
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier: gb6Py72E/R+KXErO+zCEBTh8l4atvDrbWUTnGuu2FHU=
Subject key identifier: 96:CD:04:84:F3:11:DB:84:2D:03:08:C6:1A:FA:72:FB:4C:3B:C7:F1
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number: 0829
Signing time: Sun 14 Jun 2026 21:04:41 +0000
Manifest this update: Sun 14 Jun 2026 21:04:40 +0000
Manifest next update: Sun 21 Jun 2026 21:04:40 +0000
Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: 2kBSussSlMEBbuCOMVuhcw64WqqnF9uePBPxSoXu+qc=)
2: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=)
3: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 21:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Validity
Not Before: Jun 14 21:04:40 2026 GMT
Not After : Jun 21 21:04:40 2026 GMT
Subject: CN=6a2f1769-b1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:40:8b:d3:90:52:07:b6:27:2b:83:fe:8f:
d4:d7:22:3c:9f:67:f2:f4:f6:f1:19:ff:8d:f4:28:
80:ef:f6:91:f8:d3:2a:62:21:c0:15:d8:5b:50:c4:
99:93:71:26:9e:62:b8:e7:0f:e8:6e:4e:c9:a2:7d:
43:4d:67:aa:ce:8b:80:c8:ce:6d:08:2f:8a:98:72:
f2:19:41:43:d8:84:cf:4d:25:72:a0:ae:8e:3a:9d:
75:54:7b:4b:65:1e:45:ae:e1:b4:7a:49:83:04:1e:
e5:59:76:5b:ee:4e:53:77:3f:b7:a0:1c:8f:1b:40:
46:da:8a:21:fe:f6:2a:f1:b3:0c:31:70:50:fb:84:
ef:d9:c2:81:32:a2:2c:4b:40:f2:cf:55:3e:e3:fe:
30:14:46:92:cd:35:02:54:80:82:ee:1d:30:41:0f:
b1:64:f2:d8:58:e7:9f:b6:e8:9f:38:9a:81:de:3b:
ed:7b:fc:08:ab:e6:fc:15:0b:a3:75:50:31:75:37:
42:7d:65:77:ed:bf:57:39:93:e5:68:ac:37:cd:e8:
1e:88:ce:92:6c:86:ea:b7:41:53:7e:c5:52:3f:f7:
38:8c:3a:bb:87:99:41:69:cf:89:b8:bf:a1:b2:ca:
d0:08:8a:88:21:6e:f4:ad:40:09:69:a5:6e:b7:30:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:04:84:F3:11:DB:84:2D:03:08:C6:1A:FA:72:FB:4C:3B:C7:F1
X509v3 Authority Key Identifier:
keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:48:24:a9:82:7a:e8:40:13:f3:73:9f:c6:18:fb:ad:8e:
dc:fe:a4:f3:df:db:2e:69:d3:e1:fb:4c:08:d7:4b:96:fd:9e:
1d:a1:8e:7c:6b:98:00:45:f5:5f:0e:7b:d7:cb:a5:a6:b7:56:
56:1f:a0:df:cf:91:4a:96:ba:1f:01:d1:fa:42:0a:92:d9:f0:
f2:de:7e:26:27:d0:1c:24:20:86:42:3d:90:da:50:24:16:71:
98:bc:69:6c:c0:c4:9b:0c:e2:1a:f6:9f:dd:48:c3:b9:87:3b:
3d:a9:37:79:67:e5:56:6c:11:10:f2:50:0c:cc:b9:1f:03:2e:
87:70:0f:2c:f9:ba:57:32:eb:f1:cb:30:ea:48:69:d7:bc:76:
8e:10:d2:8b:bf:e5:fd:ff:e0:6d:ff:cd:2e:1a:86:76:d0:b5:
b3:1a:cf:1b:e1:5b:b2:6d:b9:d9:7c:be:80:88:77:a9:1c:69:
5d:15:1e:c2:d1:48:71:1d:83:aa:f7:98:7f:80:03:d0:9c:a1:
11:34:3e:5d:1c:f1:db:a9:ef:f9:9d:dd:8b:c9:63:a1:82:6c:
75:8c:1d:fd:3d:70:a9:2f:c3:10:cf:5f:63:50:ef:cd:45:85:
64:1b:8f:59:8a:15:e6:f7:6a:90:3f:59:61:3f:f1:8f:b7:77:
1e:ea:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:42:20 2026 by rpki-client