
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: UjJHYzEeYJQUgGDpqLPj5g2+UZ7HaC6ugnM0UTBZC5Q=
Subject key identifier: 32:9A:3B:59:3A:1E:46:4E:0C:33:A8:BB:68:F9:A9:DB:37:17:A6:2A
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: BE
Signing time: Sat 07 Mar 2026 06:19:25 +0000
Manifest this update: Sat 07 Mar 2026 06:19:24 +0000
Manifest next update: Sat 14 Mar 2026 06:19:24 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: La57+TrbR0xuiHV1/eawyEymznOoiZMkpQ2ajSdegnc=)
2: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
4: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Mar 7 06:19:24 2026 GMT
Not After : Mar 14 06:19:24 2026 GMT
Subject: CN=69abc36d-daa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:28:90:b3:9f:c2:89:30:a9:24:7d:d6:cf:0f:
28:ec:ea:ca:a7:36:09:da:30:59:85:99:65:dd:75:
e2:09:00:3d:f5:f1:04:f3:54:45:6b:79:c5:a2:f9:
5a:a2:b0:96:97:91:3f:57:75:f8:07:41:7d:22:98:
9c:08:c9:ee:dc:bd:84:5f:2e:76:3a:02:dd:9c:4c:
8e:e6:6f:b7:fe:e2:44:b8:9d:0f:ba:72:50:4c:0f:
12:8a:e4:f6:8a:c7:d1:81:cc:80:31:27:03:99:90:
7f:8b:f0:b3:a2:ae:60:4c:c5:b3:a8:e4:7d:e8:53:
e2:88:97:1b:69:86:36:53:11:d0:e4:7e:58:eb:18:
5f:5d:95:d8:a9:2f:a4:00:ab:50:98:2a:1a:2c:e6:
9d:e5:ee:e9:40:0a:62:ba:c4:93:d7:c5:10:03:75:
af:4e:3e:82:81:b8:7e:9f:c8:62:ea:ed:72:73:c9:
df:b7:2a:3d:3e:f4:95:85:52:eb:b9:51:91:65:62:
91:6e:d6:1b:c0:d2:31:1f:18:9d:01:c6:b5:20:3c:
fd:67:f2:6a:8f:45:7d:1c:9a:2f:29:43:de:a1:88:
9e:2c:96:9b:12:66:aa:08:f9:e5:2e:ec:33:08:9a:
e0:74:d7:9a:57:c8:04:f7:53:4e:d5:ef:42:86:d2:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:3B:59:3A:1E:46:4E:0C:33:A8:BB:68:F9:A9:DB:37:17:A6:2A
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:73:37:28:8e:72:7e:f1:92:b8:d8:e4:8d:66:59:5b:df:79:
66:6e:43:c8:50:7d:9c:7f:d1:3c:6f:81:f9:a5:67:a4:22:3e:
17:a0:9d:17:17:51:a7:a8:01:34:77:3a:2a:48:25:e2:db:45:
c0:04:0b:35:d2:4d:00:df:49:a9:29:ac:62:9b:cf:11:99:db:
85:e1:f5:c7:7b:8c:eb:d0:49:59:73:b4:78:66:83:70:fd:35:
ae:67:82:04:e3:06:55:58:5b:01:5d:82:c8:83:c7:9d:7d:8a:
b2:16:68:b2:9f:bc:96:6b:43:b8:09:f4:34:8e:ce:33:68:94:
8b:8b:60:1c:56:67:de:64:45:7c:b8:e2:5c:7e:27:f1:7d:ff:
2f:88:31:e2:47:b1:f9:f0:21:c1:70:33:84:4e:28:28:1e:57:
ac:e7:87:6e:df:10:08:aa:36:3a:96:39:9c:fd:a3:55:55:3c:
df:db:3b:e4:80:ac:c8:c1:68:bf:c4:a0:db:17:be:a8:d2:f7:
49:b7:6e:3b:d2:12:04:e0:1e:96:d9:fe:1d:96:3b:c0:d5:e0:
08:30:54:59:cb:01:2d:94:ee:d2:40:f1:d0:e6:55:88:87:9c:
79:43:46:e6:a7:cf:9b:8e:01:ea:90:b0:0c:58:f3:81:1f:0f:
76:d6:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:01:47 2026 by rpki-client