
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: MU+OTpvAFuXj0QoMi/HWRmhTBHrut1rkViZr9u2XtDY=
Subject key identifier: 06:67:E5:8E:8D:D7:AE:B9:C9:66:C9:D9:09:23:82:4B:15:35:C5:61
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: E2
Signing time: Fri 17 Apr 2026 06:39:57 +0000
Manifest this update: Fri 17 Apr 2026 06:39:56 +0000
Manifest next update: Fri 24 Apr 2026 06:39:56 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: e+KT+z+S7eh/D4tV/iFynJ7WpUcjZxT52T1RxKjgvA4=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 7IPdyrB8hldu0/eD1JF7CKYpSU0HFM1oIZi+GkIqvMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Apr 17 06:39:56 2026 GMT
Not After : Apr 24 06:39:56 2026 GMT
Subject: CN=69e1d5bc-3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:6b:53:f3:ad:e7:eb:8a:38:33:64:3e:19:
ec:dd:a1:eb:98:16:d9:ad:07:84:20:00:19:6d:f0:
3b:63:5b:4d:50:e3:df:74:66:0e:f7:de:11:e4:43:
c2:c7:ac:cb:5b:be:3c:71:74:15:b5:f1:b5:5b:8c:
31:5f:e3:81:f7:ab:80:a5:c0:61:98:f0:1b:8e:8d:
44:a1:2d:02:2e:30:c9:9e:9e:00:ca:97:2d:f1:f8:
d7:f3:aa:84:3c:8e:3d:51:6c:3a:6f:98:00:72:e4:
e4:9a:aa:0a:dd:f1:c7:cd:63:40:18:bf:09:ed:7e:
5b:30:1a:be:2e:ff:d3:a3:36:f1:57:e7:74:e8:26:
d5:fe:2b:30:f7:59:57:72:c4:51:35:d1:3d:4c:7f:
94:d6:80:a1:63:95:91:76:f6:2f:18:68:79:19:57:
0a:43:e5:67:22:68:fb:ea:0f:9b:98:f5:81:f1:87:
72:6b:37:99:9b:59:f8:de:3a:87:17:c2:6f:d1:dc:
e8:75:33:dd:d7:64:39:9c:df:16:39:76:ce:43:c4:
70:be:bb:20:6a:dc:48:21:59:5b:47:41:42:2f:c3:
d6:71:51:51:66:67:69:95:28:7a:d7:db:e3:a3:30:
3e:70:31:3f:68:13:e6:b1:dd:e0:05:15:9d:78:7c:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:E5:8E:8D:D7:AE:B9:C9:66:C9:D9:09:23:82:4B:15:35:C5:61
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:28:39:71:58:d3:4b:28:03:7a:c2:88:38:a3:41:11:3e:
aa:6e:cb:d4:bf:af:ee:c5:4d:f9:5c:fc:bb:5f:ca:e0:ac:95:
63:f0:0d:30:39:1d:fc:31:c6:0e:99:ac:a1:03:cd:36:eb:1a:
ba:34:0f:7d:ef:82:70:c2:fb:b1:e0:26:78:e4:62:4b:9d:17:
a8:3b:28:40:ac:eb:49:eb:f0:c9:1d:2a:d0:48:75:4b:22:42:
b0:14:8c:b3:fe:62:f5:9e:e0:35:a6:b8:49:e4:7c:86:1c:fb:
8e:43:99:9a:4b:09:77:8e:3c:79:3a:65:a0:b3:66:b2:f4:c2:
7d:93:63:62:56:70:ee:49:3b:f7:b4:c8:0e:be:33:4b:3c:a9:
63:65:06:a8:4d:d9:b2:12:ec:84:e1:b5:30:24:7e:8d:79:df:
b7:42:25:85:2a:66:88:9f:f2:85:e4:01:a3:0d:fb:b9:e0:1d:
75:75:a4:ff:d2:8d:1d:c0:4e:43:c2:7a:a3:f7:9c:37:8c:21:
6b:1d:3d:38:10:b0:07:4b:d1:50:73:bf:5e:5d:d6:25:25:7e:
3f:ea:fd:1f:20:73:01:c4:a9:03:85:65:5e:42:7d:79:7e:dc:
d9:f7:5b:93:a2:26:76:db:60:d0:78:a9:d1:28:23:eb:8c:6b:
57:c0:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:48 2026 by rpki-client