
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: RSHbwW9xhDm2MZoT/a7OyU+1WcLy9q/JsXPp7pe3vzY=
Subject key identifier: 89:D9:BF:72:FC:F3:7B:32:65:0D:E4:EC:CE:43:E7:DB:9D:7D:43:3B
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 09C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0988
Signing time: Sun 26 Jul 2026 20:36:59 +0000
Manifest this update: Sun 26 Jul 2026 20:36:59 +0000
Manifest next update: Sun 02 Aug 2026 20:36:59 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: qFnmTZYQg91RuX3m6r4mhZr8stfxeRtzpRTEEwbJW7M=)
2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 557V948ytFkQmXJP+v3O6OYFApLgKOKU4oIchZma6K0=)
3: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: PWpc1YrCi7YtcELVVhl8DbjOytPByeC79d1ZomEe97A=)
4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: y7JlO2eVn5CGG014i1w2l8zlQaUpGUw0Z7qDmj0ckcI=)
5: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: aB93Fkooc5xfwz7ats42i1ahre7sd4cQ605Ubo23aE4=)
6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: KabuLJ2jMh9Q4wRFwssFjvelmr/DGXwkhCP7WPPdCU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Jul 26 20:36:59 2026 GMT
Not After : Aug 2 20:36:59 2026 GMT
Subject: CN=6a666feb-18c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:76:b7:40:6c:ba:a6:00:6d:c8:b6:25:e9:
82:5d:2e:da:3e:67:3d:fa:5c:69:57:a9:56:a1:87:
75:a4:ce:08:3b:ba:b9:0e:5c:a9:7f:94:bc:34:49:
99:3f:2f:83:a8:1c:0d:25:7b:0e:f5:f7:3f:62:ac:
12:00:16:e1:00:21:e1:83:75:49:67:09:8f:5e:a3:
f3:2c:42:bf:24:fe:55:88:35:51:88:36:c9:eb:34:
e3:63:dd:13:5b:f0:56:58:ee:a9:ef:35:e1:f0:76:
fd:c0:ad:a0:24:73:33:84:8f:ba:33:ca:d5:96:d1:
35:ce:a3:1a:09:2c:ae:c6:5d:51:e0:c5:29:25:a4:
d0:e3:40:6c:65:4e:24:96:f6:99:a6:b6:ec:6c:48:
7d:5b:87:18:ff:16:4d:32:fd:d8:a2:af:0a:39:36:
03:8e:2e:99:a7:e2:3e:c6:0e:01:56:f4:d1:40:26:
3b:3d:dd:62:02:bf:34:6d:35:aa:19:42:d9:70:a6:
ce:75:51:43:43:a8:f2:1b:34:38:4a:64:52:3a:85:
fa:84:0e:f4:bf:db:f4:58:2a:9c:75:fb:f3:23:8d:
58:b6:3b:0a:50:d9:7c:bd:23:35:bb:e8:07:5b:8f:
5b:f2:38:53:cf:55:d7:38:17:95:cc:37:ea:8d:04:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:BF:72:FC:F3:7B:32:65:0D:E4:EC:CE:43:E7:DB:9D:7D:43:3B
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:48:c7:3d:ab:d3:54:44:d0:1d:c8:2c:b2:52:1b:b4:85:
17:64:11:c7:79:4c:98:c0:cf:46:3b:8b:cf:55:8b:51:0f:d7:
d5:02:ca:c7:39:16:e9:c9:d1:c9:99:41:d0:85:da:95:ae:75:
e1:de:e9:2c:20:61:76:5c:55:9a:26:60:6a:dc:8a:1d:d0:8c:
da:cf:d3:f9:3b:15:06:b8:7c:1f:0a:3b:18:3a:49:a6:7a:98:
4c:5d:4c:23:10:5c:8b:e6:ac:b2:13:55:c7:82:82:05:50:16:
fe:98:0e:bf:4a:3f:2f:af:56:d1:5d:1a:76:6f:4f:db:ef:7d:
a0:ce:9d:1b:e8:5a:a5:dc:7d:af:93:f8:bf:3e:12:7c:a6:a5:
df:c4:98:19:08:d3:61:41:ef:c4:a0:c4:43:9c:4d:4f:9e:58:
84:69:1d:52:85:c8:bf:7c:24:4c:28:73:db:11:ff:ba:82:28:
9d:7d:b8:ee:71:3f:b0:e9:ed:36:f8:71:9c:08:9e:8e:c0:a9:
83:68:69:d0:8b:c9:5f:b4:dd:11:c0:df:15:ce:9b:fb:5e:76:
38:79:6f:09:d7:3b:89:52:b2:fb:24:6b:41:ea:34:3b:75:fc:
f1:19:72:46:c7:72:c2:23:d9:e1:97:15:1d:77:ea:ee:97:84:
57:c9:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:34:59 2026 by rpki-client