
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier: fg7d/oO8R4tLSyN0UrW8nqCHrlYLujwpU5cXaBSCFGQ=
Subject key identifier: 32:B2:D8:CE:C5:FA:E0:18:58:E2:DA:28:5F:E1:E9:25:7E:59:87:E9
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number: 0D4A
Signing time: Sun 04 Oct 2026 18:20:28 +0000
Manifest this update: Sun 04 Oct 2026 18:20:27 +0000
Manifest next update: Sun 11 Oct 2026 18:20:27 +0000
Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: hR3ZfZmvf0bIpeYqV7fxOkbhA610TwqUk7+A3GxibhM=)
2: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: 1HE8yGNDssBftj1LAFhds8elRbEeqxTTho89AYi5gvc=)
3: 6451124A7F8011F185F61C616BA30FBC.roa (hash: o3+ZJqky9inXgHtSxC+UnBSLFmoputjC6nKC+kOkMzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Oct 4 18:20:27 2026 GMT
Not After : Oct 11 18:20:27 2026 GMT
Subject: CN=6ac298ec-df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:f3:6e:a2:0c:c9:df:bc:f3:8f:c1:c1:7c:
42:ba:37:3b:2a:9a:07:06:0f:e3:f3:05:67:13:1a:
25:f3:72:6d:a5:df:be:b8:42:a8:0e:cb:0a:93:75:
a2:01:78:65:96:45:35:f6:ea:ac:69:d1:31:4b:0b:
15:ef:b6:53:78:cd:81:11:3f:c6:78:8b:61:08:3d:
ed:18:f1:d5:2d:4b:f0:3e:3b:c5:51:2c:64:3d:63:
20:e1:f8:93:b6:ca:16:ef:3d:33:1d:4e:01:41:1f:
f2:07:2a:2c:2e:13:b9:d3:3e:6a:aa:bb:c4:a1:b5:
99:8b:bb:15:d8:70:f0:4c:cd:e6:cd:86:c4:5b:7c:
98:cd:7a:4e:67:0d:43:3a:bc:5c:6f:21:79:b8:1f:
d6:1b:1e:6a:1d:ca:b8:8f:57:39:21:91:d8:5e:f9:
43:12:a2:76:2d:93:35:90:ff:03:60:7e:89:b3:13:
e7:a6:a3:2a:9c:2e:5d:66:22:6c:dd:d7:7e:ce:1f:
a0:d7:eb:e8:a0:08:94:d6:54:2e:93:53:ba:12:18:
bf:e0:c6:cf:18:50:b0:2e:fb:cd:56:12:22:6c:bf:
ab:3b:3d:d8:5f:0f:14:68:93:9c:b7:46:b0:e4:57:
92:41:64:c8:e4:7b:fb:2b:34:ca:9a:87:33:f9:0b:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:D8:CE:C5:FA:E0:18:58:E2:DA:28:5F:E1:E9:25:7E:59:87:E9
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:48:29:fc:5c:86:3f:18:97:b2:89:00:6c:46:4b:50:d0:
d1:22:6d:71:08:69:02:20:31:96:0b:bd:f0:e6:93:aa:1c:34:
c6:c7:e0:c5:04:31:f7:12:7a:d2:17:c9:dd:9f:6e:98:0a:af:
65:10:14:ab:af:3f:e3:fc:b8:2c:cb:d2:c5:c4:ba:6c:3f:63:
39:f4:8a:d4:53:9a:43:27:6e:54:c1:22:73:0d:0b:63:a7:ab:
a3:f9:4d:f5:c0:d0:77:e7:eb:6b:26:8d:49:9d:8d:11:44:4a:
4a:21:84:e3:ad:de:74:e2:1c:a3:72:c1:22:71:00:d8:26:16:
00:2d:6c:47:1c:76:0e:7a:06:f0:29:65:86:2c:cf:ad:90:a2:
4e:fc:98:d7:cc:67:0a:5a:69:7a:b6:fc:ce:f9:03:76:3e:6e:
de:ef:73:8f:d1:23:0c:5d:85:7a:ba:23:79:3c:98:23:21:6a:
9c:00:e7:27:2e:64:8f:94:a0:a4:f3:43:9e:cd:4a:92:25:e0:
6a:ce:a6:52:4d:32:15:a7:c7:a6:40:c4:a7:22:17:6a:34:95:
9f:b9:3c:db:c4:d3:f9:c7:19:98:4f:4b:7d:9d:37:c1:94:5a:
b7:82:c6:0a:b2:7b:55:bd:b8:35:bc:50:c5:fc:19:b7:c0:0a:
bb:dd:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:20 2026 by rpki-client