
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: kDijdhlSNLkb6y3kgESFHZcuBfQ07Yno325cQwh76W0=
Subject key identifier: B1:64:C8:F3:F7:E9:BC:E2:9D:B5:DB:06:DB:0D:DF:BA:D6:3E:D1:95
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: F3
Signing time: Mon 02 Mar 2026 11:02:09 +0000
Manifest this update: Mon 02 Mar 2026 11:02:08 +0000
Manifest next update: Mon 09 Mar 2026 11:02:08 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: zFdS38w/4Jc/QTtHrgxaIPREE2hsOmffUfBCgsLTuuM=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: i0ORlhZOKsAGkbvWhGFe0p7d5mIlyQ7Mxy4cSYnkDVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Mar 2 11:02:08 2026 GMT
Not After : Mar 9 11:02:08 2026 GMT
Subject: CN=69a56e31-aa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:48:38:8b:40:b3:d3:1b:0c:e3:34:74:d7:
e2:0a:73:5c:8d:68:0a:9e:fc:fe:d8:c6:11:6f:2e:
72:62:56:af:20:4e:ad:dd:7f:1d:74:91:fd:f2:d5:
ae:88:f6:8f:89:cd:81:a7:d6:d7:94:ce:5a:b4:81:
91:81:e7:b8:af:2c:15:64:fd:83:9d:32:47:e6:0b:
c0:04:11:84:cd:08:e4:34:c9:ff:6f:fa:86:be:cc:
d0:17:7e:77:1b:08:32:1d:99:0a:c6:07:ed:73:5a:
47:20:d1:5b:62:a1:2d:58:7c:d6:ca:57:eb:31:f8:
90:df:96:30:e6:85:3c:36:6a:b0:55:ba:bc:3d:92:
20:18:02:47:b4:83:c7:81:4f:9f:98:ef:1d:21:33:
f5:d4:2e:62:bb:b4:c5:31:b2:14:6b:b5:65:f5:7b:
48:19:54:62:ba:93:07:dd:f6:b5:8e:5f:c3:b7:4a:
81:28:86:46:35:76:1f:ca:fe:f9:3a:3c:59:51:bb:
32:f3:41:fd:bf:bd:bc:0e:b2:43:2c:74:94:67:cf:
75:c5:05:36:2c:7c:bf:f8:b8:74:30:29:db:2f:11:
46:69:7f:41:44:cc:65:73:f5:d2:3d:3d:69:03:42:
61:79:c1:6e:10:6b:0e:84:76:92:e1:8c:ca:1c:4b:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:C8:F3:F7:E9:BC:E2:9D:B5:DB:06:DB:0D:DF:BA:D6:3E:D1:95
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:c5:5f:0c:08:ad:e2:9b:19:7f:c7:c8:52:14:77:c0:fb:
17:b5:a3:70:b0:34:b6:43:ce:b6:5c:15:33:69:94:75:40:e7:
1a:68:7a:0b:84:79:26:23:18:77:f6:ad:da:f6:56:b7:27:13:
8c:9c:de:9e:ae:76:4d:11:fa:cb:79:69:14:87:eb:2c:f2:53:
20:90:68:be:3d:b5:c8:c2:f9:e6:7f:3f:38:54:f6:e2:e8:27:
67:a9:c0:98:d0:bf:40:12:1e:1c:52:2c:e8:eb:17:c8:2b:27:
6f:67:a0:31:73:53:ff:0a:fd:37:b5:f2:6b:84:f3:83:1f:e1:
07:38:da:18:54:2d:fe:a7:23:e6:18:14:36:45:86:c6:64:fe:
19:90:70:ff:7f:36:0d:56:94:c1:d3:ba:27:4d:7e:23:ab:48:
91:ba:26:0d:dd:40:df:d7:8e:3c:a4:f7:c7:48:47:1b:50:b3:
1b:93:8a:64:6c:bb:ed:31:df:23:26:1a:16:71:41:44:6c:15:
b2:c0:26:8d:3e:38:bc:13:04:72:83:7b:b0:7b:48:cf:b6:93:
a2:06:33:ae:bf:99:f7:25:10:3c:13:3b:03:84:1c:2d:6c:78:
b4:74:35:79:1c:93:12:13:96:1f:54:bf:c0:95:f9:43:12:35:
dc:8b:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:38 2026 by rpki-client