
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json)
Hash identifier: CRKNLrEuAWySeyCANfgmowBEeKatDd9ZXDYQHQVJJcw=
Subject key identifier: E9:02:A1:CF:7C:72:D3:F9:24:84:49:53:1E:CB:95:95:04:79:07:10
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
Manifest number: 97
Signing time: Sun 01 Mar 2026 08:42:34 +0000
Manifest this update: Sun 01 Mar 2026 08:42:33 +0000
Manifest next update: Sun 08 Mar 2026 08:42:33 +0000
Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: 1H3VKlMg1BuTSLT3RYY9aDFEx56+TIvDTjbMCKxAFUw=)
2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: dUOsQ8A8T6M3HiMz0rMI1OFkO2hKKT8HDlrVYJlbsAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Validity
Not Before: Mar 1 08:42:33 2026 GMT
Not After : Mar 8 08:42:33 2026 GMT
Subject: CN=69a3fbfa-2cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:72:f3:89:4a:5f:4c:fe:0b:1c:d3:a5:0a:
0f:a8:4e:ef:33:c4:06:b6:80:6d:60:75:d7:37:38:
08:7d:9d:61:22:43:ac:7f:e4:aa:cc:7c:d9:5f:a4:
63:df:42:54:33:54:c9:c9:81:36:21:97:ef:3c:c1:
10:37:59:18:b3:4d:96:0f:24:68:e2:f3:02:4a:26:
48:78:03:9b:bc:88:2a:16:34:ae:f7:dd:38:a5:e8:
11:44:5a:88:7e:9c:0d:32:6e:3b:fd:a7:45:95:e9:
ec:d0:26:04:e3:3e:26:3e:e6:11:99:d3:77:38:b9:
6b:2b:78:97:b8:0a:2a:01:53:d9:80:e1:20:f6:17:
35:a7:9c:33:e5:d5:15:b1:f2:cc:e1:ff:1b:a6:30:
0b:a7:f1:14:02:30:b0:c2:de:ae:7b:ee:e7:9c:75:
ba:15:35:80:7c:fe:4d:3a:0c:34:61:96:91:85:07:
5d:7e:fa:8f:da:1d:ca:bc:9e:37:03:76:53:56:33:
0f:66:73:5a:af:f8:e8:25:97:55:15:c4:d5:90:09:
58:dc:21:96:fa:0f:18:34:f5:d7:85:65:f2:c5:86:
0b:ce:73:55:3c:99:7f:0d:79:18:51:80:7e:99:c4:
23:83:6f:6f:40:65:5a:fd:23:7c:1c:1f:2b:f5:f7:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:A1:CF:7C:72:D3:F9:24:84:49:53:1E:CB:95:95:04:79:07:10
X509v3 Authority Key Identifier:
keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:1c:7d:38:78:64:44:ef:02:b5:25:92:49:1f:63:c9:74:
bb:91:9e:dd:74:4a:5e:c6:af:c3:db:4d:94:9d:cc:09:34:c2:
4f:d2:f8:c5:82:58:0f:2f:60:04:f8:f5:42:05:16:e6:b1:99:
16:a5:16:d4:6e:a9:94:de:b2:2f:07:f0:23:d1:bd:b9:cb:8d:
e6:35:a0:38:5a:25:d3:3b:d6:0d:a3:53:ab:3d:c7:ca:29:ea:
7c:6f:09:61:a4:85:29:b0:e2:83:0d:f2:94:b7:06:2e:c6:e8:
54:cb:ad:ef:0e:30:94:83:03:a0:ee:25:33:c9:de:52:5a:0b:
fb:b1:1c:54:2d:a9:a3:1c:fe:2f:2b:bb:49:c9:75:85:f0:91:
e0:92:f6:98:9a:95:f2:bc:c0:51:aa:55:2a:6d:b9:dc:e5:3b:
ae:2e:5f:ab:76:c0:80:97:c2:63:cb:4b:ae:63:5e:0c:0a:69:
c6:9d:be:8b:36:58:73:dc:5e:35:bb:25:70:7c:6c:b5:0f:6d:
78:ff:1d:e5:5f:26:ae:97:35:f3:73:6d:e0:0c:bf:d6:c4:90:
4d:0d:3b:56:b4:60:e8:9a:c9:09:83:91:f8:c8:7d:b5:56:6f:
f0:de:38:35:ad:2f:f2:db:72:81:50:98:d7:21:16:01:1f:bd:
2c:29:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:47 2026 by rpki-client