
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier: 2oXidLByqqnOvaCbwjHJVHCjCXBw2PR3fZ/s8kXmle8=
Subject key identifier: F7:90:BC:E6:CE:46:A3:F9:98:42:7D:E2:3D:3B:AB:F7:25:AE:FA:27
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial: 0416
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number: 0400
Signing time: Sun 05 Apr 2026 00:13:46 +0000
Manifest this update: Sun 05 Apr 2026 00:13:46 +0000
Manifest next update: Sun 12 Apr 2026 00:13:46 +0000
Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: 8GxC6kp3iYSI34vr31AJvqpdaZxVSihcvTu7zmZZjmw=)
2: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=)
3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: cDFKFHhC5GlJqNQ2HDJvUzee5BZxbAM3dWkd8XKUt+8=)
4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1046 (0x416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Validity
Not Before: Apr 5 00:13:46 2026 GMT
Not After : Apr 12 00:13:46 2026 GMT
Subject: CN=69d1a93a-3a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:41:04:69:30:75:01:72:b8:63:90:6f:03:
c0:01:60:13:ca:f4:3d:20:cb:59:6f:d1:ad:97:39:
4c:77:46:79:cf:71:ac:22:ac:b0:5d:be:c2:ad:3e:
25:77:61:e7:aa:91:ff:6e:6e:28:f9:6d:73:08:5a:
d3:52:29:14:2f:a7:45:1b:9a:c3:52:2d:43:ae:cf:
31:1b:9a:b0:35:06:80:70:1f:df:ad:0d:ea:84:e9:
c3:7d:36:45:29:03:78:10:9a:25:85:4b:0e:b5:e5:
9f:0b:79:aa:0a:7e:3c:57:3c:77:7d:4f:a4:4f:90:
d5:90:02:48:a4:c0:67:55:e9:c0:fd:05:1e:e2:af:
80:33:47:04:4f:f7:a5:ef:83:a2:04:63:34:0d:7f:
48:95:34:16:c8:76:4e:1a:21:48:2e:40:29:a6:58:
0e:43:e5:3a:0c:3c:2a:ac:9d:a6:45:54:5b:4c:6e:
a5:a2:d8:0c:b1:fb:8d:79:33:11:c3:ef:b5:f9:54:
91:25:3e:2b:95:dd:d0:50:5f:fa:d9:f6:8c:02:eb:
bf:8e:03:dc:d0:ec:33:98:35:d4:7e:79:84:8d:f8:
ae:e9:f1:a6:23:a0:5f:de:96:c8:73:99:36:ee:a5:
25:79:2c:e5:99:17:84:54:72:32:c4:e0:db:f3:65:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:BC:E6:CE:46:A3:F9:98:42:7D:E2:3D:3B:AB:F7:25:AE:FA:27
X509v3 Authority Key Identifier:
keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:eb:ef:91:fd:39:b8:93:a1:2a:eb:67:8a:3f:03:48:46:
7c:de:f1:f2:c7:d6:cd:97:7f:cb:01:4f:4f:6d:15:76:84:d7:
1d:f9:ea:cf:0b:d0:7d:dd:41:69:21:1d:2d:91:e9:9a:71:2e:
d2:89:76:29:58:86:0f:26:cd:77:f8:89:1d:be:fc:e2:26:64:
5d:04:d1:ad:c0:d8:de:69:c1:20:09:41:91:77:61:f6:de:70:
68:61:74:c1:39:12:ae:e7:54:1d:c3:e5:15:ad:e6:26:55:74:
83:0f:c8:f9:61:02:f7:fc:e4:72:f0:2d:5e:7b:ab:cc:1b:89:
fb:20:21:7d:1e:d9:f7:0a:4c:55:0d:29:24:d2:57:78:f3:40:
46:18:a4:4f:87:64:4b:d8:f0:a6:37:8c:2d:a4:8d:4e:91:23:
72:35:3c:32:3a:41:24:8c:e3:dd:7d:36:7d:87:a1:71:8b:2e:
24:0d:18:4c:84:14:32:7b:4a:73:aa:d5:f9:7f:67:70:0c:01:
47:16:0d:8d:6a:6f:4d:72:3b:1e:03:9d:b7:c6:0e:e0:7d:69:
77:ee:c4:f3:c1:15:c7:00:89:ed:05:d4:da:17:c3:4d:09:87:
9e:26:83:86:aa:dc:e0:5a:12:f5:71:bd:f5:4c:1a:ec:ff:88:
b7:59:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:36:37 2026 by rpki-client