
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json)
Hash identifier: 60GiuXHk/qMRkvu5QeqOcwf2RpJqsnAMhpT3i32EZAs=
Subject key identifier: DE:36:67:09:C0:93:36:FB:C6:4D:20:D7:2D:28:9B:56:FF:B4:64:FC
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
Manifest number: 0402
Signing time: Tue 21 Jul 2026 01:21:19 +0000
Manifest this update: Tue 21 Jul 2026 01:21:19 +0000
Manifest next update: Tue 28 Jul 2026 01:21:19 +0000
Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: q874bU2Xc+IP8Jzy277MGeeYOIOd8c7Rz5zdHOFE81w=)
2: 685F0CBA031211F1BBBCC8A9163D8C67.roa (hash: NxlgbUimOupPTjcXRwh01KDTfYdr+Bp3csROuFT6/PM=)
3: 3A904D64210111F181AE0DC81F3D8C67.roa (hash: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Jul 21 01:21:19 2026 GMT
Not After : Jul 28 01:21:19 2026 GMT
Subject: CN=6a5ec98f-7ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:fa:68:85:4f:06:a7:ba:e4:5b:73:16:66:
b0:5f:1d:75:77:70:a7:61:9d:0b:1e:b4:d3:56:1f:
39:0e:a1:a1:71:28:b7:c9:62:bf:1e:ea:7a:5e:18:
fb:cd:db:7b:07:bd:30:2f:b3:66:a7:20:0d:44:81:
16:fd:88:16:96:b6:52:68:4d:e5:e4:54:6e:d3:eb:
a4:a8:c6:e0:08:10:94:f1:a7:96:30:ad:01:2a:9a:
95:26:9e:71:ba:7e:e7:1f:5f:1d:99:14:c4:19:d7:
10:23:24:92:aa:1c:db:a3:40:8f:7b:cd:47:bb:83:
9a:f5:8d:7f:a2:e0:da:b8:ba:eb:37:4a:44:bb:c3:
20:41:01:58:b8:db:14:17:72:b8:34:27:3a:c4:b1:
8b:4a:9e:2c:fa:ec:fa:67:c7:a6:05:0f:29:42:d3:
de:68:dc:dc:a8:65:47:d7:21:14:ac:d0:b5:e3:2d:
7c:30:75:e9:dc:87:89:bf:1c:27:de:da:0b:de:27:
65:93:4d:9a:1a:5a:43:51:66:ce:10:02:3c:3b:dc:
bc:c1:a6:20:a5:a4:65:75:43:75:7b:c8:89:9a:1a:
29:1a:88:31:05:31:2d:14:3a:46:75:bf:11:78:87:
51:0d:6c:36:78:c5:39:e7:8d:36:35:2a:a9:ff:c1:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:67:09:C0:93:36:FB:C6:4D:20:D7:2D:28:9B:56:FF:B4:64:FC
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c7:d3:21:7b:34:87:43:59:3b:99:15:7b:8e:fe:ab:0f:ed:
b9:a1:c0:89:d8:ad:34:34:57:b0:e2:a3:45:8b:2b:8e:e3:df:
58:93:c2:50:f9:bf:b9:ca:ad:ba:0a:7f:30:05:46:eb:b5:b6:
ea:a1:7c:cb:6f:49:b0:55:86:ca:13:e8:c7:cd:37:87:5b:97:
21:ab:fa:73:bf:b6:08:5a:6b:93:ca:74:3c:07:1c:4c:fd:68:
63:bc:be:b1:7b:7b:7e:a0:2b:4f:8b:b0:e4:c9:ee:d0:45:9c:
50:2f:26:cf:8b:33:67:5a:7a:be:80:1b:27:62:26:1a:e9:f1:
7c:7e:ea:76:df:e6:8c:39:0f:94:ec:e5:4c:d1:49:8f:35:84:
0a:09:bb:6b:32:8d:46:a6:6b:a4:33:7c:e8:9a:ef:20:2c:44:
9b:6f:6f:49:b2:d8:d0:29:f9:52:28:d1:9b:95:9a:5e:b3:72:
1a:42:0d:33:58:1b:7a:f4:e6:39:0d:47:aa:f0:ea:56:b4:92:
0d:58:bb:65:55:69:66:da:6d:63:b0:31:f7:b2:0c:91:2e:a6:
a0:9c:89:b1:94:5b:fb:df:e8:7e:07:c7:64:33:d5:27:f5:2e:
30:b8:67:2f:fa:6a:44:79:70:1c:4d:33:b5:da:34:5c:3e:ab:
54:49:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:30 2026 by rpki-client