
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier: 6QjToHgYgodRKEFp0ht+CywkrG90tRMWZa2GtratrKY=
Subject key identifier: 9D:E2:EB:9B:3E:D9:90:86:29:C4:DC:AB:6E:93:27:77:7D:5D:E1:77
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number: 0736
Signing time: Sun 04 Oct 2026 22:04:47 +0000
Manifest this update: Sun 04 Oct 2026 22:04:47 +0000
Manifest next update: Sun 11 Oct 2026 22:04:47 +0000
Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: os6T2fcyeeUPKhKSDMSvdqDj8pF0QweCqqaLMNN735U=)
2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=)
3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=)
4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Validity
Not Before: Oct 4 22:04:47 2026 GMT
Not After : Oct 11 22:04:47 2026 GMT
Subject: CN=6ac2cd7f-fedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:10:c7:eb:b8:99:c9:1e:d8:43:cb:6e:66:
6a:17:fd:c3:c5:61:1d:12:67:4b:88:1a:2c:9f:e3:
26:64:00:ae:52:c6:24:30:36:c8:71:a4:db:cb:fa:
ec:2f:f6:c3:86:b3:81:74:80:15:e1:89:4d:13:45:
3c:c3:a8:af:02:38:3a:37:1b:22:2f:28:c9:a2:4d:
49:ed:9a:30:7e:29:8b:f3:23:7e:51:bb:a4:e5:7e:
24:27:7a:41:8a:59:8b:f9:fa:bb:31:e5:e4:47:06:
ca:52:4a:b1:00:dc:f4:3b:de:75:16:4e:fd:03:f9:
3e:4c:50:fb:d0:e6:0c:9d:22:b9:01:e6:d6:9b:c2:
93:be:aa:7d:fd:93:ae:2a:ac:b8:3b:00:6d:03:82:
d0:ed:bc:37:fe:34:9b:f4:4d:5c:75:2d:98:e3:5c:
00:d2:19:6d:0d:a8:29:46:2d:3b:00:8d:d8:15:c1:
b5:9c:96:be:9f:f2:23:9b:1e:45:fb:ec:2f:5c:6a:
0f:84:c0:0b:06:64:ed:75:9d:45:32:1e:0f:a7:54:
3d:46:d9:8c:42:50:85:f8:d9:73:cc:1c:ef:b8:cb:
4e:ed:12:ec:a7:1c:6c:56:1e:c3:f6:53:83:df:da:
46:60:8e:86:15:79:ac:22:3e:71:9c:4e:e0:ad:20:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E2:EB:9B:3E:D9:90:86:29:C4:DC:AB:6E:93:27:77:7D:5D:E1:77
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:77:02:51:2b:ed:d0:ea:77:3c:40:42:36:69:9d:a7:af:33:
17:b8:82:74:51:24:19:89:61:e6:18:1d:d6:29:9e:22:65:6f:
82:3e:ea:4f:02:ec:19:d1:83:70:1d:a9:8a:62:b6:c0:1a:41:
d2:6f:3d:23:df:ef:7d:93:2e:7f:10:95:73:91:d0:c1:ca:44:
4a:7f:06:9d:0f:96:3a:3c:d5:f1:ba:64:16:1b:08:30:4f:c2:
03:2a:a2:ba:98:24:9f:31:d5:36:ad:ef:f7:ab:d2:c4:c5:82:
4a:61:54:61:51:da:16:ff:af:8b:1d:df:3c:c5:2a:b4:95:a1:
b8:8a:1a:81:7f:89:c2:f7:1a:b1:85:b0:2e:cb:e3:30:ad:56:
5d:15:ec:0c:38:9b:31:b3:3a:26:27:eb:8d:28:20:f6:a6:99:
6b:0f:26:1d:e2:61:e6:2f:61:6a:37:ee:23:c7:45:cd:fd:f2:
12:4b:da:ed:72:be:57:2f:b2:fe:50:aa:16:ea:9c:d6:91:40:
0c:39:12:78:02:50:58:d2:d6:0d:c9:66:87:22:36:e4:86:ad:
48:f2:f8:fa:d8:04:6c:be:22:25:b6:52:4d:59:4c:aa:c9:37:
04:77:07:53:97:92:5c:33:9d:37:a0:57:17:4c:4c:5e:95:c8:
ec:00:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:52:17 2026 by rpki-client