
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier: qlrkj21dRP1EpP8AUp9y73Q+bIYIzda4qr9pytoly0s=
Subject key identifier: D7:D0:4E:45:01:62:44:FF:13:CB:E9:9D:6C:85:E9:47:51:95:46:80
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial: 0D41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number: 0D37
Signing time: Sat 04 Apr 2026 17:54:27 +0000
Manifest this update: Sat 04 Apr 2026 17:54:26 +0000
Manifest next update: Sat 11 Apr 2026 17:54:26 +0000
Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: W24oDlznGvgIGi7eNJzSaldvey7bXE3Io/m6ir0tpbA=)
2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Validity
Not Before: Apr 4 17:54:26 2026 GMT
Not After : Apr 11 17:54:26 2026 GMT
Subject: CN=69d15053-dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:80:92:e6:bc:16:e7:ca:17:ce:7c:84:e9:
6c:bd:5b:32:ef:93:03:cd:ce:fe:57:2e:7e:36:a8:
38:e1:d9:54:f8:30:15:50:e1:08:85:1c:a4:de:68:
07:db:3c:25:5b:37:c3:9c:d3:23:b0:29:2d:7e:4f:
d9:6d:67:be:80:b7:f7:05:87:66:52:3d:9e:f5:f7:
24:02:e3:5c:f1:46:d4:b5:4e:4b:47:69:85:0f:f0:
13:43:91:1f:4a:0d:1c:87:fb:71:81:c3:e2:54:1b:
7b:4d:72:a3:a7:16:d0:1e:15:e6:01:61:b2:0e:d4:
fe:9c:93:97:b5:9d:f2:a1:29:89:b0:ab:e0:a8:5f:
f3:18:6c:d6:1e:8b:a5:77:b0:f8:57:6b:6b:c7:4d:
af:e3:43:e0:cb:4b:1e:cf:57:1c:2d:9a:20:86:1e:
79:bc:85:54:82:cc:13:ab:e1:61:1a:47:cb:b2:9b:
b1:35:7d:68:ac:48:fd:71:5b:fd:04:16:90:1f:8c:
1f:93:c5:0e:7f:e1:5a:b7:47:e6:87:45:c3:f8:70:
08:c4:bb:ec:8e:98:99:3a:8d:c9:6d:40:09:0e:12:
52:24:4f:9a:4f:9b:a4:8b:46:ea:b9:a9:0c:a4:e0:
38:03:14:2a:59:f0:d3:ae:53:2f:f0:9f:82:31:84:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:4E:45:01:62:44:FF:13:CB:E9:9D:6C:85:E9:47:51:95:46:80
X509v3 Authority Key Identifier:
keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:10:5d:1c:69:cb:23:9a:2f:7a:22:e2:e4:bf:b9:2a:a6:f5:
24:8e:da:59:d0:4c:dc:cc:e1:08:be:2c:3a:be:f6:ec:77:07:
38:e5:3a:06:a2:26:b3:07:a6:f4:32:f4:a1:7f:9e:a6:c2:44:
de:ef:ad:a3:70:e3:f1:7c:cb:91:40:4d:d3:62:54:6a:03:26:
25:c7:0d:8f:9b:47:09:49:2a:9e:cd:d1:62:ea:14:aa:c7:7a:
87:e5:84:df:b7:f6:2f:aa:40:ca:56:3c:d8:38:ab:90:f2:4d:
91:9b:b8:7a:47:a3:02:66:9e:d5:b1:67:a7:cb:21:ff:be:d5:
fb:12:3e:2c:f1:56:9c:67:ea:fa:25:14:29:9a:5e:4a:cc:54:
32:5a:9c:bc:5c:a2:ae:83:54:10:d7:dc:4e:e6:12:79:d6:6f:
33:8d:80:fb:8b:91:1d:9c:bd:a8:ea:9d:91:4b:7d:33:cc:7b:
c7:9b:76:12:cc:da:be:a1:61:56:da:a1:e1:d5:ee:98:03:c5:
b3:be:75:11:4c:d9:5b:6c:a0:55:16:a9:22:1c:04:dc:63:5f:
9d:3e:0b:86:5d:78:b0:22:a8:6f:89:93:bc:c8:7f:bd:d1:98:
c3:20:34:13:d6:db:3e:89:51:c1:ed:bf:ff:2a:42:7c:0e:0f:
c9:7c:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:42 2026 by rpki-client