
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: 5qSK2CTTv36V8/EVoy6j4m15pBafzp2UyMnUzSvdOSQ=
Subject key identifier: 14:B7:CE:1C:33:79:4D:03:EF:01:D1:CB:03:23:37:88:F8:EC:5E:06
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0A67
Signing time: Thu 16 Apr 2026 19:33:25 +0000
Manifest this update: Thu 16 Apr 2026 19:33:25 +0000
Manifest next update: Thu 23 Apr 2026 19:33:25 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: 3JLdubG2BnNDT4w02hRsedlIFV1wzKddlslQTmsZl+k=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Apr 16 19:33:25 2026 GMT
Not After : Apr 23 19:33:25 2026 GMT
Subject: CN=69e13985-997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:73:0f:68:3d:2d:11:ad:76:76:7f:c9:0d:
8b:1c:de:93:35:1b:18:55:d4:f3:f7:da:d4:97:6b:
3f:04:0f:5b:ed:f3:d8:f7:a9:91:6f:4c:3b:c2:8d:
0c:8d:1a:a6:8b:79:22:c1:70:bf:48:75:90:79:e5:
9a:ab:28:65:0e:1d:5d:a6:be:b1:d7:70:f8:70:00:
bd:dc:fd:85:e9:f5:47:1b:7f:c7:32:9e:59:f3:25:
98:48:af:a1:71:b6:ba:17:30:dd:46:89:6e:35:6b:
dd:c5:83:39:23:8e:5a:ea:6c:f0:a4:e0:5d:ad:6d:
1f:8a:ae:6f:0c:52:91:fa:62:da:e6:bc:49:85:9e:
cf:47:38:74:65:cf:e0:a4:30:4c:c0:87:78:cd:32:
2d:c7:cc:c3:fc:8c:cd:3f:9e:a2:13:86:80:76:c5:
73:b0:2c:7b:b3:0b:33:72:b2:b8:3e:10:0c:aa:9b:
b1:9d:f8:8f:fc:7d:6c:1c:3d:26:a7:77:b1:a2:d1:
49:ee:10:12:55:59:de:03:75:9b:3a:63:21:8c:07:
fa:69:73:e7:91:b4:ce:ed:dd:4b:02:05:a4:f6:92:
38:ce:25:e9:27:5e:c0:2c:63:45:38:0b:79:bb:03:
9e:a4:ce:83:1d:b0:85:11:61:ee:64:2e:2e:a7:32:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:CE:1C:33:79:4D:03:EF:01:D1:CB:03:23:37:88:F8:EC:5E:06
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:6d:ba:d8:29:23:68:6f:5f:0b:82:2d:14:64:51:22:4d:
d2:bb:79:73:cd:28:34:97:e7:ed:27:f8:70:54:82:4a:88:ac:
29:65:2e:a7:0a:b5:8f:34:28:fb:39:7e:4d:d0:5b:e7:f2:59:
d8:80:b5:11:01:66:9a:69:5c:bc:8e:29:db:65:53:d3:4f:6b:
dd:fa:cf:99:f0:97:52:c7:54:d4:b4:8b:e3:3e:a8:d3:f8:d2:
f7:14:e2:34:41:70:6d:07:75:9e:7f:36:ff:03:bf:6a:1d:e4:
ae:ed:8c:59:b4:74:07:f3:39:6f:c9:f2:e0:a3:92:20:72:4d:
4a:c5:71:0a:2e:31:b1:b9:43:f5:39:e0:b4:e3:5b:1c:7d:0f:
64:ba:43:21:99:92:98:4b:da:2f:46:9a:e2:19:80:73:74:fb:
fc:e1:be:92:ed:0c:ad:7c:fd:30:fa:57:1f:9b:52:b4:7d:83:
d6:97:1f:2f:2f:c8:85:4b:a2:6e:35:5e:e0:9e:e6:02:2e:6a:
24:d8:f3:3f:78:46:e6:8e:71:41:ad:13:34:a5:be:1c:c4:74:
d5:03:0d:c6:1c:aa:7b:9b:aa:9e:cd:a4:36:d0:56:9c:f3:51:
0c:fb:bc:af:22:85:8f:bd:ea:08:26:9d:b3:52:12:c1:8d:89:
42:56:08:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE
QkIwNTdCNTUwHhcNMjYwNDE2MTkzMzI1WhcNMjYwNDIzMTkzMzI1WjAYMRYwFAYD
VQQDEw02OWUxMzk4NS05OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgfpzD2g9LRGtdnZ/yQ2LHN6TNRsYVdTz99rUl2s/BA9b7fPY96mRb0w7wo0M
jRqmi3kiwXC/SHWQeeWaqyhlDh1dpr6x13D4cAC93P2F6fVHG3/HMp5Z8yWYSK+h
cba6FzDdRoluNWvdxYM5I45a6mzwpOBdrW0fiq5vDFKR+mLa5rxJhZ7PRzh0Zc/g
pDBMwId4zTItx8zD/IzNP56iE4aAdsVzsCx7swszcrK4PhAMqpuxnfiP/H1sHD0m
p3exotFJ7hASVVneA3WbOmMhjAf6aXPnkbTO7d1LAgWk9pI4ziXpJ17ALGNFOAt5
uwOepM6DHbCFEWHuZC4upzJWrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBS3zhwz
eU0D7wHRywMjN4j47F4GMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz
QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H
OUJkZS1zYzBTVXJic0ZlMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcPdtutgpI2hvXwuCLRRkUSJN0rt5c80oNJfn7Sf4cFSCSoisKWUupwq1jzQo
+zl+TdBb5/JZ2IC1EQFmmmlcvI4p22VT009r3frPmfCXUsdU1LSL4z6o0/jS9xTi
NEFwbQd1nn82/wO/ah3kru2MWbR0B/M5b8ny4KOSIHJNSsVxCi4xsblD9TngtONb
HH0PZLpDIZmSmEvaL0aa4hmAc3T7/OG+ku0MrXz9MPpXH5tStH2D1pcfLy/IhUui
bjVe4J7mAi5qJNjzP3hG5o5xQa0TNKW+HMR01QMNxhyqe5uqns2kNtBWnPNRDPu8
ryKFj73qCCads1ISwY2JQlYI/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:23 2026 by rpki-client