
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier: EhHhLDfIBiRI2JXbMtm5dp1wERw1o9jSkico2mVnF8I=
Subject key identifier: 7F:4A:52:C9:7E:A2:A3:12:5B:80:FE:F7:A1:07:5C:57:97:C7:EA:F2
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number: 08A7
Signing time: Tue 06 Oct 2026 20:44:01 +0000
Manifest this update: Tue 06 Oct 2026 20:44:01 +0000
Manifest next update: Tue 13 Oct 2026 20:44:01 +0000
Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: s3TruE4iKMLYy6QWX4GOS6/4OOSaDFt2WElnepExWlA=)
2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Validity
Not Before: Oct 6 20:44:01 2026 GMT
Not After : Oct 13 20:44:01 2026 GMT
Subject: CN=6ac55d91-2d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:34:62:03:7a:cf:2e:d1:83:61:da:ac:7e:
ab:61:f5:13:97:9d:45:b1:3f:65:f2:cd:82:d2:30:
79:f9:47:33:a3:75:c8:6d:77:d5:29:53:63:33:b7:
4a:0c:0c:0f:f7:ab:d0:48:b4:ef:a1:f4:4e:93:1d:
d9:8a:22:3b:07:7a:c1:bc:d9:c2:51:59:0c:49:91:
18:ac:c1:33:8a:49:6f:8a:f5:ba:68:93:69:ab:1c:
b6:f4:82:4c:8a:71:ab:7a:66:bd:20:88:f6:65:fa:
ea:34:cf:9a:5c:2e:c2:92:11:0e:3c:1c:54:3f:a8:
c8:9f:40:94:7a:86:46:26:3e:90:1e:35:95:ce:c6:
67:92:b8:9c:93:37:98:15:60:b7:b3:db:cc:18:75:
ff:2b:d3:3e:b3:57:f8:b8:a1:83:ac:fd:94:f0:9c:
bf:a2:1d:36:c2:6d:0f:36:70:b1:b5:7c:3e:2e:3f:
aa:6e:3a:57:e0:08:c7:b9:6b:7d:72:3a:33:e5:a9:
21:55:15:78:9a:a4:8b:2a:1e:53:00:e1:f5:d7:e7:
a7:79:6c:32:2f:8e:84:ee:4e:86:0e:d3:12:6d:be:
0a:34:3f:c2:23:96:90:91:10:bf:c7:40:21:2b:c3:
94:b8:f5:99:09:2e:57:27:ef:0e:cb:44:0e:2f:55:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:52:C9:7E:A2:A3:12:5B:80:FE:F7:A1:07:5C:57:97:C7:EA:F2
X509v3 Authority Key Identifier:
keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:81:a8:74:4c:b1:68:f0:dc:c5:57:3d:1c:e6:14:3f:a6:eb:
0a:7b:b9:c6:a9:49:9b:21:fa:db:82:30:6c:f9:ec:5f:2c:9a:
e7:09:96:84:27:6a:fd:53:71:35:09:12:7c:29:af:04:14:93:
8a:2c:e0:47:1e:e1:c1:84:33:88:32:0a:d0:e7:8a:a7:47:2f:
3c:e6:9c:ca:05:4b:9a:60:d3:49:28:1c:d5:82:c7:0a:db:c4:
1f:94:2b:ff:d4:d2:3d:75:fd:53:03:ac:8c:da:20:ae:1c:73:
42:5b:6a:5b:65:bd:03:b4:f1:a0:e6:9c:08:d9:b8:19:d9:1b:
04:29:22:d3:65:b5:b8:2e:26:3b:0b:0a:de:e6:cf:39:fa:b5:
be:cd:de:23:6a:b1:e4:d8:4a:6e:30:af:b8:46:c7:f9:23:78:
c5:b5:09:c3:99:6d:5a:da:55:a3:7b:c8:26:5e:e2:e0:c8:f0:
96:08:c8:2d:67:67:b3:da:99:ec:3d:6f:3e:e9:69:34:eb:aa:
b4:91:5a:bc:ca:4d:eb:9b:31:18:37:d9:63:b6:15:37:67:9e:
cd:cf:99:3d:72:a9:42:c6:fc:a5:1f:5c:55:02:e1:f1:85:fa:
8d:d2:e4:f6:fa:dc:b3:5d:02:2e:46:89:0d:df:9b:53:0e:e6:
40:a7:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:04:07 2026 by rpki-client