
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier: CuuNN9lhnbJx7W3H+tM+nRsTtXsI3WIfbe0jeDyktXU=
Subject key identifier: C0:67:A6:F0:FD:E4:85:C8:EB:69:F5:BA:8D:30:73:69:FB:A0:17:29
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number: 0140
Signing time: Fri 17 Apr 2026 05:04:52 +0000
Manifest this update: Fri 17 Apr 2026 05:04:51 +0000
Manifest next update: Fri 24 Apr 2026 05:04:51 +0000
Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: nKyknPnIeNsU4d0KyBXYI6yDqklPFdvF505Prbr/Qqc=)
2: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: jFQyp9A0jxh8bH4gGrf9ly/lEjVIKy3LPj4bj2YPMKc=)
3: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: hmChBrVE0EuRQzKDJ7uKwkJY+XVRktN6YzaNk+odT7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Validity
Not Before: Apr 17 05:04:51 2026 GMT
Not After : Apr 24 05:04:51 2026 GMT
Subject: CN=69e1bf74-0bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:0e:cc:32:3c:ad:95:20:d3:06:da:59:d4:
d0:b5:ea:61:bc:68:7d:79:20:ca:71:0a:df:05:26:
ae:18:3f:c5:f1:ad:71:90:55:05:bc:ff:fe:63:92:
b4:08:f1:46:e1:02:f5:08:ee:65:00:12:cd:0f:d4:
67:12:15:4c:78:a0:b3:10:9c:63:64:97:c9:4d:a5:
7e:3b:70:d4:6d:7d:05:eb:ef:58:f1:d5:29:b0:62:
38:31:5c:cc:c3:2e:57:06:56:cc:eb:14:16:39:17:
b9:30:00:b6:1d:5e:c0:81:2a:0f:e1:1e:b3:3e:27:
6c:ad:e8:c1:ba:0f:3f:00:61:b9:0e:06:f7:75:dc:
c7:72:a0:cc:3d:98:46:e6:8a:a6:91:36:01:50:1d:
92:ad:84:bc:8d:a7:19:c1:43:62:01:37:25:05:9f:
1b:0e:fd:2b:58:87:73:0c:95:de:7c:6e:1b:2b:7a:
54:20:5e:2b:4b:7a:c1:93:34:99:a3:fd:23:93:cb:
18:ae:39:fd:9e:db:07:47:6d:17:2c:69:fd:7d:86:
80:b7:62:3d:66:25:c7:26:94:e7:cc:6a:37:d9:dd:
8d:a8:89:93:8a:03:58:94:b6:d6:30:46:6a:41:a0:
9e:ae:20:ac:07:17:ee:6c:a0:17:a9:5b:78:b9:73:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:A6:F0:FD:E4:85:C8:EB:69:F5:BA:8D:30:73:69:FB:A0:17:29
X509v3 Authority Key Identifier:
keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:1b:2e:08:47:ba:ec:7b:9b:80:0b:c5:7c:a3:34:0f:23:
ba:fd:f8:9f:ea:7b:90:44:fd:2c:66:e9:73:03:b2:6b:1a:97:
76:83:f1:04:12:df:14:7a:fd:9a:94:9b:b5:e8:67:19:6b:57:
92:5a:a6:c1:02:57:15:12:16:ad:b6:0d:e4:95:09:0d:42:6c:
08:69:84:97:08:11:d2:56:c7:ed:d5:89:57:f9:7c:6b:8b:d0:
5f:b4:b6:1f:b9:17:36:b9:f4:e6:76:cd:d3:ac:a6:79:0c:2e:
3b:49:92:81:f0:a5:e7:f3:11:72:a6:46:19:d7:42:49:62:dd:
6f:b2:91:ed:55:03:03:9f:0a:c1:26:ed:1b:a7:3e:f8:00:bc:
5a:4d:08:d9:b7:40:e2:20:01:ee:ae:02:05:c5:df:94:6b:80:
96:46:04:2f:19:5f:a2:4f:10:85:76:ef:4c:c3:ec:4a:78:17:
9f:b1:e2:f2:b6:88:fa:d9:63:8a:da:4c:36:4a:a7:48:8b:ee:
dc:88:ef:98:f1:d4:13:00:c3:95:16:a8:4b:be:86:6b:46:0b:
ae:97:62:4a:ef:b6:aa:4e:e8:96:df:73:79:83:c8:f8:73:a4:
78:1a:51:0e:8e:37:c7:64:46:4a:a5:9f:48:e7:d6:4d:77:bb:
04:70:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:02 2026 by rpki-client