
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier: WD78OzfNmHmKmpnn5ak/wpYAAypsKqQobNN9jJC5Qxs=
Subject key identifier: 52:2C:F6:67:5E:54:06:2F:49:FD:11:10:E7:86:64:F4:7C:8D:55:AA
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial: 03E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number: 03DB
Signing time: Sun 05 Apr 2026 00:19:17 +0000
Manifest this update: Sun 05 Apr 2026 00:19:16 +0000
Manifest next update: Sun 12 Apr 2026 00:19:16 +0000
Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: 9HkaTVLidoDVspQRGZBobbT66EO2FPHIRuM8e1I4xUo=)
2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: lbvKMon3phKT4kxAzoVpvvRCe8EmYTdmkdcCNNB8PIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Validity
Not Before: Apr 5 00:19:16 2026 GMT
Not After : Apr 12 00:19:16 2026 GMT
Subject: CN=69d1aa85-2f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:df:fa:6d:1b:76:4a:f9:be:1a:6e:44:c1:
17:b0:e4:42:5b:59:4c:6b:b1:bd:0a:a9:61:9b:96:
aa:24:24:54:13:63:e7:0b:aa:26:4d:f8:46:96:e9:
8f:ff:48:04:a6:8a:2e:eb:7f:2b:8c:0d:30:20:a4:
e4:05:8d:f7:c5:3c:09:3e:be:3d:a0:81:9e:5a:98:
d9:ed:a7:77:35:0c:ef:1f:2b:39:8e:09:6f:3f:c4:
63:ad:95:89:76:9b:39:f0:2f:22:f7:87:7a:5e:1d:
0b:d7:f7:cd:dc:bd:2c:16:de:de:b6:d6:ef:77:ae:
8b:0f:ff:a8:9d:9c:1c:24:60:08:02:da:7b:88:41:
ab:b2:0e:f7:b7:7c:1c:cd:c0:ce:23:22:da:47:4b:
64:dc:8d:aa:43:35:f6:b9:c9:ee:6b:13:26:67:3c:
11:00:9e:00:51:31:b6:14:70:a6:7c:f6:b9:a7:fc:
b9:b8:66:a2:7a:ce:2e:2e:de:dc:f3:c5:d5:24:af:
32:4d:de:40:5c:1c:35:08:cd:f9:3a:83:6c:7e:fc:
b5:94:00:4a:45:27:80:e4:63:42:21:13:5c:c2:3f:
62:4e:61:a8:86:74:80:85:55:9e:16:bd:6a:27:8b:
f2:23:dc:af:da:13:d8:0a:67:b3:90:80:6e:c2:e5:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:F6:67:5E:54:06:2F:49:FD:11:10:E7:86:64:F4:7C:8D:55:AA
X509v3 Authority Key Identifier:
keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:e3:41:cb:04:6b:54:2d:97:bb:6d:27:b4:bb:72:20:d5:
8d:4b:9d:9f:fe:f3:49:de:a1:f1:52:61:b9:cf:50:9c:69:9c:
47:58:66:71:37:81:47:2c:ae:9b:f9:6f:db:13:ff:f4:96:da:
f4:31:cf:3e:db:26:25:2b:1b:90:2a:4f:2a:ba:e4:48:f5:64:
14:b5:1f:9f:04:89:e5:5d:f3:20:ff:35:2d:7f:2b:c9:ff:5b:
30:00:8a:27:e3:62:13:9b:89:15:65:14:76:69:4d:e1:c1:b1:
3f:2c:71:64:7b:1e:12:63:f9:50:b4:d3:5f:99:f1:f1:83:e6:
0b:78:fc:bf:86:ae:74:1a:3c:7a:2d:cd:74:d0:db:45:25:08:
0e:72:c1:fe:cc:64:c9:cc:f5:6f:56:8c:f7:b2:24:60:cd:75:
61:6e:a3:f2:71:6d:c6:57:0e:0b:c1:82:6b:4b:7e:f2:6f:b5:
a5:0b:bc:3f:b6:0f:f8:6e:ba:30:2b:c6:4e:e1:5e:05:05:fe:
45:84:f0:98:8a:28:e1:1f:e0:53:41:db:d3:ef:bc:2f:68:14:
cf:4f:bb:0f:36:00:61:13:81:a0:ea:2d:19:d7:58:a8:e2:b3:
ea:94:a5:93:b4:bb:77:48:e1:88:4f:5d:f6:21:85:be:b0:78:
20:43:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:06 2026 by rpki-client