
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier: S7dmfWE0ToxlFIJWm80gDMUxZYr5kDZqinQF43CcxVc=
Subject key identifier: D9:C9:A8:EF:38:04:8F:7A:CE:AD:F8:AA:B9:B3:31:3F:A5:84:82:3A
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial: 0C59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number: 0C50
Signing time: Sat 04 Apr 2026 18:32:47 +0000
Manifest this update: Sat 04 Apr 2026 18:32:47 +0000
Manifest next update: Sat 11 Apr 2026 18:32:47 +0000
Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: MDMIxeOtB8ZUepQT38F2ojIQPseoUD/5uK3tS2eEGFY=)
2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3161 (0xc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Validity
Not Before: Apr 4 18:32:47 2026 GMT
Not After : Apr 11 18:32:47 2026 GMT
Subject: CN=69d1594f-1a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:93:51:85:9f:8d:73:e3:55:31:4a:59:84:
3a:28:89:42:01:17:47:88:3f:f5:4e:87:24:05:80:
cc:9c:42:22:74:12:e3:79:65:00:56:39:b6:c2:6b:
fb:84:fc:43:16:bf:b9:9e:e1:db:19:23:f7:39:bb:
fd:18:74:6c:6c:b8:67:c6:6e:bb:0b:79:31:78:a7:
6b:7f:e0:73:5b:17:19:2e:39:06:6b:9d:2b:be:f0:
77:f0:a8:6c:38:1e:10:3e:d2:d2:b1:70:69:33:4a:
df:ee:aa:2f:b2:75:e7:db:87:57:9d:f9:e8:61:47:
ca:ee:be:b6:ae:50:29:e7:ee:cb:8b:fb:00:85:41:
56:6f:2d:40:c2:e5:cb:7b:cf:f3:8c:50:36:4e:ea:
38:35:79:c1:4e:22:5e:00:d5:9e:c7:7d:25:0d:61:
f8:48:94:4f:9d:b2:b9:ff:99:5b:53:64:6b:7d:38:
dd:82:9a:39:98:04:3b:80:cc:4b:d6:7a:28:e0:50:
a9:59:fc:72:9f:56:61:44:ea:f5:4e:89:15:b7:1f:
2c:5c:12:2b:92:54:da:d2:13:c7:c5:ac:8a:98:ef:
45:0b:82:05:43:25:e4:ae:57:f2:8c:a9:4a:63:7e:
14:35:ec:c7:74:24:20:b0:f3:60:54:01:ba:98:71:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:A8:EF:38:04:8F:7A:CE:AD:F8:AA:B9:B3:31:3F:A5:84:82:3A
X509v3 Authority Key Identifier:
keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:e3:23:9b:77:e1:d6:ae:f8:3e:97:d9:d7:b1:99:45:fb:
2b:0b:a1:c9:ca:55:1d:0b:82:e5:ab:36:8d:60:1c:d0:d9:dc:
a1:de:f6:e7:e0:85:75:3f:e2:71:52:03:dc:a9:ef:0e:6d:5d:
2b:c3:eb:26:37:d2:c7:47:dc:46:8b:5b:d6:17:25:76:ad:e2:
0b:f6:1c:51:e4:b0:7a:f5:e7:16:1a:66:88:2e:9b:94:a2:93:
d6:e1:55:18:42:93:b5:7e:a1:a5:e3:84:a5:6f:d7:b2:ec:16:
14:ec:dc:39:ad:3b:7b:e8:f1:61:b7:08:71:6e:e1:e8:a0:fd:
ed:7e:a3:66:e9:61:8f:9c:07:4c:8a:0a:99:39:d8:e6:b9:a3:
95:fa:d1:b0:05:14:82:9e:c7:66:7a:cd:af:d5:03:b8:d5:e0:
92:c8:e0:78:ee:e5:1b:a3:f3:45:22:c2:71:95:d2:cf:ae:3e:
01:da:7a:44:40:d6:dc:ec:aa:ca:1c:ec:8d:48:b1:ba:68:86:
85:3d:81:49:bd:dd:0e:52:4b:27:f9:ff:48:ad:61:d7:13:1f:
86:13:82:00:5a:80:dd:60:13:08:37:17:51:a5:80:81:e5:83:
05:e6:63:13:4b:f9:09:1e:cc:79:4f:1f:ab:43:70:4c:71:75:
9d:6a:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:10 2026 by rpki-client