
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json)
Hash identifier: UXF7OdyFeqmWTwn45VXjdXKpw21LW05xlVWeA040FQc=
Subject key identifier: 3F:D0:AD:92:F0:A0:B9:5D:CD:05:51:D9:2E:22:C5:56:EC:65:CF:1F
Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F
Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
Manifest number: 0263
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Fri 24 Apr 2026 02:00:29 +0000
Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: BaY4qwuLjvGUncc3SDl0tnRz17NoyeGZMschGoHl/0c=)
2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: adumd4cSs4Z/aUEG4n9Ouw9MYn5ATbtz758rupDb3wY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl
rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 24 02:00:29 2026 GMT
Subject: CN=69e1943d-5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:e9:1f:7a:83:65:c7:55:ef:9a:85:77:7b:
48:15:fc:ed:77:38:c6:84:d5:4f:8e:b0:8e:a0:3c:
fc:8f:9a:8e:4b:40:ab:07:3e:d5:89:0b:a1:bc:e1:
64:cd:83:c2:f5:b9:79:87:21:dc:0b:a5:a6:0f:a5:
ca:b2:84:89:5a:0f:17:c4:82:f9:57:8b:13:8d:30:
4a:cd:35:a8:7c:d2:3e:65:88:cf:67:c1:58:9b:61:
15:d3:f3:3f:c9:6c:92:b6:1f:e1:6c:e9:40:8e:e1:
fa:62:b9:d9:6e:6d:2e:2a:85:d5:be:f6:ac:29:2d:
68:2f:09:ca:66:4c:84:c4:cf:4e:aa:db:f2:b1:0a:
67:a1:53:ed:e4:d8:3f:58:16:19:67:44:42:25:6a:
6e:2d:24:24:41:a1:57:b3:5e:fd:1a:97:71:3a:f4:
d4:27:4b:7c:65:44:3b:a3:14:05:ec:02:64:d1:48:
39:bb:ad:7d:36:c8:a6:de:a5:bd:a9:3e:f0:95:65:
c0:d4:da:a1:8f:f7:c8:b8:b2:59:b1:75:02:a4:71:
1c:f0:43:80:f4:02:87:6a:f1:47:67:ab:94:f2:22:
a5:c7:20:15:aa:3f:0b:7b:18:65:9b:7a:d5:4f:e5:
ea:00:88:3b:3f:11:39:7d:67:34:2d:9a:61:00:50:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:AD:92:F0:A0:B9:5D:CD:05:51:D9:2E:22:C5:56:EC:65:CF:1F
X509v3 Authority Key Identifier:
keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:19:cd:df:7f:15:1a:fe:b1:50:2c:2a:ca:8a:98:74:0b:
b7:49:d0:4c:db:40:96:58:a3:bb:6f:52:e3:db:f9:75:fd:82:
22:ec:48:ba:4f:af:c2:51:8b:bf:2d:aa:71:50:00:61:0d:b2:
06:30:4a:61:39:8f:56:d9:4e:ec:c4:4f:87:3f:29:25:07:b3:
3a:33:e5:cb:fc:a3:ff:f1:e5:7e:0d:8a:17:72:b8:81:8b:6d:
fd:ce:73:10:7c:4b:fc:b9:c8:c4:75:5c:6b:e9:64:02:98:8f:
3d:10:30:03:2d:4e:6c:57:e2:f9:b7:18:61:32:d9:8f:a4:04:
3e:36:c5:1b:53:56:25:ad:4d:39:ed:1e:8c:dd:de:40:00:af:
6e:e8:8d:fe:60:fc:df:a8:39:05:bd:0d:6d:c0:ef:93:57:64:
0f:db:37:08:90:f5:e1:59:43:11:5a:92:75:a1:76:64:ca:f3:
75:ba:03:a3:b6:98:c4:e2:83:42:8a:70:eb:f8:89:23:50:34:
33:6d:58:6d:ce:4d:3f:1c:62:ed:7d:b3:a2:f1:9b:fb:a7:48:
bf:3c:6e:fd:da:48:10:07:3a:2c:06:62:22:2f:15:8e:a0:7a:
de:40:06:81:c9:9d:7a:89:86:f6:ec:3b:0a:c9:3d:e7:57:89:
50:17:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:51 2026 by rpki-client