
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json)
Hash identifier: 4jmNtCrTTZlp766EjREvCmk4W+WZY0d4XcesSN2TobI=
Subject key identifier: 7A:AB:DC:08:8C:33:2A:DF:04:B5:E1:8A:6B:08:2E:03:9A:E2:49:0B
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial: 0B9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
Manifest number: 0B8A
Signing time: Thu 16 Apr 2026 19:02:28 +0000
Manifest this update: Thu 16 Apr 2026 19:02:27 +0000
Manifest next update: Thu 23 Apr 2026 19:02:27 +0000
Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: 0ibayMyQD+tzjXtiEgMABDM87irU1hgyVfCHkRhk3cA=)
2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: Jnv0aGtmJmZtRkDFN/NTaEJWu0H9zmfWsPffd7dQQS4=)
3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: kjB0Uc0AizKtO+4LmZXnWut0vQIyfADTe082hQ2EIDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Validity
Not Before: Apr 16 19:02:27 2026 GMT
Not After : Apr 23 19:02:27 2026 GMT
Subject: CN=69e13243-2b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:99:10:a2:48:17:78:bd:51:6b:8f:d5:c5:
d5:49:ab:41:cf:7a:f7:16:38:c9:a4:77:22:6e:49:
71:8c:f4:22:f5:4c:99:89:ca:49:64:53:c0:8c:b6:
3f:5f:ff:33:87:56:b1:64:3d:d1:ca:29:4d:20:ef:
60:6b:0c:47:5d:1b:dc:82:c1:dc:b1:d8:44:d9:73:
30:13:43:49:e0:b5:ff:73:86:fb:06:f2:3a:c5:07:
2e:d4:9d:22:70:fd:87:28:97:61:c2:6a:a6:eb:e7:
e7:08:fe:30:ef:d9:6c:2f:76:92:fd:ea:9b:be:81:
0e:70:6a:63:34:16:7d:ce:09:c2:25:e2:01:1b:35:
f2:b9:47:d5:08:48:4d:0e:55:f5:a0:cb:18:c4:ed:
d4:b6:ba:48:42:7e:06:2a:ae:b2:c7:ff:f6:68:d9:
c3:93:7d:71:8c:7c:ac:4c:ba:fa:30:53:44:88:88:
e7:36:de:eb:8b:b8:03:48:d3:bd:ad:77:41:d0:64:
bf:a8:17:d5:8f:fa:5a:9e:1e:e7:88:a2:dc:a9:3c:
d4:f5:0d:f0:1d:e9:8b:51:9a:5a:6d:02:5d:d7:86:
27:e7:8d:83:80:7d:38:f2:5b:a9:4b:f2:1e:cb:c0:
7d:d7:05:e6:09:fb:63:c2:15:5e:bd:62:f2:f2:47:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:DC:08:8C:33:2A:DF:04:B5:E1:8A:6B:08:2E:03:9A:E2:49:0B
X509v3 Authority Key Identifier:
keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:a4:e4:34:f6:bd:26:9d:3a:c2:a2:17:d9:28:c2:fe:c8:
73:1d:92:d8:6e:dc:78:19:52:b9:d8:53:7c:10:06:8e:2e:7c:
43:75:08:7d:33:91:dd:0f:5a:dc:fd:73:3a:ef:63:78:ec:3c:
9f:1c:6a:c6:5f:9b:f4:6e:0a:c6:ad:73:b3:6b:d4:2e:b9:a4:
c7:6b:30:1e:bb:7e:17:11:f6:28:d2:8b:60:a1:66:4c:80:dd:
65:e7:e3:eb:76:f6:07:e8:4a:bc:a1:17:43:4b:24:8c:2b:b9:
31:a5:fd:ca:ec:9c:ab:f8:c7:dd:ae:4d:da:d8:ec:52:cc:1c:
2e:6f:d3:9a:c1:57:08:ab:54:b9:1f:d3:3d:40:5a:81:e0:ee:
2c:2f:ab:59:a7:dc:8b:29:55:64:00:fe:ca:de:66:a3:85:d9:
f7:37:2b:0d:eb:88:c7:81:cf:bf:69:01:73:7f:46:60:09:44:
40:e4:76:c1:27:3a:45:84:c4:cc:e5:b8:41:b0:a5:6e:63:5c:
79:25:bf:52:dc:2c:ad:ee:e1:47:59:1d:f2:6e:8c:97:b4:ef:
5e:02:03:f0:bc:23:07:4f:b9:d5:b0:07:27:fb:16:2d:84:84:
5d:61:ba:7f:ed:65:16:4e:1f:99:c4:ec:2c:5f:59:0d:97:a7:
ae:52:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:13 2026 by rpki-client