
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
File: 9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft (raw, json)
Hash identifier: 6FuShOJ4n6o0LJawcdTHxsl7MlzBUHsRXRpZakZJPXQ=
Subject key identifier: 7B:45:3F:CC:FE:8E:6E:35:57:B3:8B:02:EB:21:9D:EE:80:4D:25:70
Authority key identifier: F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
Certificate issuer: /CN=A91D2A6D/serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
Manifest number: 43
Signing time: Fri 09 Oct 2026 00:58:27 +0000
Manifest this update: Fri 09 Oct 2026 00:58:26 +0000
Manifest next update: Fri 16 Oct 2026 00:58:26 +0000
Files and hashes: 1: 9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl (hash: r6dU19gdGkOly1BsRKe/xE8bphParpHsH9iIUjjPpRI=)
2: 3F2882786B9911F19129D9096D47A888.roa (hash: LrMK47xAaSNKfir1pZggdafMp40B6KiAGZbM8Zztl8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Validity
Not Before: Oct 9 00:58:26 2026 GMT
Not After : Oct 16 00:58:26 2026 GMT
Subject: CN=6ac83c33-ac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:15:70:36:19:50:2c:5c:57:fe:03:9e:b0:
ec:b1:12:99:45:5e:53:cd:39:d8:51:f4:d3:27:bb:
9a:56:0c:1f:62:7f:9d:3d:c0:14:af:47:c6:bd:7d:
0e:c4:c8:c6:8d:53:96:04:3a:79:9f:32:cb:10:bd:
94:84:64:c9:95:36:c8:77:b6:72:7b:68:41:76:58:
dc:b9:0b:d9:4e:03:d5:d0:8d:83:37:94:57:7f:b6:
39:8f:88:df:a8:75:41:fe:b1:c3:ee:a0:2c:c9:de:
4f:ce:6d:d9:6c:e6:06:7c:fc:22:71:18:f0:68:4d:
ef:c8:aa:c7:d7:18:1c:3a:59:16:68:26:6d:72:47:
05:4d:f0:35:91:2a:4b:d5:5c:73:66:1b:8c:2b:99:
70:16:b6:c6:4e:2c:00:a0:8e:91:91:db:39:a5:5f:
2b:bd:ce:d2:c8:75:fa:ae:1b:61:b8:4e:f5:e9:f4:
47:d9:32:07:fc:80:33:19:d4:28:8b:58:23:9b:a0:
f7:8b:53:a4:61:4b:37:9a:a0:6a:3a:13:63:5e:ce:
d2:b3:dd:8c:5e:49:31:d3:37:56:5e:2c:da:6b:e4:
85:21:4b:ae:16:92:c3:bc:b8:88:4e:12:db:cf:11:
60:ad:41:96:58:fc:0c:bd:f0:5f:78:3a:7c:3f:71:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:45:3F:CC:FE:8E:6E:35:57:B3:8B:02:EB:21:9D:EE:80:4D:25:70
X509v3 Authority Key Identifier:
keyid:F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:f4:9c:df:c6:13:80:56:59:81:b6:b4:54:7c:52:a9:a0:1a:
fc:12:c5:26:d0:b6:e2:90:58:b8:85:67:24:91:fb:60:59:16:
32:f0:7b:6a:b6:ae:0e:a6:e6:d9:fb:3c:5e:ac:4e:69:27:4d:
ba:8a:77:6f:4a:54:b8:ee:1d:ca:c8:02:7b:e8:b1:81:16:9c:
bc:82:26:5f:58:9e:49:ee:49:7f:8f:dd:0c:54:d3:af:9d:47:
87:22:35:ec:39:9e:c0:4f:59:37:1f:0a:9f:0b:8d:d5:ee:56:
05:71:aa:06:2e:ec:9c:38:71:c4:c3:84:05:a9:b0:28:83:7e:
ad:dd:b6:33:3f:25:92:e3:fb:ca:5d:fd:81:c2:70:6a:0b:73:
23:a9:31:b6:47:55:01:40:84:dd:68:79:76:13:44:6c:1c:d6:
70:a5:a8:e1:d3:39:c9:03:01:7b:fb:04:dd:2b:ea:c6:14:e4:
5e:b3:cd:a3:4c:86:a1:8e:1f:60:f5:a4:09:7d:ea:6f:cd:c5:
b3:da:6b:f3:e0:80:e3:1f:d5:0e:c5:25:45:d7:a9:17:e1:64:
b6:16:37:ac:63:93:37:7d:08:94:11:2c:e3:da:37:58:e7:c4:
2b:ad:1f:5c:9f:85:a5:17:56:42:85:46:fa:87:7a:79:78:c5:
f2:b0:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:16:25 2026 by rpki-client