
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: sQACK/OEMGc47FoXJ198SVzkPJyV11/TJuhoPEJue2g=
Subject key identifier: 21:A9:1F:61:9C:07:BF:FE:3F:80:F9:6A:4A:B1:8D:9C:9E:F0:63:60
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 03DB
Signing time: Thu 21 May 2026 00:38:46 +0000
Manifest this update: Thu 21 May 2026 00:38:46 +0000
Manifest next update: Thu 28 May 2026 00:38:46 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: JaVHTbOjeECeoT5gkoIrgMNPCkG4sadYeuwDFSGtuv8=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: May 21 00:38:46 2026 GMT
Not After : May 28 00:38:46 2026 GMT
Subject: CN=6a0e5416-74b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:3a:7c:f8:e5:b5:85:c6:41:c5:b4:d4:5d:
47:8d:e0:24:ae:c5:f8:0c:7e:a0:b2:db:d4:89:6a:
ce:10:5a:5c:6b:5e:85:07:5e:5e:fc:b7:68:f3:46:
fe:a7:5f:c7:90:60:e0:e2:77:37:71:8e:aa:4b:d1:
9f:f3:df:fb:23:cd:fc:d3:bf:63:7f:e4:77:73:9d:
d0:6c:59:0d:2d:de:a5:3b:ed:6c:d1:e2:b6:ad:c1:
10:60:22:04:db:bf:b5:be:44:74:2d:09:b9:a9:fb:
de:95:07:37:b7:49:83:1d:9f:99:4b:4f:6b:72:b5:
53:76:0f:09:1e:cb:53:3c:e1:2d:f0:95:a1:cb:7d:
fa:98:6f:43:8a:4f:62:ad:de:c1:64:92:8d:95:f6:
8d:6d:13:be:db:4d:4a:51:79:14:ea:1b:51:bb:8a:
56:09:39:e4:75:0d:b0:95:06:6a:31:93:91:ba:02:
78:54:97:27:9b:6b:91:b8:03:b9:2e:a8:df:73:c1:
be:73:22:81:4a:d7:df:e2:f1:b8:c2:f0:85:93:54:
c2:fe:9f:b8:2d:92:52:b7:b4:da:bd:5b:4e:e4:7a:
bf:13:2a:03:c2:b9:d2:e1:58:c7:d1:78:2d:a3:17:
c7:ce:52:3c:8e:81:1d:15:88:cf:b4:97:11:73:0b:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:1F:61:9C:07:BF:FE:3F:80:F9:6A:4A:B1:8D:9C:9E:F0:63:60
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4c:e4:7a:78:03:98:03:9a:8e:cc:69:13:8e:3c:92:91:0e:
88:d5:96:05:df:65:10:19:91:e7:4b:aa:93:8a:ba:93:35:b5:
78:2a:9b:ba:fc:83:07:ae:2f:bc:4e:64:7b:7b:4d:c6:f2:65:
35:fa:07:16:77:dc:f9:b2:95:d3:4e:d5:f9:65:fd:29:8a:66:
99:82:6d:35:11:2e:97:ca:36:e3:dc:c1:af:1f:ca:8b:da:70:
54:bf:7d:ac:18:d7:d3:30:00:35:3c:fb:c1:c6:e0:67:07:a6:
2f:3d:c6:0f:00:f4:e6:5f:8b:9c:9d:56:24:fc:f0:a7:1d:43:
b3:45:8a:e3:78:91:1b:8c:6f:d8:b5:fb:58:07:80:1b:1e:33:
4b:d9:8d:67:e8:3b:ba:c9:da:55:0e:7b:ad:27:f7:5a:e6:b7:
c4:20:e4:80:56:a5:7f:fd:70:ae:4d:95:f8:9a:b1:8a:cd:16:
07:12:94:6d:46:bc:20:52:e1:16:e7:7c:71:cc:b5:f3:e3:31:
25:47:04:63:64:e4:07:cd:f2:9c:bb:56:0f:55:36:c4:c7:28:
02:63:a3:7f:c7:a6:3e:88:43:8e:68:6f:76:8d:1a:33:8a:52:
c4:75:e8:c4:f3:db:91:f6:e1:fd:2e:19:90:fb:b4:68:a0:6c:
83:56:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:23 2026 by rpki-client