
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier: luHStj5U3pOkOQDx4/QX0v4R5quH8ociGB36CctwX4c=
Subject key identifier: B3:05:3F:A1:7F:BF:28:B4:CA:74:99:C1:B7:D2:6F:DD:30:C2:E9:44
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial: 3531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number: 41E7
Signing time: Thu 16 Apr 2026 15:01:27 +0000
Manifest this update: Thu 16 Apr 2026 15:01:26 +0000
Manifest next update: Thu 23 Apr 2026 15:01:26 +0000
Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: 1XxFaY7L+R3QHnq45Csie+fvTomK8ZD4+JsadLDcPxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13617 (0x3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Validity
Not Before: Apr 16 15:01:26 2026 GMT
Not After : Apr 23 15:01:26 2026 GMT
Subject: CN=69e0f9c6-800f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:5a:58:71:55:8e:41:3d:0b:fa:60:17:83:
6c:33:7a:e4:f3:c8:84:f2:d6:3c:6c:d8:c3:3a:e2:
85:b3:2a:b7:19:28:aa:d9:ee:a5:fa:1f:3a:4c:78:
50:01:10:4d:2a:8c:27:3e:66:85:24:68:d2:ef:b1:
91:ed:04:a8:b5:d3:4d:bf:90:fb:3a:7d:9a:98:4f:
7f:22:95:ec:85:c7:9c:93:05:5d:bd:61:94:85:36:
f8:2e:42:14:20:71:12:a5:94:2a:64:fb:f7:b8:1f:
44:38:81:e1:6c:23:0a:0e:52:23:56:9a:26:2c:1f:
1b:80:c7:4e:63:6a:62:52:af:0f:8b:fe:45:0b:55:
c1:9b:1e:47:92:a8:c2:53:7c:2d:21:bb:2a:4e:e1:
1c:15:fd:60:ae:0f:53:86:49:58:0b:a2:ce:b6:41:
45:ef:23:96:4f:6e:92:a1:97:e3:d0:70:1e:de:9f:
7f:0b:2a:a0:e1:3b:ad:06:fb:5e:5a:c8:ce:9a:c7:
f5:33:4f:0b:09:f8:29:af:78:08:f5:3b:12:3f:f5:
75:64:a5:f4:cb:f9:67:5e:80:19:00:e2:a9:b0:ae:
5e:ca:0c:cc:3e:22:2b:f1:fd:c4:f4:0d:ac:05:8e:
62:15:c5:14:fe:81:12:61:28:dd:2d:54:55:e4:8d:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:3F:A1:7F:BF:28:B4:CA:74:99:C1:B7:D2:6F:DD:30:C2:E9:44
X509v3 Authority Key Identifier:
keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:49:86:70:a1:3b:ef:3f:e8:a5:2e:8b:c3:85:bd:a3:53:9d:
aa:43:d5:db:2a:26:77:24:6a:1b:3b:e1:4f:0f:6c:01:48:e4:
54:71:82:23:71:39:34:54:70:58:7a:9e:3f:70:5e:65:54:72:
9e:e4:71:68:4d:0b:03:42:4d:86:a0:b8:99:c4:13:1a:8f:b9:
14:70:0f:fe:58:ea:e8:8f:e1:23:75:f3:17:9d:9a:ca:96:a0:
e1:fa:70:63:e0:80:09:1c:f3:64:32:06:5b:30:c2:1a:4a:cc:
d5:d5:09:bd:25:b8:08:4b:c8:49:90:56:cb:03:9f:00:5b:27:
6a:de:73:bf:aa:0f:17:16:d4:4a:b6:c0:42:a8:11:a2:93:b0:
55:26:e8:25:6f:63:61:1f:7d:cc:2b:db:2a:55:1a:6d:73:56:
b9:7d:ef:3f:bd:1d:0c:3d:18:59:da:23:3f:8f:48:8c:76:73:
b9:b2:9e:ee:e8:ac:b1:3a:1a:34:35:9d:5a:d4:4e:6d:ae:02:
3d:82:0f:ff:24:20:43:22:26:ee:79:84:ba:c8:d8:86:76:9d:
8f:7c:06:6e:56:aa:e9:dc:cf:48:89:5c:a9:a5:0f:a3:b4:3a:
44:93:eb:c5:c8:5c:fb:a7:df:bb:92:9b:d1:06:f7:26:ea:51:
69:22:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:45 2026 by rpki-client