
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: moQDy5ubd3Yi79Ixr5JsSpYI0MjKpF3vJwry2RbZhdc=
Subject key identifier: A1:3B:A5:EC:D6:00:50:FF:A9:32:F8:D6:AF:C3:C4:4D:0B:D5:8F:ED
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: F9
Signing time: Mon 01 Jun 2026 07:28:27 +0000
Manifest this update: Mon 01 Jun 2026 07:28:27 +0000
Manifest next update: Mon 08 Jun 2026 07:28:27 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: snHikuaDXejNY22ZFblu6gXXHGHNNwQCEerM1CLmpUo=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 7IPdyrB8hldu0/eD1JF7CKYpSU0HFM1oIZi+GkIqvMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Jun 1 07:28:27 2026 GMT
Not After : Jun 8 07:28:27 2026 GMT
Subject: CN=6a1d349b-6cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:7b:b9:ba:6e:9b:cf:42:1d:43:31:1d:e7:
cf:ce:3e:4d:7d:44:2c:5f:a8:d1:6f:bf:66:ab:c4:
6b:98:59:7d:f8:2a:e3:cf:c2:43:bf:ff:75:c4:5c:
b7:4f:96:19:0e:58:cd:42:cb:53:16:21:2e:ff:d5:
fa:28:b3:55:a5:b9:c6:ee:55:ca:3b:a1:f1:06:cc:
a2:f7:ce:31:39:30:15:ee:c1:4a:c6:0c:e0:e6:b9:
d6:3a:a9:88:2c:2e:6a:b3:cb:d7:f2:e4:9a:39:8f:
97:0f:b5:66:6c:36:16:c5:86:63:c1:cb:07:30:34:
96:c5:d3:c3:d4:b5:7f:3f:64:31:88:87:03:bb:25:
dc:ae:81:02:e2:95:85:30:fd:b4:89:c4:b2:b6:e8:
40:20:4d:ac:f9:41:bf:4e:1e:89:51:a4:3f:09:21:
2a:fa:8a:3f:fc:93:94:e3:93:5a:bc:36:92:c4:fc:
ac:dc:38:70:be:57:94:e3:f4:a2:22:0a:d2:20:60:
d5:53:36:03:e5:ea:a5:1c:2e:b0:41:a5:6e:dd:b3:
c4:0e:71:d6:d0:04:6c:3a:87:87:1c:46:0f:8d:8e:
43:86:58:f3:14:b0:94:22:07:4a:29:b9:d1:41:c9:
25:6b:2a:61:41:39:4e:1a:70:d5:b7:a2:81:1c:97:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:A5:EC:D6:00:50:FF:A9:32:F8:D6:AF:C3:C4:4D:0B:D5:8F:ED
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a7:e7:c4:0e:ed:36:24:fb:b1:6c:d3:9b:68:f0:a3:17:2d:
e2:85:02:e2:6b:72:0a:0a:3b:c1:17:c1:77:69:9f:97:90:e9:
8f:25:1a:ec:a0:bd:6c:21:fe:29:07:f2:f9:0a:c3:cb:14:c7:
a1:4b:5e:93:fc:54:b7:ad:2e:38:86:de:bd:93:55:ab:9c:08:
a2:5c:00:dd:97:49:e6:dd:97:d9:80:dd:a0:ea:11:07:57:64:
01:9f:8c:f1:70:ee:26:d3:8d:cf:37:ac:58:fb:3c:27:6e:75:
0d:99:e7:c2:9e:f4:6b:ea:ff:b6:f7:2b:b7:e6:50:98:fe:fa:
b6:4b:9c:ca:32:fe:7f:32:ba:3b:df:bf:ac:8d:b7:6c:15:26:
93:2b:41:5e:28:be:eb:ba:71:7e:45:25:14:fd:68:94:e6:71:
02:2e:43:9f:f3:8a:82:0b:69:a9:e8:75:df:f5:66:e4:f8:b3:
e5:2b:19:b2:4f:c4:a9:59:78:fc:41:46:09:fa:31:5c:9e:53:
99:e7:c8:bd:5a:be:38:56:5f:e9:0c:04:7a:d3:03:3a:67:b3:
92:ac:1e:81:57:dc:a2:dd:a7:4e:70:94:dc:d9:b7:5f:13:ab:
70:fc:0e:96:01:20:cf:1f:6a:57:02:55:f1:d4:51:06:73:9f:
be:32:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:50 2026 by rpki-client