
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: uXt3nmUTW3GGPiNT1JrG7O7N78PXDkOx7AQsso6slr4=
Subject key identifier: F6:55:AF:8B:73:45:B2:3D:2E:68:81:F8:26:92:46:DA:CE:53:80:81
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 098C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0958
Signing time: Sun 26 Apr 2026 20:04:47 +0000
Manifest this update: Sun 26 Apr 2026 20:04:46 +0000
Manifest next update: Sun 03 May 2026 20:04:46 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 4IsFZNhkxHuXFRJGYCYSmKjXu0reR3q8voF3Aq3fA1I=)
2: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
4: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
6: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: ulIWI26V47R53BZSt6uCetTpw45HUPI+vILpTZRiHGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 20:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Apr 26 20:04:46 2026 GMT
Not After : May 3 20:04:46 2026 GMT
Subject: CN=69ee6fdf-0df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:43:3b:87:dc:09:43:91:51:19:8e:23:56:
c7:0a:9f:a0:4e:b5:76:d4:4f:70:86:80:4b:4b:54:
64:9e:89:8a:e8:f3:46:92:e7:a9:02:eb:23:9b:e8:
89:6d:47:5b:6d:75:00:3f:9d:e4:a0:67:d9:3d:8b:
b1:a9:d7:54:d0:ea:08:ce:56:6b:1e:21:32:fc:33:
49:1c:be:75:5c:20:64:94:1b:17:f6:fb:ee:6f:d1:
fb:94:df:14:3c:5b:7c:e9:95:10:00:d7:0a:fc:09:
b9:f8:21:9b:83:2c:be:ec:50:a7:a6:a0:b1:0c:8b:
fc:c7:8a:9d:98:54:e2:a2:c3:11:ab:cd:1d:e4:c0:
42:13:64:b4:3b:c9:25:70:1e:b4:29:39:f1:fd:3c:
4a:34:32:f6:03:64:da:4b:a8:25:3a:4c:b1:c5:23:
a8:ac:0c:4c:ba:78:ee:78:6e:ad:fd:7a:ed:f4:30:
fe:ba:9f:6a:73:37:c3:e2:74:17:71:ef:ef:bb:f4:
59:30:2d:f1:c5:24:a3:6f:21:b8:78:9e:31:99:42:
df:10:7b:9a:7b:c6:ea:99:d9:31:43:f6:10:c2:e2:
f5:20:cd:8d:ce:d6:42:be:5c:20:4a:44:dd:56:6b:
fd:49:76:47:34:d8:e2:90:2a:cd:61:97:e9:c8:28:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:AF:8B:73:45:B2:3D:2E:68:81:F8:26:92:46:DA:CE:53:80:81
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:63:a9:de:67:a2:e5:58:4e:b1:b6:f2:c1:7d:62:b9:63:5c:
8b:c5:c0:27:f8:13:df:a4:d1:f5:24:7f:4e:9c:d5:39:79:ea:
01:24:3c:4b:82:fc:0b:d1:18:02:0e:68:9d:3e:50:fa:dd:0d:
7b:7d:8b:6b:1a:9b:83:5a:94:47:5c:91:a5:ac:c6:89:f9:f6:
80:b4:ed:74:c6:bb:02:7e:ee:32:c2:db:05:61:0d:66:54:29:
a3:84:ab:b2:95:fd:91:db:a6:98:96:c4:a1:d4:07:51:32:e3:
75:ae:4e:d0:2c:b7:a2:5b:e9:83:e5:87:ca:26:9b:3b:f8:6a:
e8:79:23:e0:48:28:a7:d3:1a:2e:76:52:e5:49:9f:a2:86:d5:
24:97:9d:be:24:6a:73:8e:49:66:c9:22:be:22:e3:e5:c0:74:
25:3f:ed:b6:cf:37:62:ea:be:02:f7:b8:73:70:92:d3:ac:e4:
47:8e:94:ec:98:f8:de:2d:03:06:4d:38:2e:90:5c:32:58:64:
c2:53:ff:74:6e:6f:c3:91:52:b2:9b:18:dd:ea:1f:dd:32:9d:
df:2c:db:cb:50:45:04:dd:b2:90:61:7f:48:4c:77:af:39:38:
3f:3a:77:34:e0:32:d2:2d:b9:2b:e6:1f:4a:bd:ed:75:de:3f:
d7:c0:be:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjYwNDI2MjAwNDQ2WhcNMjYwNTAzMjAwNDQ2WjAYMRYwFAYD
VQQDEw02OWVlNmZkZi0wZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzoBDO4fcCUORURmOI1bHCp+gTrV21E9whoBLS1RknomK6PNGkuepAusjm+iJ
bUdbbXUAP53koGfZPYuxqddU0OoIzlZrHiEy/DNJHL51XCBklBsX9vvub9H7lN8U
PFt86ZUQANcK/Am5+CGbgyy+7FCnpqCxDIv8x4qdmFTiosMRq80d5MBCE2S0O8kl
cB60KTnx/TxKNDL2A2TaS6glOkyxxSOorAxMunjueG6t/Xrt9DD+up9qczfD4nQX
ce/vu/RZMC3xxSSjbyG4eJ4xmULfEHuae8bqmdkxQ/YQwuL1IM2NztZCvlwgSkTd
Vmv9SXZHNNjikCrNYZfpyCiTlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZVr4tz
RbI9LmiB+CaSRtrOU4CBMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK
ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASWOp3mei5VhOsbbywX1iuWNci8XAJ/gT36TR9SR/TpzVOXnqASQ8S4L8C9EY
Ag5onT5Q+t0Ne32Laxqbg1qUR1yRpazGifn2gLTtdMa7An7uMsLbBWENZlQpo4Sr
spX9kdummJbEodQHUTLjda5O0Cy3olvpg+WHyiabO/hq6Hkj4Egop9MaLnZS5Umf
oobVJJedviRqc45JZskiviLj5cB0JT/tts83Yuq+Ave4c3CS06zkR46U7Jj43i0D
Bk04LpBcMlhkwlP/dG5vw5FSspsY3eof3TKd3yzby1BFBN2ykGF/SEx3rzk4Pzp3
NOAy0i25K+YfSr3tdd4/18C+qQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 02:05:50 2026 by rpki-client