
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier: XEZHPBL96C4IuxXT9OzZ3+/UrYfSw80a2DNgVpN3Pkg=
Subject key identifier: 47:8B:23:1F:A2:0D:DD:0D:84:06:A2:DA:22:B2:58:2E:D8:61:02:1A
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial: 047D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number: 0463
Signing time: Wed 07 Oct 2026 00:15:54 +0000
Manifest this update: Wed 07 Oct 2026 00:15:53 +0000
Manifest next update: Wed 14 Oct 2026 00:15:53 +0000
Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: wnrPIlRfxO8fDDHfSAELkGT4Riaz4T3HyZUIMG5rBo8=)
2: 1D30B9BEA7A411F192B38F0D4C11F970.roa (hash: S2r3R58U9HZx8Oj62ub3ESAs357F2eSsSbNvAZ9A3m8=)
3: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=)
4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Validity
Not Before: Oct 7 00:15:53 2026 GMT
Not After : Oct 14 00:15:53 2026 GMT
Subject: CN=6ac58f39-84da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:58:c2:fa:00:e3:25:e4:48:5f:ac:4d:d2:
be:f0:26:3c:2f:63:21:d8:ac:28:1f:b6:b3:0e:37:
60:55:52:dd:67:1d:f1:5f:35:fc:3f:4f:e0:96:55:
84:7d:7e:2c:2a:ef:42:4a:af:13:6d:22:f3:42:12:
0e:1c:ee:84:40:89:1a:6c:19:2b:4a:74:26:63:fd:
47:83:6d:ce:72:b1:b7:91:da:0f:7f:4c:4a:00:6a:
d0:a2:49:1e:aa:23:d0:46:8a:72:18:e6:c2:89:53:
d1:e0:69:5c:e2:a3:f6:65:c1:58:55:2a:24:c0:0f:
ae:01:b6:a4:e1:30:06:3b:2f:4c:6b:49:78:23:45:
cf:35:db:29:5a:03:10:e8:c4:7e:7a:ab:26:61:d5:
47:c4:41:13:5c:60:08:35:30:8e:ba:4a:ed:8c:72:
2a:7e:85:46:d6:01:07:9e:ab:7c:59:91:17:b4:2a:
61:cf:6a:ce:4e:a6:b9:d0:2d:e5:f2:cf:24:94:de:
71:65:2f:c6:e8:dc:68:d7:9a:09:d2:f7:66:c4:9e:
08:c9:c1:90:93:10:a3:bc:ea:f9:22:58:25:98:f2:
a3:e9:6e:5b:d2:05:d4:e6:4d:ee:63:b7:66:a3:74:
b2:f0:e8:4a:30:b7:fd:20:8e:e0:2a:1d:fb:cb:84:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:23:1F:A2:0D:DD:0D:84:06:A2:DA:22:B2:58:2E:D8:61:02:1A
X509v3 Authority Key Identifier:
keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:5f:bd:b9:ef:b9:c2:f4:b3:da:bc:13:4e:95:73:fe:7d:
1d:03:e6:bb:09:8a:ec:ec:91:94:67:fc:8b:2b:38:6f:09:fb:
81:6f:62:a4:83:39:fc:b5:17:49:29:f2:20:70:38:0b:93:a8:
ac:2f:32:21:8f:3a:6c:72:f0:d6:06:1c:63:7e:cc:2d:93:70:
2a:b8:d0:86:a3:2d:d7:41:b8:7d:20:80:cf:8c:da:ff:6b:ee:
2f:c6:cc:53:51:99:fb:07:b7:82:0d:1d:6c:c9:16:cf:17:45:
f1:3b:fe:fd:1e:44:e8:c9:3d:c9:92:1e:da:b1:64:67:92:9e:
a6:ef:5f:9d:d8:9d:ce:50:3e:12:6e:b3:87:3c:7b:9b:be:d5:
13:06:f7:be:a5:dd:be:8c:22:db:86:5c:0a:cc:fd:3b:dd:f1:
c0:2d:9b:54:9f:66:36:62:fd:f3:1a:4e:ed:6c:7c:b8:24:40:
34:78:e7:ea:1e:56:71:3d:b3:b0:ea:6a:b3:48:75:70:86:31:
ba:8f:20:f1:07:91:1d:5c:41:ec:68:34:bd:dc:a2:ff:03:c2:
83:45:20:6c:f5:72:9f:af:9c:c4:08:55:3f:5e:50:4c:ea:84:
a2:4d:11:05:fe:68:a8:33:ad:ac:00:d3:ec:1c:e7:51:7a:d4:
1b:ff:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:19 2026 by rpki-client