
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: bWFoN3YJLme0wkXp3v3OolitIwb+OYv6nq8GQ9Vx/U0=
Subject key identifier: 0D:69:42:F2:D9:63:FD:D1:0D:B0:68:4C:0F:A1:4A:A1:DB:FD:39:90
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 3542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 3533
Signing time: Sat 04 Apr 2026 14:47:37 +0000
Manifest this update: Sat 04 Apr 2026 14:47:36 +0000
Manifest next update: Sat 11 Apr 2026 14:47:36 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: CsE42g54wolAL1//p9Sx6jDK2Gez7hbIG7IBvGP7chI=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Apr 4 14:47:36 2026 GMT
Not After : Apr 11 14:47:36 2026 GMT
Subject: CN=69d12488-b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:0e:4d:0a:76:62:a8:a4:21:6c:5f:58:8a:
35:ab:e1:83:b1:a6:66:43:55:ed:9c:dd:15:cb:03:
96:e6:09:7f:0f:bc:80:ef:c6:44:fb:c3:f2:21:14:
c4:48:79:f2:0b:e1:1f:89:77:4a:7e:9a:6f:8b:81:
a3:97:16:8a:bc:22:1a:d3:e4:1c:7f:36:1f:c6:62:
b4:22:c3:e1:c0:98:eb:f4:75:fe:36:27:fc:b7:16:
90:7a:4e:85:30:f9:da:0f:f6:a3:ff:7e:4d:b9:06:
5e:00:36:4b:66:ad:09:b0:6b:e2:d6:e2:db:c1:f9:
8c:a7:c7:7f:98:4d:71:ae:ad:22:2e:71:bb:51:74:
c7:d8:95:12:d5:b9:2c:e3:83:23:bc:75:ac:6e:ec:
83:d1:e5:3f:aa:ba:c5:af:76:db:b2:5a:0f:ef:25:
49:7a:2f:96:8c:db:3c:8b:95:1c:d9:39:5c:85:c4:
0f:1e:34:b7:62:bc:ff:c7:cf:f6:e5:5a:9e:76:0a:
29:88:1f:99:d8:72:ba:c5:f5:3f:15:80:30:7e:ba:
ff:24:08:03:18:90:0f:25:5d:46:7f:43:33:91:7e:
bd:2c:4e:82:7b:9f:75:7a:2f:83:5b:70:f1:77:9b:
a9:db:51:cc:67:65:df:c0:04:83:66:01:39:ed:b7:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:42:F2:D9:63:FD:D1:0D:B0:68:4C:0F:A1:4A:A1:DB:FD:39:90
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:04:4b:e7:ad:97:b2:62:a8:37:75:68:3d:30:40:28:09:4f:
ef:98:21:94:94:32:f2:f0:2b:9b:04:5e:31:82:00:4e:71:9d:
58:1c:0d:09:a9:94:8e:dd:06:76:1e:27:1f:22:db:2e:5f:a3:
5d:0d:6c:82:46:bf:be:d3:ff:7c:3c:a7:0b:16:c8:ed:f0:0d:
07:a0:de:c5:36:e6:bf:ef:8b:b4:9c:28:92:fa:60:4a:d5:0e:
67:d9:8f:1e:f9:a0:d5:aa:47:b7:1d:2c:55:ca:b5:8f:01:05:
61:f4:5d:8c:5d:5b:7d:0e:67:07:99:29:25:e0:df:bf:bc:db:
70:8e:bd:85:7a:58:ed:23:08:9f:e2:88:eb:5f:8d:82:64:f6:
d6:30:06:2c:c5:e3:eb:5d:bb:9b:91:59:ac:78:ca:2e:71:ae:
11:36:7e:21:fa:40:6b:d4:ab:d9:33:70:3f:ed:d7:d5:16:77:
a7:a3:9b:e7:04:7b:27:a6:d0:66:d3:e9:a2:52:79:ec:2f:75:
ae:7b:2b:cd:84:e9:43:75:53:86:58:1f:68:0a:19:85:9a:c7:
ec:24:ae:28:ca:37:dc:72:be:3e:64:8e:e8:b3:6b:ef:8a:ff:
bd:b1:e6:4a:7a:74:e7:6f:33:15:a3:39:ab:01:79:2c:63:6c:
df:29:ab:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG
QUIyQzc2MTIwHhcNMjYwNDA0MTQ0NzM2WhcNMjYwNDExMTQ0NzM2WjAYMRYwFAYD
VQQDEw02OWQxMjQ4OC1iNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHsOTQp2YqikIWxfWIo1q+GDsaZmQ1XtnN0VywOW5gl/D7yA78ZE+8PyIRTE
SHnyC+EfiXdKfppvi4GjlxaKvCIa0+QcfzYfxmK0IsPhwJjr9HX+Nif8txaQek6F
MPnaD/aj/35NuQZeADZLZq0JsGvi1uLbwfmMp8d/mE1xrq0iLnG7UXTH2JUS1bks
44MjvHWsbuyD0eU/qrrFr3bbsloP7yVJei+WjNs8i5Uc2TlchcQPHjS3Yrz/x8/2
5VqedgopiB+Z2HK6xfU/FYAwfrr/JAgDGJAPJV1Gf0MzkX69LE6Ce591ei+DW3Dx
d5up21HMZ2XfwASDZgE57bfOlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1pQvLZ
Y/3RDbBoTA+hSqHb/TmQMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE
OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN
alRfaUFJSnFpa242c3NkaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArARL562XsmKoN3VoPTBAKAlP75ghlJQy8vArmwReMYIATnGdWBwNCamUjt0G
dh4nHyLbLl+jXQ1sgka/vtP/fDynCxbI7fANB6DexTbmv++LtJwokvpgStUOZ9mP
Hvmg1apHtx0sVcq1jwEFYfRdjF1bfQ5nB5kpJeDfv7zbcI69hXpY7SMIn+KI61+N
gmT21jAGLMXj6127m5FZrHjKLnGuETZ+IfpAa9Sr2TNwP+3X1RZ3p6Ob5wR7J6bQ
ZtPpolJ57C91rnsrzYTpQ3VThlgfaAoZhZrH7CSuKMo33HK+PmSO6LNr74r/vbHm
Snp0528zFaM5qwF5LGNs3ymrIg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:14 2026 by rpki-client