
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier: GFpzQE5kxHs31l5N65g12P2r8xeoPtIATlnySiGh+7Y=
Subject key identifier: CA:F5:14:94:08:B4:51:96:CC:69:00:9E:4C:29:7F:40:2A:88:E1:D9
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number: 0499
Signing time: Sat 04 Apr 2026 23:44:42 +0000
Manifest this update: Sat 04 Apr 2026 23:44:41 +0000
Manifest next update: Sat 11 Apr 2026 23:44:41 +0000
Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: TslYIqvk+rxZfW9X972ze4JmMqkN2CB0dTKvOiX4HcI=)
2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: jsBQ4IjJHGtGDAZLpB0JonWlKEkmPOsB+LjjK4ifeUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Validity
Not Before: Apr 4 23:44:41 2026 GMT
Not After : Apr 11 23:44:41 2026 GMT
Subject: CN=69d1a26a-5e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:85:4a:0b:ac:26:87:31:f2:d9:69:11:55:
ac:a4:fc:49:21:20:a7:80:7c:2e:a9:b1:09:b3:bc:
43:6c:8d:8f:b6:3d:1c:b3:f2:a5:08:4b:69:a9:b4:
f9:d3:0e:e8:38:33:3c:bb:08:81:85:2e:cc:22:ca:
5d:b9:39:bb:84:41:e2:39:6f:a4:85:2e:66:ed:3c:
a4:40:e6:11:dd:e9:07:f2:05:3b:db:56:a3:dd:64:
6a:11:a7:0b:a8:26:1a:bc:1c:8c:ee:51:69:53:fa:
05:ba:b5:c8:82:86:4e:80:8e:6b:dd:e6:55:2a:3a:
04:3c:30:12:af:05:9b:9f:2a:27:6e:e6:f3:c8:d5:
01:58:be:ee:23:05:10:ef:52:9d:f9:d6:63:b7:e3:
e4:cd:c1:11:36:bc:b3:17:d1:9d:9a:c5:35:de:6b:
e0:7d:3a:84:b9:37:9d:b1:31:e5:d3:5c:5d:1e:7c:
69:92:12:73:f0:d7:7b:99:a0:30:e9:12:c4:ae:c5:
f0:69:bc:1d:11:96:ad:78:a8:f8:b5:d6:19:bf:50:
2b:3f:bb:cb:f2:82:b7:8a:0d:57:51:76:97:81:f4:
0e:8c:69:f6:3a:cc:99:c9:2c:f3:2b:3f:f6:65:98:
c0:b2:e9:86:c9:5c:10:14:2b:92:ff:a9:bd:79:8b:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:14:94:08:B4:51:96:CC:69:00:9E:4C:29:7F:40:2A:88:E1:D9
X509v3 Authority Key Identifier:
keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:31:58:38:14:74:d3:54:a1:94:50:cb:b4:82:2b:43:94:
a0:0b:59:be:0e:6f:c3:c6:69:9d:f3:7f:69:4c:2c:4a:60:85:
c9:68:bf:57:73:a9:f3:e0:d4:c6:8b:24:4c:8d:08:f1:bc:33:
10:a9:e7:eb:df:94:da:9b:b1:c9:1b:d9:18:8f:ce:2c:1f:b9:
9f:1e:ac:03:66:d7:c6:a6:24:c9:b5:09:a4:ca:b1:fe:18:17:
41:fb:7a:3f:78:8a:43:5d:6c:62:da:9c:fe:f7:7e:d1:1e:19:
70:eb:d0:05:92:ed:09:ae:36:4c:0d:f5:f2:e2:12:4f:18:31:
76:42:0b:77:08:ad:ad:9b:8a:7c:fa:12:0e:a7:68:05:3e:e9:
37:ca:3d:51:bf:0f:f5:4a:90:96:97:f2:2f:21:0b:2f:63:ce:
cc:ce:60:e2:f9:c4:1c:fa:a2:7f:21:dd:dc:78:40:2e:23:f2:
3a:72:71:d7:2e:85:f0:ed:1a:38:47:e9:4f:f6:47:24:dd:6f:
2c:d1:51:8f:88:2c:a2:59:8a:cf:35:57:af:7a:69:f0:ef:a1:
63:55:52:ba:d9:79:e7:7f:7c:5f:56:d9:57:5e:4c:6a:30:ae:
16:f8:73:20:5a:dd:63:95:2d:36:46:06:7d:d2:3a:39:fd:02:
75:53:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:40 2026 by rpki-client