
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: O9LPhiOz8l8/L+EirrYhGe8pFTpagf72pgCUlrXZldQ=
Subject key identifier: C8:7C:40:1F:0B:68:22:6C:68:E2:80:A7:86:FA:03:9E:0C:CF:39:4F
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 09A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 096F
Signing time: Wed 10 Jun 2026 20:08:59 +0000
Manifest this update: Wed 10 Jun 2026 20:08:58 +0000
Manifest next update: Wed 17 Jun 2026 20:08:58 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: DwG4uukvwehI3t0k5u0qdyMOeDserrWq/DtDEdC+Kkw=)
2: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: ulIWI26V47R53BZSt6uCetTpw45HUPI+vILpTZRiHGA=)
3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
4: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
6: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Jun 10 20:08:58 2026 GMT
Not After : Jun 17 20:08:58 2026 GMT
Subject: CN=6a29c45b-654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:3d:87:e0:a3:b6:91:24:f8:2e:dc:6b:1f:
d7:ae:92:12:5d:1d:79:48:32:63:96:28:8c:54:32:
43:ba:c2:c8:92:5e:40:af:3f:44:d5:1b:63:5d:fd:
a4:37:17:51:f2:fc:5c:cc:e6:b7:1b:e0:3c:f0:a1:
4f:97:07:5f:55:d2:cc:bb:07:e3:7e:60:94:ec:bb:
a6:46:70:36:fc:71:9d:ff:69:e2:3b:e0:b8:88:93:
72:4f:a1:78:5d:36:9a:d3:51:c2:13:4c:21:96:e2:
e7:66:a0:89:58:95:59:ea:8b:21:54:24:c8:92:52:
f1:a4:94:bf:51:cc:86:83:a4:c3:d3:45:50:d1:0c:
ee:09:8f:aa:03:10:2b:80:a2:9b:33:e3:11:7c:69:
ea:14:2a:70:54:05:eb:9f:90:4a:c9:f9:c8:13:28:
76:d5:12:4c:07:f6:7a:19:ab:a2:64:60:75:a9:6b:
b8:86:69:44:78:77:71:79:d0:6c:da:02:53:df:08:
68:82:ac:93:90:99:a1:22:18:35:a7:b1:8f:b4:4f:
2a:39:ec:42:e9:c5:48:33:7e:bd:a4:28:88:a4:db:
9d:b1:1c:23:aa:56:96:f0:6c:f6:84:38:b0:0d:86:
a3:54:a0:40:eb:a1:82:91:c3:34:a4:05:df:c7:6f:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7C:40:1F:0B:68:22:6C:68:E2:80:A7:86:FA:03:9E:0C:CF:39:4F
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:51:33:8e:e1:04:62:f3:71:9a:61:61:bc:c4:6b:03:ae:5f:
ef:a0:2d:4d:c7:5f:46:4c:d3:ac:41:46:51:29:b6:36:93:1b:
60:82:a7:57:5e:f9:0a:00:2e:0a:f0:0a:b7:55:5f:ab:53:28:
d1:7d:5b:29:95:d7:9d:b3:af:47:d8:e2:17:4b:bc:67:2f:81:
a9:f2:71:38:0d:c9:e7:2b:4e:7a:7b:91:c2:44:fd:63:36:b2:
8a:85:2d:db:72:85:de:5d:93:54:74:11:c0:ad:bf:c0:aa:06:
85:86:94:b2:ae:09:eb:57:f8:78:a0:01:78:2b:91:71:ff:50:
c4:4a:6a:0c:3a:b5:26:00:ea:40:83:0b:42:ec:53:d9:eb:08:
87:24:d5:b6:2f:29:3f:eb:b8:d0:5f:10:45:21:b4:87:70:6a:
dd:17:bf:98:3e:a5:d6:05:f1:08:f2:bd:ce:9b:46:81:35:93:
91:81:66:86:28:02:f1:7c:e2:e7:2d:e1:d9:3d:17:dc:df:d4:
dc:9b:a9:e5:ca:93:7e:45:c7:26:33:a3:20:ec:20:66:37:4c:
d0:cb:72:a0:62:14:c8:50:d7:4d:b2:5c:a0:6a:63:65:74:bc:
84:69:dd:f7:af:b3:c0:e0:34:bf:d4:72:8c:bb:81:e8:60:63:
64:31:fa:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjYwNjEwMjAwODU4WhcNMjYwNjE3MjAwODU4WjAYMRYwFAYD
VQQDEw02YTI5YzQ1Yi02NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5m49h+CjtpEk+C7cax/XrpISXR15SDJjliiMVDJDusLIkl5Arz9E1RtjXf2k
NxdR8vxczOa3G+A88KFPlwdfVdLMuwfjfmCU7LumRnA2/HGd/2niO+C4iJNyT6F4
XTaa01HCE0whluLnZqCJWJVZ6oshVCTIklLxpJS/UcyGg6TD00VQ0QzuCY+qAxAr
gKKbM+MRfGnqFCpwVAXrn5BKyfnIEyh21RJMB/Z6GauiZGB1qWu4hmlEeHdxedBs
2gJT3whogqyTkJmhIhg1p7GPtE8qOexC6cVIM369pCiIpNudsRwjqlaW8Gz2hDiw
DYajVKBA66GCkcM0pAXfx2/mJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMh8QB8L
aCJsaOKAp4b6A54MzzlPMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK
ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoFEzjuEEYvNxmmFhvMRrA65f76AtTcdfRkzTrEFGUSm2NpMbYIKnV175CgAu
CvAKt1Vfq1Mo0X1bKZXXnbOvR9jiF0u8Zy+BqfJxOA3J5ytOenuRwkT9YzayioUt
23KF3l2TVHQRwK2/wKoGhYaUsq4J61f4eKABeCuRcf9QxEpqDDq1JgDqQIMLQuxT
2esIhyTVti8pP+u40F8QRSG0h3Bq3Re/mD6l1gXxCPK9zptGgTWTkYFmhigC8Xzi
5y3h2T0X3N/U3Jup5cqTfkXHJjOjIOwgZjdM0MtyoGIUyFDXTbJcoGpjZXS8hGnd
96+zwOA0v9RyjLuB6GBjZDH67Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 15:10:17 2026 by rpki-client