
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json)
Hash identifier: mgDw7y4oM/CkvqOiv+tyynSjUAOAlh82bdE3YFDMrss=
Subject key identifier: E0:8A:51:C7:49:62:16:25:B3:DE:C2:08:55:4E:E3:96:46:51:4D:53
Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
Manifest number: 0122
Signing time: Fri 17 Apr 2026 05:24:50 +0000
Manifest this update: Fri 17 Apr 2026 05:24:49 +0000
Manifest next update: Fri 24 Apr 2026 05:24:49 +0000
Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: /59t0wZdJE1uYDpvF9SaKUtB2vMQt4zTsFIfYrstOGU=)
2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 57TiW0HF6uS3fetdAv+csAzQQDRYUvp9sAcbYt2exJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl
rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Validity
Not Before: Apr 17 05:24:49 2026 GMT
Not After : Apr 24 05:24:49 2026 GMT
Subject: CN=69e1c422-d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:da:62:e0:62:76:78:3f:6e:80:4c:d3:cd:06:
7e:95:f7:52:05:b6:01:b9:94:54:aa:4e:f0:79:09:
7c:e6:e4:a6:a9:d6:d9:89:ff:90:39:c3:08:ad:58:
e1:bb:cf:5f:c1:2b:ac:c6:24:4b:25:31:e2:3d:e5:
00:8a:6a:d9:78:fc:5e:e9:3b:a2:cb:6a:ae:7b:70:
d7:8c:14:83:93:0e:28:3a:6b:d9:8e:6b:f8:36:95:
fc:63:33:ae:8d:71:2a:17:29:c6:b4:97:2e:19:45:
38:95:62:ec:53:72:11:de:7f:86:e4:10:31:a3:51:
df:4b:6d:94:d6:67:b1:86:53:2b:dd:28:5a:07:ff:
d8:73:5d:cd:54:aa:1d:34:43:c6:a3:e6:51:00:b0:
87:b6:40:fa:4f:d0:2f:36:e1:14:1f:b4:c4:47:f7:
7a:1f:cb:b3:45:c1:f2:b6:a0:2e:62:6a:a3:30:d1:
19:21:70:bb:81:7a:de:1e:75:11:14:79:ac:5f:81:
88:69:98:d7:e2:a7:c6:77:90:d7:e1:bf:88:90:2e:
77:7c:ef:9c:a7:18:ec:ee:ff:ca:11:58:df:75:c6:
5a:9b:9f:2a:72:1f:47:03:d4:c7:22:8a:db:9a:e4:
12:30:9c:e7:73:3a:95:99:f0:1d:25:d9:7b:f1:5b:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:51:C7:49:62:16:25:B3:DE:C2:08:55:4E:E3:96:46:51:4D:53
X509v3 Authority Key Identifier:
keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6e:35:8d:5b:15:51:1a:a6:86:52:69:bd:88:6f:e9:ef:ef:
20:e7:35:cd:ae:a8:a8:5e:ca:55:a4:2b:60:79:f1:23:e1:b3:
5b:40:66:10:09:38:6c:4f:a4:87:e0:8e:e5:0c:41:52:72:fd:
33:74:35:fc:59:e3:b4:ef:56:7b:94:6e:66:0d:54:0a:84:88:
b6:c7:12:cc:41:ac:f1:76:4d:16:d0:71:46:8a:a0:6d:25:f3:
ec:04:b6:65:6d:6e:f1:19:ef:4a:3d:d9:91:31:50:0a:0d:1c:
43:de:07:c0:4a:82:c2:8b:a2:1d:2d:5f:60:eb:16:b4:b3:12:
5a:4e:41:10:2b:2c:0d:b9:67:66:13:a3:7e:c0:e2:97:b2:21:
a7:6b:e2:16:dc:2c:1c:1b:ab:05:bd:f8:08:b6:61:6d:a5:b8:
b5:07:b1:7d:97:1c:08:92:6f:5f:9d:2b:bd:a0:57:33:11:0f:
f5:75:d3:29:97:d8:d6:61:4a:8a:d5:04:83:72:45:f7:82:61:
64:fc:77:25:bc:72:93:d6:03:d5:55:5e:28:5a:c0:86:9f:1b:
6c:f1:bf:ff:21:3a:85:7d:c5:6c:cf:5f:4c:b9:4f:2a:4c:74:
55:28:7f:a4:1f:ef:cb:e4:48:3c:0a:8a:f2:dd:91:c8:57:e1:
b1:77:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:37 2026 by rpki-client