
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier: cc0G0w2wEEN5kzAoKv7gTK2EPExALEcNey4m0rKpAnQ=
Subject key identifier: 66:98:2C:DE:7D:14:2F:35:38:9F:18:19:23:75:72:D5:D3:A6:F8:73
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial: 17B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number: 219E
Signing time: Thu 16 Apr 2026 16:30:24 +0000
Manifest this update: Thu 16 Apr 2026 16:30:23 +0000
Manifest next update: Thu 23 Apr 2026 16:30:23 +0000
Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: GSllqBpulguIC5nSX+l6LygD8ZWZTdZ2gyhmdOokrqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6073 (0x17b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Validity
Not Before: Apr 16 16:30:23 2026 GMT
Not After : Apr 23 16:30:23 2026 GMT
Subject: CN=69e10ea0-1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:e3:44:ef:28:c9:74:22:1e:3d:c2:ce:b4:
8c:b6:14:79:ad:3a:3a:7b:b7:b7:c8:de:65:ce:aa:
52:9a:bb:fa:bc:e9:21:c2:85:77:7e:fe:f5:75:f2:
7c:7e:01:b7:9b:36:51:9f:bd:3f:86:5d:0d:8d:ee:
2d:8b:5f:21:34:e0:0f:96:3d:3e:1e:29:32:6a:a9:
c9:69:a3:9c:19:18:27:7a:d0:87:9f:da:fc:02:5a:
4b:28:d3:13:6a:66:3b:06:4d:3b:b9:37:8c:07:92:
ab:ac:40:83:06:b7:39:7c:b0:6c:12:d6:e7:62:a4:
3d:3e:87:66:ef:3f:6a:26:73:6a:bc:06:70:43:8f:
7b:74:91:06:28:95:17:de:88:20:44:54:0c:dd:bc:
3b:c8:dd:a7:93:04:98:f7:42:73:a7:7f:3c:43:77:
75:34:fc:ef:59:6e:62:04:74:f5:c7:7c:4d:5d:aa:
5b:47:79:32:ee:54:53:03:36:69:38:24:30:1b:a7:
fe:a4:cc:92:2c:f8:f0:1f:50:3e:0b:be:bb:80:e9:
0e:cf:64:ce:47:2f:96:6c:2e:20:72:f2:f7:32:54:
61:7c:3c:6b:a7:fa:aa:d6:2e:5b:67:e2:c9:b0:29:
10:a2:4d:68:39:dd:06:54:bf:72:fc:f2:21:65:0c:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:2C:DE:7D:14:2F:35:38:9F:18:19:23:75:72:D5:D3:A6:F8:73
X509v3 Authority Key Identifier:
keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:3f:fe:7d:6e:53:4f:d8:b8:75:af:04:40:b7:05:f2:15:
e7:de:72:82:77:6f:98:eb:11:e8:d9:93:1c:12:3f:ef:ff:48:
39:a4:c5:a3:a4:85:7f:da:44:ec:6d:f7:a0:9c:23:71:bc:a0:
5a:90:a1:03:bf:dc:fa:86:6f:9f:9d:94:31:41:74:89:61:ac:
d2:f5:ab:49:e9:42:be:fe:ee:34:ac:43:d4:68:06:ad:6a:5b:
a8:f5:d0:32:71:80:81:85:e8:85:6f:a6:d1:1b:bd:98:d6:ca:
ee:cb:15:9a:95:41:1b:83:41:93:49:e2:32:ed:1a:38:fb:b2:
0d:99:99:6b:19:93:f2:52:8a:22:8d:c0:e9:af:cf:e5:06:8b:
79:fb:5f:41:cd:5f:a4:45:e2:f5:23:8f:59:0a:4a:ba:fe:4a:
49:ff:a0:fb:61:b2:51:10:44:c2:12:af:53:81:3e:f7:a6:08:
7c:1f:21:c4:40:03:5c:cd:4f:62:e2:02:6b:88:8e:88:70:e3:
60:a1:14:02:96:4c:d0:48:8d:a9:13:a3:0a:3e:37:09:68:8c:
60:a9:65:0e:2a:b8:bf:8f:bc:26:a0:2a:1c:61:40:04:7f:bb:
66:9a:10:72:01:c8:c2:3a:86:bb:fe:7d:ad:fc:0e:66:83:7a:
9d:de:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:55 2026 by rpki-client