
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json)
Hash identifier: P8InZLr9xH6ltt84n+UOIfH2NI+jOW+uLf6ZdXF57hk=
Subject key identifier: C2:72:30:3F:E5:3F:72:C9:85:60:BB:79:E4:8A:D9:80:7C:78:FF:4C
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
Manifest number: 0874
Signing time: Wed 20 May 2026 20:44:48 +0000
Manifest this update: Wed 20 May 2026 20:44:48 +0000
Manifest next update: Wed 27 May 2026 20:44:48 +0000
Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: sG5kV8FlmBnoXZWLP5zzZjLCR+vHILnhIdbaBcI9V5A=)
2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645
Validity
Not Before: May 20 20:44:48 2026 GMT
Not After : May 27 20:44:48 2026 GMT
Subject: CN=6a0e1d40-ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:1d:cc:0b:2f:79:a9:df:d2:ff:f4:4b:c7:
f3:bb:2a:4d:cf:1d:88:de:31:03:06:1d:9d:c8:bd:
3e:6b:9d:ff:07:27:a9:f1:be:0f:61:6b:5b:91:56:
11:97:e2:c5:f5:15:6d:25:66:ba:54:e9:bd:9a:74:
a7:c5:45:13:ff:07:58:f6:3d:79:ee:5e:0a:34:95:
bf:52:89:fb:55:ed:56:ac:09:9a:08:0e:39:9b:53:
b6:e0:31:38:ea:35:71:88:08:34:4d:54:8e:b5:4d:
c0:06:cd:f8:61:e5:93:f5:b9:03:95:26:72:83:38:
08:2a:15:9e:b8:a5:d5:89:88:0d:c2:62:88:66:ba:
4c:eb:39:76:0d:e2:e1:af:e9:17:15:9b:47:77:bc:
7f:e3:33:e7:ff:9a:3f:6c:41:ea:09:8c:2f:a7:68:
f7:b7:78:01:e7:0e:71:f8:c8:20:bc:43:82:12:3d:
4b:e5:38:42:25:c3:1c:22:3a:73:73:7b:53:7c:a8:
c4:5f:26:8e:af:8b:00:3b:d5:d5:f2:d7:07:29:54:
6c:b4:a3:af:57:01:f1:c1:64:bf:a8:98:e3:42:8e:
c9:18:a4:8c:cc:81:3b:38:60:02:17:3c:d7:d1:ec:
f2:9b:7a:fb:88:40:46:00:04:71:8c:e0:88:1a:50:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:30:3F:E5:3F:72:C9:85:60:BB:79:E4:8A:D9:80:7C:78:FF:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:72:14:ac:88:25:8e:89:4b:19:be:03:d8:ad:29:2b:d7:
ab:c6:40:85:a7:14:58:92:c3:2b:2b:75:04:5d:0e:c3:69:08:
08:c6:5a:6b:4a:c8:04:87:85:3e:9f:36:1b:3d:c9:f5:10:1a:
c5:c5:e9:80:08:7a:a7:e6:cf:ab:f1:7e:d7:15:d6:cd:9f:6c:
6e:df:e8:be:84:6a:c4:93:64:56:db:68:32:24:d0:27:0f:f3:
fa:23:8b:f0:b1:73:19:51:37:87:79:25:d3:12:3f:a3:65:36:
e0:bc:7a:11:76:95:9d:fd:33:af:10:99:3f:cf:d0:ef:0e:e0:
a0:e6:c9:8b:cb:14:42:eb:6c:90:4e:f0:5f:84:11:d9:6d:d0:
61:73:3f:98:21:4c:34:6d:d8:3b:8a:90:b0:b8:0c:b4:f4:99:
1b:fb:20:f0:cc:5d:45:c8:36:8b:e8:78:7e:2e:bb:63:84:2d:
34:d0:7b:95:10:68:22:0e:ed:68:ba:9e:55:c6:cd:0b:b8:64:
a3:de:86:80:4b:9e:18:8a:90:0a:2e:74:e0:fd:8c:bd:6d:79:
23:ca:af:5d:de:99:6e:d7:db:52:9a:08:49:24:13:a0:86:85:
48:38:c9:61:f1:46:21:ca:1a:76:37:13:0d:da:03:b8:a3:7e:
65:9c:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:40:15 2026 by rpki-client