
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: 4h8NuwkX1ul2aKih7fKG5gdkXLmZAlalKRYPuN4m68M=
Subject key identifier: 57:3D:B8:3D:94:71:86:1C:4B:C6:A3:AC:03:51:0C:9D:66:37:4D:13
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: D5
Signing time: Tue 21 Apr 2026 06:35:40 +0000
Manifest this update: Tue 21 Apr 2026 06:35:40 +0000
Manifest next update: Tue 28 Apr 2026 06:35:40 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: 83RLPuiaI5uPd9bKnGD658x8s7EV3lG15+hVEgTIQUM=)
2: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
3: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
4: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Apr 21 06:35:40 2026 GMT
Not After : Apr 28 06:35:40 2026 GMT
Subject: CN=69e71abc-0af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:9f:20:74:c6:62:00:11:e1:aa:0d:17:ad:
cb:e8:c0:55:74:d8:fe:d1:ee:13:f4:75:d5:52:33:
81:b0:3b:47:45:67:67:14:b3:e7:cc:f5:0a:61:4b:
c1:66:84:e1:da:53:60:ad:98:73:4b:6e:2e:6b:35:
d6:70:ed:f3:93:66:31:0d:01:84:c6:7e:60:bf:5f:
e5:45:0c:e7:72:e6:bc:e9:65:5f:88:0b:99:cb:0f:
7e:35:1e:25:a3:07:b8:0f:ba:9e:20:89:fc:91:df:
b1:e3:67:c6:1a:da:e9:03:2a:4d:20:72:f6:63:b1:
6e:5c:dd:f4:ed:35:d4:23:8d:d3:8e:87:e0:31:68:
5b:0a:7c:83:51:fe:ec:76:68:15:be:54:e5:62:66:
c2:0f:78:c2:b3:a0:ee:95:98:f1:bf:63:c7:18:9b:
90:8a:60:dc:4d:5d:ea:0d:37:34:df:95:b2:a9:eb:
a4:90:52:ca:d3:f4:49:08:6f:5e:83:15:e1:c2:07:
14:87:f1:79:0a:8a:ae:b5:7d:0a:4c:37:86:01:61:
ee:cc:68:13:7d:ed:37:c9:3e:11:a4:76:10:74:ad:
ee:33:00:cc:ff:20:04:cf:e2:ed:6e:7f:2a:e3:5b:
57:fd:47:65:4d:15:24:57:95:8f:d6:56:4d:3d:00:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:B8:3D:94:71:86:1C:4B:C6:A3:AC:03:51:0C:9D:66:37:4D:13
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0a:f6:63:e7:3a:54:70:06:1a:02:62:b4:76:7b:f3:a5:7b:
15:c7:8a:fd:c5:86:be:ee:1e:78:cd:97:3c:5d:b8:96:ce:c9:
d0:dc:d7:e9:6e:2a:46:f4:ed:fb:50:f4:8c:85:ee:9a:2f:ca:
d8:1c:ac:36:a5:6e:20:0f:ca:c8:5e:f9:6d:4e:41:d6:ce:07:
1d:86:2e:43:1b:49:25:37:48:ac:51:4b:7c:e2:fe:6a:35:16:
27:e4:1a:f0:21:de:13:1d:41:ef:78:c2:9a:20:fd:fd:e5:45:
3b:7d:9d:f8:33:3f:94:13:c7:f5:fe:8d:48:56:e0:27:e1:4e:
5b:f7:81:59:d4:79:76:9f:d8:5d:f7:4e:b1:d5:48:03:6e:ab:
91:e6:01:9a:13:ff:d9:89:54:d4:0c:fb:81:18:0f:b2:c9:4f:
7f:ea:e0:85:8c:97:5f:aa:17:99:bc:a8:c3:6f:10:48:47:40:
3b:94:46:86:90:71:5e:86:20:41:9b:65:36:f8:ff:f0:de:80:
0e:b8:32:5f:a0:9c:dd:ce:26:ac:c0:88:b8:5f:69:3d:4c:5e:
ca:76:d5:57:38:ab:68:ad:29:b6:68:06:71:56:c2:ad:08:f3:
f9:00:8b:0f:7b:96:bc:71:91:42:2f:35:13:d4:24:58:d1:23:
a3:e3:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:33:02 2026 by rpki-client