
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json)
Hash identifier: FSk3jGd7k1VGPn0+g4SSFV9R9tN/Zmv+D37waR8H77c=
Subject key identifier: 43:F2:58:B0:0C:42:33:DB:BA:2C:2E:2F:56:72:EE:A3:92:FC:0C:3D
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
Manifest number: 03EF
Signing time: Sat 13 Jun 2026 00:33:30 +0000
Manifest this update: Sat 13 Jun 2026 00:33:29 +0000
Manifest next update: Sat 20 Jun 2026 00:33:29 +0000
Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: DtokQdVG72/J9h9mQSRAXx+t+mSDUD4H5y233aEAhVw=)
2: 685F0CBA031211F1BBBCC8A9163D8C67.roa (hash: NxlgbUimOupPTjcXRwh01KDTfYdr+Bp3csROuFT6/PM=)
3: 3A904D64210111F181AE0DC81F3D8C67.roa (hash: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Jun 13 00:33:29 2026 GMT
Not After : Jun 20 00:33:29 2026 GMT
Subject: CN=6a2ca559-7155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:e4:2e:c8:05:61:bf:b6:31:ef:d3:a5:2a:
16:b6:1a:cf:30:71:56:b7:26:a6:5d:7c:c8:77:ef:
ea:1b:d5:e6:62:2a:6b:4d:76:18:92:1c:74:f8:ca:
44:a7:17:b6:f4:20:2d:43:3b:2d:c1:b9:36:48:76:
70:24:e4:a4:b0:71:c2:b7:08:1e:1a:1d:00:50:3c:
54:b3:25:ed:b4:71:69:b4:f6:7b:39:00:21:f4:72:
f0:7e:68:c8:c9:a3:b2:fd:0d:11:3a:4a:58:e5:63:
ef:6a:62:c2:21:34:82:aa:4b:93:c5:10:a4:da:f9:
4f:ff:d7:b8:bd:26:b5:aa:56:e9:8c:e0:5c:ec:cb:
3f:6b:73:f2:a6:28:81:80:7b:63:d9:62:93:ec:73:
bf:80:3c:b5:ed:7b:6d:29:38:db:0d:fc:af:75:9d:
66:10:49:bd:4f:96:b7:14:0f:e2:47:37:33:6f:50:
9a:ba:de:b1:19:f7:5f:0f:ef:c2:ec:bb:a8:e2:65:
04:0b:a7:17:d5:3b:2b:7d:d1:21:22:9a:f1:cd:eb:
2b:cd:28:85:1d:64:15:16:cd:4f:a7:5e:2a:2d:57:
d0:8c:01:a1:80:b7:5f:21:97:36:f7:2a:45:4e:ce:
b8:3e:36:5c:e7:06:75:b6:09:7e:25:cb:08:d6:90:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:58:B0:0C:42:33:DB:BA:2C:2E:2F:56:72:EE:A3:92:FC:0C:3D
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:10:ef:37:43:e4:fc:9d:79:e7:ca:20:6c:60:5d:cd:9e:7a:
e6:19:a3:ba:83:72:63:ec:a2:62:ce:ec:4d:b2:39:d5:72:44:
ca:6a:34:05:3d:2b:36:ec:98:3d:e2:68:e2:6b:a7:e1:5f:b0:
1a:ab:f9:0f:2a:0c:d5:e7:88:2c:2a:ec:18:c5:a3:08:d7:25:
58:3f:f5:72:6a:0a:19:11:d1:48:2d:42:c7:49:d5:a1:7e:76:
79:ee:06:82:5a:a3:11:a7:35:7b:1e:28:57:ab:b9:f9:fa:60:
9a:47:b4:03:01:6a:d1:a2:90:ea:5e:81:03:ce:ba:49:d6:cb:
d9:9e:c5:b4:9c:94:21:7f:46:a1:7d:a2:7b:f4:47:9f:9e:68:
c2:81:1f:93:f5:69:90:6b:13:31:1a:62:b0:26:bc:dc:94:e7:
75:97:c1:a1:e3:32:04:53:7d:06:6a:96:b2:58:3b:a9:0f:7f:
10:45:6f:09:35:4e:62:e3:97:cf:83:61:f0:76:cb:1c:7e:c0:
63:f3:08:c1:b2:e3:11:5f:b1:2e:1a:9d:84:d8:00:c3:a3:9b:
17:90:fb:0f:65:04:94:2b:a0:77:93:76:d6:d4:ee:8a:f1:e7:
c8:ef:16:af:06:30:66:d2:f6:90:3e:63:f2:b5:e8:6c:ca:63:
f2:9b:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:32 2026 by rpki-client