84:08:59:57:73:aa:5c:17:a1:3c:
0f:f3:d9:52:d3:ab:a2:01:8a:df:10:64:29:07:8a:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:1A:67:64:65:B7:08:B9:73:B4:36:5C:F3:86:01:38:A6:58:E8
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:3c:86:f6:9c:fc:94:b3:9f:48:a1:12:75:8d:0e:cd:f0:
ff:48:1e:eb:84:d0:fe:47:71:7c:0a:71:96:c6:08:46:0b:80:
00:de:3e:54:f1:14:00:3c:9f:94:95:3b:f5:14:7e:48:54:1b:
bb:55:2c:8e:30:1e:f6:7f:1a:06:b7:3d:f8:da:0d:2e:39:42:
34:2f:ce:fa:39:54:eb:d9:fb:66:39:5c:30:b5:de:c6:1f:57:
11:68:d6:c9:2f:9d:90:62:b3:ed:f7:00:af:19:42:5a:5b:b4:
0e:d4:55:af:a6:3d:46:61:25:d1:14:ff:42:24:df:07:21:34:
3f:70:9d:d4:34:6a:20:60:bd:65:18:2a:21:2b:95:44:13:2b:
95:e8:44:8a:03:68:bf:d5:27:e1:05:96:f8:03:86:27:2d:9c:
a9:06:69:5f:6b:b3:0f:ed:48:5f:a6:b8:b5:ef:75:f3:4c:9e:
ee:59:28:3d:4e:28:70:e5:fc:45:db:98:a1:b5:8b:09:88:36:
9a:89:51:06:0c:f8:58:44:1e:d2:37:73:0f:9e:42:de:0b:09:
09:d0:92:50:1d:87:36:16:fb:dd:10:da:47:4c:cf:0c:65:ae:
0d:59:a2:38:19:9b:ec:b4:a2:5c:d7:33:30:d4:82:11:fb:ba:
a0:e9:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:40 2026 by rpki-client