
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: 8/csXf1wsaPRfCsnbPLhSlCH3UdNdV3a2jaO0JACTA8=
Subject key identifier: 01:AE:48:1B:B3:81:AF:74:EF:3D:35:C4:0E:27:ED:6D:14:52:AB:17
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 3559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 354A
Signing time: Wed 20 May 2026 14:49:09 +0000
Manifest this update: Wed 20 May 2026 14:49:08 +0000
Manifest next update: Wed 27 May 2026 14:49:08 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: u5jpK77D1LY6S5+I90du0f9nFKAV1Ulv113RYFPV+WE=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13657 (0x3559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: May 20 14:49:08 2026 GMT
Not After : May 27 14:49:08 2026 GMT
Subject: CN=6a0dc9e4-7ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:84:26:86:d4:de:5a:dc:4e:fb:d1:8c:50:
e9:25:60:ad:20:69:30:e3:c7:c4:3d:56:84:f9:d4:
86:ee:05:19:48:5b:ea:84:ff:83:bb:35:7d:ce:b2:
a9:bf:6e:f7:ce:9e:e1:2e:46:4b:e6:dc:99:32:d7:
b3:59:29:9f:b9:44:e8:36:b6:73:de:48:4f:e6:fd:
d6:55:58:5c:60:58:83:fd:85:97:25:24:ac:64:41:
45:57:7b:82:ef:68:25:26:95:de:00:42:9e:fc:86:
1c:3b:03:49:7e:22:a4:70:5f:14:c8:07:fa:6c:b6:
60:2d:01:83:5c:36:a2:7c:fb:12:ed:b4:3e:22:01:
92:2f:44:01:bc:f0:11:c6:f8:3c:2c:39:19:c2:14:
ad:13:92:15:37:b0:22:1d:26:66:14:71:7d:9b:18:
ce:28:f4:25:60:5b:c2:64:a2:0c:7d:c5:f3:86:52:
85:f5:da:c3:86:15:2f:38:63:88:3e:f5:78:09:bf:
a1:18:53:b6:1b:1a:7b:b6:66:7d:e4:89:f9:57:4d:
ff:d3:fa:a2:df:24:98:d9:13:56:f9:40:ab:8d:6b:
c2:49:c4:58:d7:c1:b2:dc:66:85:6f:28:a8:d8:18:
0b:2c:af:0b:2a:93:b0:62:cd:c8:50:23:b0:d7:9c:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:48:1B:B3:81:AF:74:EF:3D:35:C4:0E:27:ED:6D:14:52:AB:17
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:77:ab:5c:4a:90:f1:a3:46:c3:74:68:57:e4:95:e6:b7:
bf:e4:a8:53:60:4a:3e:70:df:28:af:cf:3a:99:51:ce:d6:bf:
4e:a8:4b:fe:ba:ce:09:4e:6d:fb:84:43:e8:94:ff:8d:26:18:
81:72:2f:c0:66:53:b0:14:b6:d2:06:f7:6d:2e:9e:1e:cd:a2:
5d:48:93:62:34:76:27:53:36:55:60:8a:13:b4:5d:49:ee:5c:
fb:16:26:15:d3:b9:a6:99:d0:f0:f0:85:08:d2:76:2c:ab:84:
52:04:24:3d:fb:54:4b:6f:f7:65:48:d4:11:51:60:39:ab:b8:
03:0f:43:9e:46:a9:5f:df:cd:61:bc:a5:16:ef:77:ca:34:c7:
9c:66:0f:7b:2d:27:fa:2e:fc:01:d1:ca:98:5e:ca:4e:47:e4:
59:f0:80:dc:af:0f:ae:5a:3d:49:a4:c6:b4:d4:99:95:27:3c:
b1:d8:e7:ff:e1:b9:69:6e:2d:88:60:18:39:ef:13:12:08:39:
17:72:e9:a3:44:75:60:4d:04:49:62:1a:80:17:5d:a8:a6:7e:
9d:fb:cf:35:0b:46:82:65:41:5c:81:23:79:a8:e8:a5:51:fb:
b6:82:54:84:9f:ab:2c:4b:ac:46:0e:6c:aa:57:c4:20:09:3b:
32:03:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:25 2026 by rpki-client