
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier: dq4FKMs97CUDwLJmeUwCFAPDJI94R6LanmRcauDbWT0=
Subject key identifier: FA:EE:77:0E:45:B6:87:56:6A:E3:0E:13:B3:A1:18:BB:FC:70:C1:53
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial: 0957
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number: 0956
Signing time: Thu 16 Apr 2026 20:01:43 +0000
Manifest this update: Thu 16 Apr 2026 20:01:42 +0000
Manifest next update: Thu 23 Apr 2026 20:01:42 +0000
Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: SfebRGKgnINKV1BFhTn4mAOli0zWNZrMvITCGVjc1co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Validity
Not Before: Apr 16 20:01:42 2026 GMT
Not After : Apr 23 20:01:42 2026 GMT
Subject: CN=69e14026-3e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:fc:cb:a3:ac:db:91:1a:e5:f4:16:0f:fe:
0f:3d:99:99:7a:27:20:f7:4c:db:1c:58:5d:4d:30:
ec:e5:57:6e:38:d3:b9:3d:55:22:23:e2:73:a6:c7:
50:4b:51:41:70:b3:9a:bf:27:71:18:b0:29:5f:83:
eb:a8:e6:82:3e:62:f3:9a:a8:5a:2b:6a:d0:65:07:
21:26:b4:4a:69:12:7e:e2:73:5b:c8:56:94:7b:27:
e1:3d:58:83:91:f2:28:f3:62:56:27:28:3a:39:3e:
dd:bb:77:30:df:00:50:3a:60:56:25:55:f8:4a:23:
99:2d:48:e8:c8:09:a0:4d:68:d9:f2:09:e0:70:29:
5e:fa:2c:bd:e2:b4:d0:77:f1:5b:cd:0f:8e:6e:de:
19:95:53:95:a1:4b:12:b5:84:b0:5c:4e:50:fb:48:
e6:91:fb:a8:bb:a9:bf:38:a2:87:a9:78:4b:ac:e6:
57:fe:dd:a8:5c:5f:3a:1a:24:13:80:50:82:c0:c9:
14:a7:f7:21:b7:12:28:05:ec:ed:78:71:ba:ba:21:
61:74:d0:10:a3:25:08:99:2e:08:02:77:8b:c7:1f:
7b:b0:a8:2d:0a:49:ab:73:92:78:e1:35:60:cf:19:
95:0c:c9:d7:a9:c1:0b:b6:58:27:4a:7b:35:4c:ac:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:77:0E:45:B6:87:56:6A:E3:0E:13:B3:A1:18:BB:FC:70:C1:53
X509v3 Authority Key Identifier:
keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b0:44:db:f9:ed:48:63:57:f5:96:6a:02:06:b1:45:9d:30:
96:86:1c:4a:3f:0c:1f:36:9a:d5:59:48:33:26:50:06:c6:20:
04:79:78:0a:e0:cc:94:e2:47:aa:28:11:73:d0:70:46:35:a3:
79:ce:61:6d:85:ce:cb:0b:e3:29:d0:1d:de:87:79:61:11:57:
64:15:11:c1:f2:28:d4:23:e6:a9:cf:9b:56:09:ff:d3:66:62:
2d:dd:aa:93:fe:67:57:dd:9d:91:a7:22:02:ee:f4:77:25:a0:
ab:ce:37:0d:5b:59:7c:da:69:7d:d4:29:a0:17:c6:8a:4b:c3:
26:7e:e8:6b:57:48:85:6a:55:1e:29:70:2b:51:5e:d6:5b:ec:
f1:1e:0d:24:a2:f7:7f:10:d3:1c:1b:01:f6:72:47:61:33:ea:
e0:10:21:41:48:01:d5:0b:a0:fa:9d:3c:b9:3a:83:14:aa:c7:
45:ca:93:d4:94:d2:11:2c:7f:d3:29:bb:d0:de:06:f0:ec:0f:
8d:7a:e6:37:7a:fe:e6:b5:8b:ca:d1:68:bd:87:ab:51:df:1d:
2e:2e:fc:63:f1:c7:f4:ce:eb:31:b9:78:f4:b2:7c:a5:12:2c:
5b:62:bd:0a:81:7e:91:1b:10:8c:d8:3f:18:4f:b4:ea:51:98:
59:27:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:30 2026 by rpki-client