
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json)
Hash identifier: v99NxXmsopNHnL4LnJXCLdj6a4/GXi6ThfQK/9+m8pU=
Subject key identifier: 22:4B:26:F2:F1:76:5F:94:F4:42:8D:74:1C:A1:F5:00:DE:91:B2:8D
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
Manifest number: 02B3
Signing time: Mon 27 Jul 2026 02:41:45 +0000
Manifest this update: Mon 27 Jul 2026 02:41:45 +0000
Manifest next update: Mon 03 Aug 2026 02:41:45 +0000
Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: EQ/5CTI2cLa2yB/kEunIkHI2dUqys7HX7N12ZhZ/DwE=)
2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Validity
Not Before: Jul 27 02:41:45 2026 GMT
Not After : Aug 3 02:41:45 2026 GMT
Subject: CN=6a66c569-8ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:b9:95:51:a3:93:5d:af:fa:55:01:d0:6c:
96:42:db:79:e6:86:7d:6a:12:44:65:5b:94:36:82:
0a:93:58:2c:5e:f0:cc:c1:ea:96:12:1c:f8:6c:8d:
2a:52:0e:42:b4:0b:a6:7b:31:86:68:85:74:35:22:
92:cb:6b:93:c5:6b:61:16:4b:ad:05:53:ee:32:48:
47:3d:cf:26:43:73:d9:2d:38:11:81:66:33:fc:9f:
80:b3:d5:81:9e:41:25:38:f1:13:76:5e:d6:84:4d:
6c:07:6c:92:7b:06:4a:9f:42:5e:9f:92:cf:0a:a5:
61:09:41:fa:e6:50:43:fb:4d:91:44:38:71:5c:48:
e5:a0:de:38:93:31:aa:07:c4:7f:0f:0c:fd:fc:8f:
8e:86:61:68:07:6e:ea:e0:9c:b3:df:7e:cd:eb:16:
22:c9:d2:14:58:3c:7d:23:a3:1f:16:c3:ca:49:fb:
f7:1f:de:cf:df:a5:b2:9d:ec:4b:86:49:c7:35:7d:
6e:0d:88:03:90:d9:d2:17:4b:ba:e9:b7:c0:c8:3c:
89:06:a3:c0:df:cc:12:28:da:45:0f:af:2b:19:6e:
9c:06:96:4e:87:79:b1:a2:a4:84:c8:3b:f8:21:ce:
cd:a4:8f:fe:2e:08:c0:41:1e:57:ba:99:ef:a5:9f:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4B:26:F2:F1:76:5F:94:F4:42:8D:74:1C:A1:F5:00:DE:91:B2:8D
X509v3 Authority Key Identifier:
keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:ba:df:14:19:66:e8:55:92:09:a1:c2:47:40:21:17:b4:
fc:f1:1e:61:b8:3f:67:1e:5f:70:08:64:e8:39:84:4e:fc:4b:
86:59:d4:1c:d5:21:fe:34:b5:1e:a2:d8:3c:b6:a2:29:8c:b5:
56:8d:b0:20:f5:d3:27:e8:f6:00:47:ad:ae:e9:78:72:63:5c:
69:5f:fd:ed:bb:9a:85:e2:ab:cc:7c:d1:92:84:13:92:1e:ac:
93:ea:97:b8:04:19:7e:59:84:b0:84:05:31:32:3c:e5:d5:4f:
d2:45:ac:1c:eb:8f:2c:0d:ab:95:75:f5:47:34:39:9b:91:77:
79:6c:d3:f1:6a:29:04:a3:8c:9b:af:51:c7:af:d3:3c:60:ff:
a8:07:f6:ec:62:04:ea:61:f8:21:ff:eb:3e:0c:b4:3b:9a:22:
da:3b:10:52:87:01:ec:42:9c:72:70:3b:4d:6f:72:81:84:dc:
cf:86:87:e4:5c:59:49:47:23:3a:26:c1:b3:0e:cb:e5:24:56:
53:b0:14:47:59:8d:9d:f2:a8:37:25:82:1c:db:ee:47:61:37:
71:ce:9e:7e:ec:a6:6b:e9:22:f8:84:c2:a6:54:98:0e:dd:3d:
40:ef:c2:ad:f1:d1:a7:d6:9c:92:a6:f7:92:42:93:58:fb:08:
e8:da:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:32 2026 by rpki-client