
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json)
Hash identifier: e3ZowXoV4G9y+A8O8HDsxXc9tytw/HMQ0trOL+v8T9k=
Subject key identifier: DF:C8:07:21:B1:28:B8:AF:DD:3F:55:37:6C:5F:EE:1C:F4:48:6C:ED
Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
Manifest number: 020D
Signing time: Sun 01 Mar 2026 03:43:24 +0000
Manifest this update: Sun 01 Mar 2026 03:43:23 +0000
Manifest next update: Sun 08 Mar 2026 03:43:23 +0000
Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: sfiy8uMzqq4jgI33TNahBo10cAHQagw/O5xABa3OZlM=)
2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Validity
Not Before: Mar 1 03:43:23 2026 GMT
Not After : Mar 8 03:43:23 2026 GMT
Subject: CN=69a3b5dc-87b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:82:e0:d5:07:0a:a9:c0:4f:2a:26:b5:4b:
8d:57:d8:1c:db:df:73:f0:6a:ca:ff:4d:f4:63:82:
81:72:ba:be:4e:6f:18:69:ea:f6:26:52:8e:2d:89:
fa:ac:98:9d:e3:c6:41:02:c4:27:c9:18:e2:df:b8:
6e:cd:7e:4a:a9:7e:98:70:a2:39:44:46:79:13:0e:
5b:60:3a:c2:d9:39:51:5e:71:00:d9:76:a1:69:73:
a8:cd:f8:16:c6:69:79:77:3d:57:e6:d4:46:5a:19:
03:9b:35:b8:2e:a0:1e:9e:d9:0e:b4:17:1b:e6:73:
32:5d:92:4f:e6:66:35:16:e7:48:d4:92:85:38:b6:
62:6c:50:6e:8c:f8:6c:dd:7e:4a:07:c6:41:35:f0:
47:bc:c1:83:23:e1:95:7b:06:f3:82:15:b7:a0:f0:
a6:ca:e5:70:1d:a0:ed:23:40:ed:4e:c5:94:26:ff:
46:70:1c:02:d4:de:a5:fb:a9:ab:9f:1f:ac:b0:be:
52:ca:90:14:2d:5b:3e:3d:65:e7:ec:a4:07:20:e2:
df:a5:ab:3b:89:43:12:8a:e1:79:bd:b0:9c:72:03:
85:dd:64:8f:c2:79:b7:d3:34:87:ab:25:2b:4e:81:
88:5c:ef:c3:aa:45:7b:88:f8:0e:81:89:2c:b4:0a:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C8:07:21:B1:28:B8:AF:DD:3F:55:37:6C:5F:EE:1C:F4:48:6C:ED
X509v3 Authority Key Identifier:
keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:8f:2e:7a:c2:1b:21:db:39:66:9c:2a:1d:ab:1b:d5:58:
37:a4:60:cf:ed:b3:61:3b:0f:5a:84:8e:36:35:2b:42:7f:16:
f2:b4:13:7b:93:57:79:ba:fb:e8:44:17:c0:45:49:62:11:f5:
23:6e:84:19:fe:e4:e8:3a:9f:74:0a:45:ec:e0:57:00:af:31:
ed:67:a3:39:76:86:4e:4f:2d:ba:1b:00:09:eb:da:01:91:b2:
42:0a:fa:67:12:fc:36:3a:d1:f8:40:09:bc:c1:c0:11:f7:47:
d0:c0:31:3a:e5:af:e4:3f:7d:4b:db:ca:18:ac:6d:43:e2:09:
c4:67:3f:f3:0f:2f:ab:ae:80:9f:9a:cc:18:17:dd:a1:db:b9:
be:94:f9:1b:4c:3c:98:f6:22:fe:65:71:da:18:5b:57:65:64:
0f:5c:7f:ec:52:22:f1:c0:8a:07:e0:36:a7:dc:ca:21:dc:21:
62:52:a5:88:f5:6f:30:e4:05:fa:2f:6f:9f:c7:f6:40:df:a4:
c3:ba:be:21:30:1f:ce:9b:50:5d:a9:c9:1d:42:a6:ac:0f:65:
15:c0:d6:d9:bb:59:86:ad:84:9c:e3:fe:63:eb:19:78:b8:ae:
2b:91:a0:42:17:16:0c:5a:72:f1:ad:78:a2:df:99:8a:79:ae:
37:fb:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:45 2026 by rpki-client