
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: qbF6Ge4Zrz+vIoEqdzApO4c0IFPuPQr1NRJqt3OJ34g=
Subject key identifier: 80:33:54:C3:9E:EE:7A:82:F2:93:A1:76:8A:2E:A7:63:1E:A3:B5:56
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: A5
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Fri 24 Apr 2026 07:00:45 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: irStpn3TXhC3AHlMXGefSadkNclwj6JV/+Yw/+DOr44=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 24 07:00:45 2026 GMT
Subject: CN=69e1da9d-3d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:29:68:50:c6:c7:d5:ac:1a:17:80:63:fc:
bb:4e:96:e8:fa:57:83:35:1b:01:7f:d2:fe:5a:d5:
ae:36:b9:85:6c:fe:4c:ff:ff:94:2b:68:66:cd:c8:
f4:14:40:15:00:e1:f5:b7:18:d8:c4:6f:56:11:8d:
4e:0c:67:45:61:9c:77:96:65:62:40:c3:8d:08:28:
4b:9c:41:63:10:4f:a4:a6:a4:4a:ba:24:a0:c9:8b:
b6:72:58:44:a1:e6:df:3a:e4:52:a6:a9:cc:ed:86:
7f:ef:e6:a9:93:d0:68:ed:b9:a4:c3:f0:3f:3b:f2:
e2:4d:ae:e7:cb:e0:33:4e:4c:5a:af:5a:c9:a2:ff:
11:27:c5:37:5b:76:88:44:cb:66:b6:91:6f:6b:44:
73:0d:ce:c3:05:a5:89:7c:9a:d4:41:74:5c:eb:86:
04:9e:c4:18:5b:0b:da:15:0e:57:d7:5c:e9:b9:27:
0b:01:89:76:b3:83:a7:00:d7:5a:b3:0b:0f:cc:22:
96:87:62:ce:23:b4:67:63:79:54:dc:f1:78:09:6f:
58:2f:e9:27:7d:2c:f4:ad:8d:0b:fd:8f:4c:cf:83:
6b:c7:31:08:78:1e:4a:e0:57:f6:86:3b:7b:8e:3e:
a1:3c:98:01:7e:04:44:89:ad:b6:10:80:bc:db:b9:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:54:C3:9E:EE:7A:82:F2:93:A1:76:8A:2E:A7:63:1E:A3:B5:56
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:52:9d:1e:c6:31:9f:7a:89:70:99:c9:cc:20:53:45:15:70:
fd:51:91:84:98:1a:8d:a7:d2:91:27:e8:aa:ed:4d:1f:c0:5e:
b8:97:e7:17:79:89:f6:d5:1c:c5:6f:2a:75:ef:fc:e5:a9:c2:
39:82:f7:77:68:7a:72:c9:fa:80:e6:c0:39:a5:99:c9:51:44:
84:2b:42:ba:cd:02:c8:09:9f:26:c1:87:30:35:bb:f2:b3:82:
a1:80:26:9d:15:f5:97:b9:3a:0d:51:81:76:ef:71:92:be:ec:
4e:8b:8b:09:22:50:4d:56:24:e9:4e:65:b0:3a:4b:ef:c3:9f:
7c:81:ed:22:a2:fa:d4:22:dc:4b:17:cc:57:17:fc:37:3a:29:
c1:a2:c7:4c:19:99:4a:ff:7f:dc:e7:d8:ac:43:4b:07:f8:20:
31:b7:69:cd:65:8b:81:1b:f5:84:0e:fe:4c:b9:65:ec:26:4c:
6a:96:e1:1e:3d:5d:2d:64:06:72:94:04:df:84:78:77:b5:ad:
ee:1c:5a:fd:85:6e:01:d2:20:5d:20:48:81:32:54:28:63:66:
a1:70:a9:57:10:e6:5a:cc:b4:97:7c:6d:9d:7b:0a:61:10:79:
2a:20:f0:ba:28:1b:c0:c9:bc:6d:65:10:12:f7:b1:af:47:be:
09:83:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:52 2026 by rpki-client