
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json)
Hash identifier: ihDEss6pUh6FLy+ZHWOn1uGiUqZZZLpiOMadVh6T7eg=
Subject key identifier: 96:AC:76:2A:BB:FE:99:92:CF:ED:53:91:0C:58:9E:FE:06:66:07:BC
Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1
Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
Manifest number: F2
Signing time: Tue 23 Jun 2026 06:38:17 +0000
Manifest this update: Tue 23 Jun 2026 06:38:16 +0000
Manifest next update: Tue 30 Jun 2026 06:38:16 +0000
Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: 2vbmTg9I8P0ntb40Z31KmxJNoLUAnuZbA/eBnq+PSbI=)
2: 16B651C6048411F094895C27C4F9AE02.roa (hash: 45/HLjdj+O/i8kCEKwn2XmI0wpxVbhzQb8+m4uBvopA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl
rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
Validity
Not Before: Jun 23 06:38:16 2026 GMT
Not After : Jun 30 06:38:16 2026 GMT
Subject: CN=6a3a29d9-2cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:d0:17:73:89:3f:d2:9b:84:cf:bf:d1:33:
63:46:aa:b9:19:cc:9f:25:94:f2:87:48:14:14:18:
d6:27:a7:1a:0b:73:96:b5:43:ca:f3:88:c3:64:d1:
dc:a0:9f:b2:bd:6a:31:bb:f4:0e:d1:94:84:10:9c:
76:5d:0a:f4:69:86:69:61:dc:48:99:74:c0:b0:24:
d5:e4:2c:2d:79:21:dc:e9:5f:63:d7:43:c1:6b:0d:
70:63:f7:78:b0:04:f0:42:68:61:35:be:db:6e:ba:
3d:3f:33:7b:77:45:eb:21:30:8c:24:05:0f:c7:09:
c9:a5:a6:c3:f8:8f:e0:57:78:ba:00:6d:b0:f9:af:
58:2d:54:88:11:fe:22:4f:a3:d3:e3:89:9c:98:83:
ae:ef:1a:9c:61:bd:a8:1a:fd:23:66:ee:ed:49:05:
1e:b0:34:e5:1c:d5:b3:d9:9e:8a:cb:49:ec:f0:dd:
8f:eb:f1:97:f0:5d:75:19:ab:01:01:2f:64:51:1b:
c3:8b:b4:a6:e1:56:a8:ba:d7:49:46:40:3b:47:87:
c0:05:78:6a:f7:b6:51:98:b5:87:3a:14:28:f2:c5:
3f:9c:0a:3d:7a:40:69:6b:e1:95:31:e0:c4:eb:b8:
aa:3d:d3:79:76:3e:e2:d2:3f:70:3f:07:73:f7:82:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:76:2A:BB:FE:99:92:CF:ED:53:91:0C:58:9E:FE:06:66:07:BC
X509v3 Authority Key Identifier:
keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:59:c9:c8:5d:cc:90:87:79:14:8e:0e:a5:45:85:82:c4:
18:c7:ed:c1:65:c5:81:68:59:72:ca:30:f7:11:a0:aa:9b:da:
f9:4f:5f:83:fc:f8:fc:f5:05:a3:bf:db:56:70:73:a8:c8:a0:
a3:26:a3:e9:9f:57:27:9d:14:da:a0:1c:d2:47:71:15:db:e2:
ea:23:5f:d3:1a:ac:20:75:65:e6:d6:80:c5:e7:6d:23:61:29:
5e:7c:da:56:90:97:06:14:63:ac:f2:af:1a:c2:de:d5:0c:2d:
65:3a:27:07:dc:c4:19:81:cf:b5:c7:e5:c3:4c:d5:08:2d:89:
2d:2a:ab:50:38:9a:4c:75:66:4f:7d:4d:a0:c4:58:0a:6d:68:
a7:ff:17:ad:bb:9e:a3:4a:49:ec:50:5d:a5:bf:c5:6b:23:ad:
a7:93:70:3c:46:8d:4f:c1:bc:1f:c3:75:a1:5d:61:35:97:ac:
62:9f:18:6e:24:41:7d:09:66:9c:3c:2f:8b:77:e8:79:3b:90:
99:07:0d:1d:f6:79:c1:06:ed:d9:26:cc:e6:88:ae:a9:65:1f:
79:f7:09:77:82:bd:d7:73:ed:1c:a8:a5:9e:10:93:a9:cf:b4:
69:6b:3a:fc:84:84:7c:9d:a4:12:da:35:af:b0:c8:fb:31:20:
db:fa:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:18 2026 by rpki-client