
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier: v5CHgsmZ//XLXpleE7qcI/d2B2ec7qCnKJDYPJFhtLA=
Subject key identifier: 13:F5:80:C7:7B:47:AF:CE:CA:98:9D:81:83:97:01:F8:34:F0:BA:DC
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial: 0851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number: 0849
Signing time: Sat 04 Apr 2026 20:36:51 +0000
Manifest this update: Sat 04 Apr 2026 20:36:50 +0000
Manifest next update: Sat 11 Apr 2026 20:36:50 +0000
Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: wHecRFsN1JaZiIJS6LH18smZmHEonzIfyGApuhEJZjk=)
2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Validity
Not Before: Apr 4 20:36:50 2026 GMT
Not After : Apr 11 20:36:50 2026 GMT
Subject: CN=69d17663-1737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:14:c0:e5:fb:34:0e:73:e1:73:6c:f7:67:
5a:c7:ec:21:f1:84:5e:c3:d0:71:7a:2c:0e:cb:5a:
35:32:d6:34:b4:13:ae:4e:15:43:ca:18:51:62:cc:
b4:1e:0c:b7:00:7c:15:bc:0d:2e:86:d0:4f:b5:5d:
87:4d:86:3d:ca:aa:9c:83:ff:02:8a:eb:63:54:88:
4d:a8:7f:e6:e9:9d:57:da:a2:9a:25:b6:f7:c3:6b:
4b:03:2a:e7:3a:fa:f6:d4:e2:0e:e3:2f:a9:5e:6b:
c8:94:cc:40:3a:73:6d:a6:79:ec:e4:11:0f:87:98:
e8:c6:9c:78:30:f4:4c:0a:af:a9:6d:18:ee:be:c1:
a4:68:ad:a0:2e:0b:4e:e5:f7:e0:a3:c7:3a:53:99:
3a:6c:d3:17:b0:64:bd:e2:66:ef:d7:0d:57:75:e7:
14:5b:34:dc:34:e1:5f:51:83:6d:b7:4d:cd:25:70:
26:6a:e9:ea:29:a9:50:78:20:e0:00:46:0c:d1:ba:
96:05:8b:cb:87:9f:51:ae:e6:61:66:54:06:3c:03:
3b:2f:95:b7:5e:ee:fd:a3:4e:00:61:2c:38:db:64:
6f:20:52:f9:a0:f4:45:01:97:ac:5d:e0:6d:db:90:
12:ed:49:aa:18:a2:ed:ff:c8:f9:53:80:b3:e1:af:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:80:C7:7B:47:AF:CE:CA:98:9D:81:83:97:01:F8:34:F0:BA:DC
X509v3 Authority Key Identifier:
keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:22:45:ab:f4:b5:21:f2:46:32:0f:52:1f:30:37:a0:f0:
42:2e:65:c7:eb:26:17:e6:b5:ee:15:80:50:18:1a:60:4e:4d:
13:8b:86:8d:72:ac:b4:b6:22:d1:69:ad:63:a3:57:1c:2c:32:
88:be:39:72:4f:34:85:a3:36:b6:3e:14:e5:dc:39:4c:c2:68:
8c:ed:34:49:ac:1b:31:b5:54:b4:bc:e5:92:a2:c1:f0:ec:16:
29:a4:dc:a5:36:cb:97:ae:ed:37:44:05:b6:61:81:29:f1:28:
20:44:08:f1:21:9c:23:d4:13:f7:da:e5:32:fe:c5:c5:2d:3e:
b7:77:b7:6f:4d:7f:23:1b:fc:74:cc:49:d8:e8:d9:96:7c:b7:
f6:f2:db:1f:b4:8b:36:72:1f:10:ac:8f:dd:61:5e:d3:22:63:
1a:bc:ec:be:70:48:9c:f0:46:e7:e5:77:50:96:55:f1:ee:88:
1f:f8:1d:e1:54:1b:8f:73:00:c0:c1:c6:d5:16:b2:64:49:97:
ac:cb:45:04:4c:2c:76:ce:f8:83:49:fc:32:18:af:2e:e8:1e:
6b:2a:dc:4f:f5:c6:b6:71:6e:d0:7d:45:01:4f:79:e5:74:19:
a7:ea:08:85:9d:00:54:c7:89:5f:1a:96:67:fb:02:e8:69:3a:
7f:34:46:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz
OEJFNTQwOUUwHhcNMjYwNDA0MjAzNjUwWhcNMjYwNDExMjAzNjUwWjAYMRYwFAYD
VQQDEw02OWQxNzY2My0xNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApB8UwOX7NA5z4XNs92dax+wh8YRew9BxeiwOy1o1MtY0tBOuThVDyhhRYsy0
Hgy3AHwVvA0uhtBPtV2HTYY9yqqcg/8CiutjVIhNqH/m6Z1X2qKaJbb3w2tLAyrn
Ovr21OIO4y+pXmvIlMxAOnNtpnns5BEPh5joxpx4MPRMCq+pbRjuvsGkaK2gLgtO
5ffgo8c6U5k6bNMXsGS94mbv1w1XdecUWzTcNOFfUYNtt03NJXAmaunqKalQeCDg
AEYM0bqWBYvLh59RruZhZlQGPAM7L5W3Xu79o04AYSw422RvIFL5oPRFAZesXeBt
25AS7UmqGKLt/8j5U4Cz4a/zaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBP1gMd7
R6/OypidgYOXAfg08LrcMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy
QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq
d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALRkiRav0tSHyRjIPUh8wN6DwQi5lx+smF+a17hWAUBgaYE5NE4uGjXKstLYi
0WmtY6NXHCwyiL45ck80haM2tj4U5dw5TMJojO00SawbMbVUtLzlkqLB8OwWKaTc
pTbLl67tN0QFtmGBKfEoIEQI8SGcI9QT99rlMv7FxS0+t3e3b01/Ixv8dMxJ2OjZ
lny39vLbH7SLNnIfEKyP3WFe0yJjGrzsvnBInPBG5+V3UJZV8e6IH/gd4VQbj3MA
wMHG1RayZEmXrMtFBEwsds74g0n8MhivLugeayrcT/XGtnFu0H1FAU955XQZp+oI
hZ0AVMeJXxqWZ/sC6Gk6fzRGWA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:05 2026 by rpki-client