
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File: 9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier: QTgnz5lF+BLl2Fys4J1iaWs1LRyAkzHEOsSF/SHb4vU=
Subject key identifier: 96:7B:44:09:77:C8:34:1E:39:E0:2C:80:14:4D:17:42:AE:16:1A:60
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer: /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number: 17
Signing time: Tue 23 Jun 2026 09:16:30 +0000
Manifest this update: Tue 23 Jun 2026 09:16:29 +0000
Manifest next update: Tue 30 Jun 2026 09:16:29 +0000
Files and hashes: 1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: 9qoEoX+MJt4Sn3xco37i0pSdPxRc4gKhMFSWpiVJ/qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Validity
Not Before: Jun 23 09:16:29 2026 GMT
Not After : Jun 30 09:16:29 2026 GMT
Subject: CN=6a3a4eed-2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:50:30:43:4d:e9:6c:aa:65:92:b9:fe:2b:
32:26:cf:bb:97:d0:c7:65:6f:4a:17:be:05:d5:b1:
41:07:9f:3d:af:c2:d5:52:5f:6c:fa:d9:36:cb:3f:
a3:61:15:12:47:f3:01:6f:5c:53:ed:c5:e7:73:91:
0b:04:9d:77:75:18:c0:4d:d2:a2:4e:ed:f6:04:43:
74:77:17:aa:9a:84:47:5e:77:8f:70:5d:20:4c:87:
53:34:3f:8b:b2:11:dd:4f:a1:f3:ab:d6:f8:64:c6:
85:96:a6:f0:86:da:84:16:06:2a:5c:aa:35:ab:64:
3b:ca:e4:60:23:12:54:ae:fc:86:20:e9:f8:33:98:
bc:13:61:75:51:28:8e:0a:c9:fd:e1:5f:24:fe:e2:
d6:08:30:96:b2:8e:01:ea:12:19:13:9b:83:9f:d3:
64:54:72:a4:db:89:d9:df:71:53:ad:13:94:d8:71:
0f:7b:d7:f4:2b:e2:b0:bc:44:33:37:6e:b7:23:58:
af:32:a0:68:43:e9:6b:5a:ba:94:1f:23:ee:a2:9c:
4a:7b:52:b0:1e:bb:d5:b8:47:cf:e8:5e:02:aa:bd:
43:18:42:1d:f4:a4:7c:63:73:c6:28:7c:41:3e:be:
13:06:76:aa:75:e0:0a:97:b9:a3:af:fc:f2:34:3d:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:44:09:77:C8:34:1E:39:E0:2C:80:14:4D:17:42:AE:16:1A:60
X509v3 Authority Key Identifier:
keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:6f:60:7a:5c:20:47:be:58:a8:67:3d:8d:d9:03:00:04:
66:ce:4b:43:81:59:53:ef:78:21:c2:46:e2:6e:ee:48:40:c2:
65:b2:65:16:05:bd:e3:1e:12:eb:71:88:10:e4:50:f7:01:9e:
a6:d1:98:be:6e:7f:cf:64:79:0b:3f:f5:9a:82:24:8c:a3:13:
2d:fc:f4:1b:5a:e9:b3:1b:fe:b6:a0:38:56:db:38:69:73:0a:
a1:85:27:fb:c5:c5:1f:43:a9:27:87:5a:70:7b:ec:5c:fb:2a:
79:5d:93:25:75:f9:c4:54:c4:47:c1:a7:61:8b:4e:ee:aa:4c:
f9:93:d1:00:72:39:7d:1d:30:a4:2e:62:4e:ab:20:e7:08:99:
13:c6:cf:ae:44:e2:9d:b4:a9:2f:d6:6c:3a:17:0d:4a:26:bc:
57:59:06:6f:87:8a:8a:ec:cb:b1:38:be:10:e7:77:38:da:b5:
00:54:c0:cb:88:f1:be:89:67:82:fe:e3:4a:c0:90:16:35:29:
fc:ee:f2:19:61:8f:c3:21:24:a9:22:2f:54:93:a0:48:1b:88:
2a:02:d4:14:a6:75:6d:54:4a:e7:84:bb:9c:ed:a7:9e:b2:82:
44:be:3c:51:e2:97:79:33:3f:2e:6d:fc:26:4b:be:da:81:4d:
db:ed:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:06 2026 by rpki-client