
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier: jx571suFqikHtWiRqMxkbJ+11INoZx3EWHEtojRPle0=
Subject key identifier: 47:11:E4:0F:33:E5:FB:CA:D7:BF:01:48:4D:BD:4D:80:E9:F7:83:62
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number: 0CDF
Signing time: Mon 30 Mar 2026 18:23:08 +0000
Manifest this update: Mon 30 Mar 2026 18:23:07 +0000
Manifest next update: Mon 06 Apr 2026 18:23:07 +0000
Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: teTt9lDMPfxEyc2eotO8DnvPvwmGYILOj/OQNMuWJhc=)
2: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: C2KkFw83+cx2w+Z/qXt6C6L4zz7RactfK1dd4njLIPw=)
3: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: XeHkER619zIFoX+u6eX7dRCL1/8jXZkWE05+uf+I4wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Mar 30 18:23:07 2026 GMT
Not After : Apr 6 18:23:07 2026 GMT
Subject: CN=69cabf8c-1712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:bf:75:5d:d0:b9:a6:7d:14:18:ac:72:36:
59:4b:1d:e4:9f:82:7f:2a:db:ab:a6:5d:96:82:d4:
68:73:c4:67:e7:2a:70:26:ca:7b:85:ba:00:8f:63:
4a:18:aa:42:de:42:37:67:1f:63:8b:91:0b:16:66:
86:56:94:27:d5:bb:cf:fb:fd:cc:8a:74:4d:60:ff:
f8:16:ba:7c:56:87:5a:e5:f5:3e:3a:63:62:b5:0d:
a4:40:02:31:8e:21:d2:f5:8b:35:40:b6:ba:8c:5e:
c8:c5:40:39:cf:d8:13:00:99:3c:ec:1d:32:3f:ce:
ca:37:5b:48:30:f2:30:50:a4:eb:42:c9:41:05:bf:
63:9f:ac:23:42:a6:13:6d:d3:c8:5e:67:e5:7a:fe:
21:4a:48:34:18:0f:c8:00:ca:7f:01:3e:2b:b5:ec:
7c:68:20:bd:23:a5:9e:4d:bc:1f:a5:ac:18:e5:9f:
e5:2c:c7:eb:52:a2:71:82:b5:e2:e2:45:0b:93:e4:
06:d9:db:b0:a1:8a:54:8c:77:aa:ea:dc:94:74:b8:
48:e4:77:58:53:06:72:de:39:f2:c8:04:2a:c0:6c:
72:24:06:02:1b:fe:1b:f0:2f:33:59:9d:90:e6:7d:
4d:10:bc:de:4a:bd:a7:ef:9c:b2:a9:f5:9a:c9:10:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:E4:0F:33:E5:FB:CA:D7:BF:01:48:4D:BD:4D:80:E9:F7:83:62
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:d1:40:4c:bb:b6:10:00:4b:e0:bb:d4:b3:09:dc:1c:be:
0c:02:0e:2b:57:ba:a4:1a:3c:c5:20:f5:3a:1b:e0:70:57:8f:
b7:80:20:4e:0b:84:d1:2b:0f:2e:e5:00:34:76:5a:f3:13:d4:
38:5b:c4:93:38:29:d5:c1:3e:52:b0:2c:51:bc:74:26:34:13:
4e:60:5a:ed:1d:71:84:dc:a1:bc:60:46:2a:b3:eb:75:ec:f9:
06:2f:1d:57:b6:be:4f:23:a2:ea:51:8e:fb:18:9b:69:d9:a5:
f0:b3:f5:52:58:60:79:77:3f:0b:2c:69:07:a2:42:0b:13:4e:
8d:77:d0:8a:93:39:73:bd:72:44:40:72:5b:a9:b7:10:e7:6a:
13:f0:b3:07:56:bf:30:3f:d4:6e:af:a4:5c:53:69:78:25:51:
fa:87:16:84:9e:f0:66:d1:6b:f7:e0:a3:c3:9e:6b:ce:e2:83:
96:a4:95:5f:c3:ff:58:33:c0:1e:d4:50:08:b5:1c:aa:cc:53:
02:57:e8:c8:22:44:60:98:df:b9:9d:d0:1a:46:44:e1:8e:a9:
ae:86:40:2e:64:2a:7f:08:3a:0b:ff:d1:1a:d6:1f:85:49:2e:
05:98:c5:27:00:a0:2b:d8:c3:89:83:a7:18:16:a5:9b:49:d9:
62:bc:5f:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjYwMzMwMTgyMzA3WhcNMjYwNDA2MTgyMzA3WjAYMRYwFAYD
VQQDEw02OWNhYmY4Yy0xNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssC/dV3QuaZ9FBiscjZZSx3kn4J/Kturpl2WgtRoc8Rn5ypwJsp7hboAj2NK
GKpC3kI3Zx9ji5ELFmaGVpQn1bvP+/3MinRNYP/4Frp8Voda5fU+OmNitQ2kQAIx
jiHS9Ys1QLa6jF7IxUA5z9gTAJk87B0yP87KN1tIMPIwUKTrQslBBb9jn6wjQqYT
bdPIXmflev4hSkg0GA/IAMp/AT4rtex8aCC9I6WeTbwfpawY5Z/lLMfrUqJxgrXi
4kULk+QG2duwoYpUjHeq6tyUdLhI5HdYUwZy3jnyyAQqwGxyJAYCG/4b8C8zWZ2Q
5n1NELzeSr2n75yyqfWayRBEtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcR5A8z
5fvK178BSE29TYDp94NiMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj
MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN3bRQEy7thAAS+C71LMJ3By+DAIOK1e6pBo8xSD1OhvgcFePt4AgTguE0SsP
LuUANHZa8xPUOFvEkzgp1cE+UrAsUbx0JjQTTmBa7R1xhNyhvGBGKrPrdez5Bi8d
V7a+TyOi6lGO+xibadml8LP1UlhgeXc/CyxpB6JCCxNOjXfQipM5c71yREByW6m3
EOdqE/CzB1a/MD/Ubq+kXFNpeCVR+ocWhJ7wZtFr9+Cjw55rzuKDlqSVX8P/WDPA
HtRQCLUcqsxTAlfoyCJEYJjfuZ3QGkZE4Y6proZALmQqfwg6C//RGtYfhUkuBZjF
JwCgK9jDiYOnGBalm0nZYrxfig==
-----END CERTIFICATE-----
Generated at Mon Mar 30 22:51:35 2026 by rpki-client