
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: b11uzgf/eCC7utb4JfL+CiQ3XAIE6dytUZ/5ZL3XncY=
Subject key identifier: 9B:21:94:E3:97:2E:57:71:C4:8F:63:8E:EC:67:48:A5:9C:9B:56:D6
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 06C0
Signing time: Fri 04 Sep 2026 22:14:16 +0000
Manifest this update: Fri 04 Sep 2026 22:14:16 +0000
Manifest next update: Fri 11 Sep 2026 22:14:16 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: rS3Y+a0opR5Ct9oNWsnBqgw7mMmpp6DKmelZl/18Fm0=)
2: 55701668973111F1A86A43863311F970.roa (hash: 0fnwHD1e8+xguealFicHUassztcIDudaKbeSOw/qYWs=)
3: DF8DD8A098C411F19E6AA2476D11F970.roa (hash: AHI17Y99lS0m1pu4f9i1rlfgUH330F3GganWYeEqayY=)
4: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
5: FB1416BA9C7611F1B1FB27074F11F970.roa (hash: fJHw3KHbw5JqhCL5X32Hu7gkVE/D7z03jBEZkid9WR4=)
6: AFC035669D3111F1992D1A564911F970.roa (hash: te+/7chBtqWirQ3Sy8cdSUzT1iaVFXNRVp+AFNi5gt4=)
7: 319A6658973111F19629FCFF3211F970.roa (hash: ginLpbAUhhIDR7OXh5vCfxR5+ivMC1F/qzgijOsdkzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Sep 4 22:14:16 2026 GMT
Not After : Sep 11 22:14:16 2026 GMT
Subject: CN=6a9b42b8-5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:44:b2:ac:66:56:01:ed:bc:bd:bf:50:ec:
30:fc:ea:12:d2:75:ee:67:e3:5a:34:75:fa:b3:e2:
f6:0a:80:ce:15:0b:0c:b4:fd:0f:c6:92:4e:0c:b4:
52:bd:84:f1:b8:89:96:58:e7:eb:4f:cf:14:62:e3:
d7:38:64:4b:19:e8:14:67:bb:ae:ff:bb:85:72:fe:
e6:e5:b3:07:2b:6e:16:96:62:fa:51:43:7f:71:f0:
52:34:26:66:bd:40:62:7f:1e:f2:96:61:08:bb:83:
9b:86:6b:b5:dd:a0:50:ef:7e:83:fa:e1:3a:45:eb:
96:62:ec:4c:46:4f:74:f7:63:aa:2f:a3:37:f3:d8:
41:43:3a:63:1b:cc:12:4f:e2:77:53:4c:c1:d0:31:
4e:4e:c9:8e:f6:2e:62:85:00:07:0a:8b:48:a9:05:
c1:c9:3e:7d:5e:13:d0:22:11:29:64:a6:cc:15:71:
5f:02:8a:ba:04:5d:69:bc:63:48:51:a1:10:b0:fc:
08:8d:18:53:fb:78:9c:4b:4f:62:83:35:4a:46:83:
50:41:b9:07:7b:8d:ca:1f:5a:da:40:a9:50:2d:4a:
4b:3d:f4:3a:38:dc:a5:6d:72:2b:5f:1c:2d:34:29:
0d:b7:3c:7f:9f:0f:35:0f:15:d6:f1:e3:4c:56:68:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:94:E3:97:2E:57:71:C4:8F:63:8E:EC:67:48:A5:9C:9B:56:D6
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4c:85:12:58:52:10:bc:c2:eb:d7:ad:b5:e5:0b:2b:f8:e6:
bb:63:ef:42:fa:2a:c4:a4:be:7e:4a:2b:d3:47:4b:3c:f4:5b:
94:cb:a8:d8:1b:b0:61:42:91:df:c7:85:23:6a:8c:f6:8c:6d:
28:3e:74:0a:81:45:02:e9:13:b6:05:9b:99:78:6d:d2:1e:47:
81:5a:ca:22:c4:7d:e4:71:db:c5:f5:77:c5:7e:54:d7:60:4b:
8d:b2:ca:e1:76:ad:4b:80:a0:d5:18:ae:8d:58:93:7d:0c:79:
91:d9:99:99:b3:9b:6b:65:cc:28:11:07:a3:4a:ec:10:75:09:
73:51:41:1f:4c:18:b2:cf:81:45:06:f9:ae:24:9e:d7:6b:d3:
40:79:ca:2a:ad:d8:7d:f1:55:c1:f2:b5:23:0e:59:59:54:0a:
3d:b9:87:41:fb:2c:ef:1d:a7:b8:37:15:27:e6:e1:7d:0d:a7:
70:61:e1:15:93:7b:a0:9b:6c:39:d1:d6:b3:82:12:34:69:08:
a5:2d:f1:15:7f:8a:b1:92:2b:22:79:b6:a3:b2:9c:45:8b:54:
90:26:10:ed:72:8f:90:03:2d:25:32:cf:36:88:61:97:73:48:
ea:e7:3a:33:ce:7e:a9:f9:ad:e6:bf:f3:83:54:b4:4a:a2:6e:
2f:95:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:12 2026 by rpki-client