
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft
File: 9PnwKGbuVid3J27ojgHOSK8fbA4.mft (raw, json)
Hash identifier: 5eoF/xXJvcfahqK7tvIOkHZA7Fz6tcGndoLDVV+K9qM=
Subject key identifier: 7F:37:FE:84:56:E8:47:D2:86:C3:B9:22:51:9D:A9:D8:3C:7C:F8:4D
Authority key identifier: F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E
Certificate issuer: /CN=A91E3813/serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft
Manifest number: 06
Signing time: Mon 19 Oct 2026 10:02:27 +0000
Manifest this update: Mon 19 Oct 2026 10:02:27 +0000
Manifest next update: Mon 26 Oct 2026 10:02:27 +0000
Files and hashes: 1: 9PnwKGbuVid3J27ojgHOSK8fbA4.crl (hash: wPIaonYrJPH5OZkRSLj4vemugqb57Xc1xwIXDM3NW1s=)
2: 953DE998C7CC11F1ACF34C4A5511F970.roa (hash: vp/ToHx9FzLbu7+lt1CfsmjwptDZTbZfXhs+z4b1FZQ=)
3: 94AFDC66C7CC11F1ACF34C4A5511F970.roa (hash: Ey9cmSz9vrRaa6o+xe2NiJVIsCtTEf701cikFQnUOmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl
rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3813, serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E
Validity
Not Before: Oct 19 10:02:27 2026 GMT
Not After : Oct 26 10:02:27 2026 GMT
Subject: CN=6ad5eab3-aacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:58:09:cf:d1:27:26:c0:db:78:c9:eb:49:
ed:fa:fa:aa:1a:1c:03:5e:13:36:d8:10:7f:6a:92:
cb:d2:33:45:76:92:f9:47:87:32:77:49:bd:3c:96:
16:5d:d1:8b:89:08:ad:37:a2:5f:61:c3:f9:45:ea:
1f:25:5a:1f:99:02:ea:6e:c5:c1:f7:ef:2b:7b:ad:
da:45:29:fb:9a:a8:cd:22:4d:65:5b:ec:95:98:c2:
e2:09:d5:d5:3b:8c:2b:63:b5:6b:10:7f:e8:71:a2:
f8:6f:a6:cc:ee:6e:05:48:67:4a:08:4d:77:9b:c5:
b6:8b:06:72:74:3d:fd:e3:fd:47:39:a5:80:1a:d2:
74:c2:57:ac:4b:4a:12:9a:e3:10:e6:49:7a:b5:c5:
f6:1d:f7:50:d4:b5:d0:6d:f6:33:af:9c:c6:cb:14:
be:21:c0:d2:66:14:71:09:20:40:b4:f9:c7:18:56:
63:87:84:53:6e:7a:46:63:2d:59:2a:f8:8f:be:80:
87:6a:28:3a:9a:12:b5:ad:1e:cb:80:3c:50:59:d3:
19:60:d1:42:b7:e6:4e:50:6d:48:53:47:3c:51:5c:
fa:25:cf:1b:cd:39:11:d1:ff:65:cd:8b:a6:41:59:
80:6c:e9:f3:cd:60:cc:ac:7a:a1:fb:fb:69:9c:39:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:FE:84:56:E8:47:D2:86:C3:B9:22:51:9D:A9:D8:3C:7C:F8:4D
X509v3 Authority Key Identifier:
keyid:F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4c:4a:e6:5c:9b:2c:55:2b:a1:89:a3:95:27:c7:29:ff:28:
d2:a8:7b:ac:c1:e1:0d:f3:b0:d8:57:8c:b9:44:a1:e8:2f:91:
6d:b1:47:55:37:53:7f:7d:f4:c5:49:af:fa:e6:04:a3:91:cd:
de:fa:a8:54:f2:b8:35:c6:aa:13:58:ad:08:77:5c:90:a0:0b:
f0:35:b1:b5:de:3e:17:8c:15:fd:fd:39:fa:1f:16:b8:d3:87:
5f:38:8c:e5:43:61:02:6a:f8:f4:53:96:e3:bd:f0:7d:40:9f:
1b:e0:ca:07:d6:3a:e0:95:fd:d7:9e:09:d5:b5:d4:0f:ae:15:
f4:37:f2:b0:c0:0f:93:00:e7:46:d8:7d:88:60:d1:ee:64:9a:
4a:ab:b4:f1:60:95:5c:40:71:a0:2e:e5:94:68:f9:4b:f0:d5:
b1:45:18:64:be:87:c7:95:3f:cc:84:00:c2:ed:1f:a8:bc:43:
e7:e8:6c:39:88:d1:99:55:a5:b5:3b:7d:7c:57:aa:58:07:20:
23:24:42:1c:c7:fe:a2:8d:c4:dc:9b:57:dc:4c:f2:4f:50:f2:
db:b9:31:9c:4d:75:e2:3f:20:65:7d:c3:6c:23:0b:0a:b2:4e:
53:55:6f:31:7b:12:df:90:fd:a8:94:be:27:a3:f8:5d:4d:2d:
f6:12:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:14 2026 by rpki-client