
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: QvbhWnTN3njbQMe07z/EhhYRtwxthMBFjBMCjk3hBZ4=
Subject key identifier: 5D:59:11:FB:A6:73:7E:0D:24:DD:F7:36:91:C2:6B:03:B2:C5:8B:D4
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 0427
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 041F
Signing time: Thu 01 Oct 2026 00:40:04 +0000
Manifest this update: Thu 01 Oct 2026 00:40:03 +0000
Manifest next update: Thu 08 Oct 2026 00:40:03 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: B7f2o+yllsdHREiZsd2cAFMUwTgf/uQXZguq/9PwBBE=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 00:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: Oct 1 00:40:03 2026 GMT
Not After : Oct 8 00:40:03 2026 GMT
Subject: CN=6abdabe3-9687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:13:2b:12:55:02:4c:74:0b:63:85:f2:41:
93:f9:0a:9f:1a:8c:5d:b6:62:83:cf:c3:ba:c9:c6:
9b:be:2f:a9:2a:0a:a8:a5:f7:78:29:97:d7:7f:8c:
d2:b5:c7:cd:87:c6:ec:76:38:b2:39:0a:2f:8c:a5:
09:6a:36:81:a8:b8:3c:ee:3f:fc:b2:50:5c:76:42:
44:dd:b4:be:69:b9:56:46:c6:b6:01:1f:d2:6f:36:
77:e1:e4:46:62:ca:87:73:0d:b2:33:cb:1a:e1:54:
77:18:5f:47:af:e0:19:0b:78:18:3c:27:8d:8d:10:
56:08:cd:0a:fd:6d:79:e9:41:8a:59:7e:91:1a:8e:
88:44:91:93:7d:ad:cb:04:54:6d:fc:c3:ab:3f:48:
9a:b8:97:97:0e:51:35:14:f3:2b:49:4a:1b:eb:13:
00:77:3e:c1:37:8f:d5:e7:78:80:fc:58:33:ab:e9:
fd:c0:0b:d2:02:df:95:78:e7:43:b6:08:b6:b1:0e:
cc:48:3b:d6:d9:99:e8:2e:ea:a0:32:90:1e:52:9b:
c1:a6:1c:26:d8:85:41:5a:f1:88:7b:f9:89:9b:d2:
e5:da:19:c9:5a:13:5a:df:86:d6:fc:7c:b1:ff:e6:
f9:64:15:30:4c:df:31:6a:7f:2b:39:dc:f5:3f:6d:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:11:FB:A6:73:7E:0D:24:DD:F7:36:91:C2:6B:03:B2:C5:8B:D4
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:1c:58:88:96:6b:ea:02:e2:f2:18:78:b7:7c:be:11:2b:
59:f5:09:71:68:45:f0:9f:3f:1f:f8:9d:09:ba:a4:50:67:9a:
a7:d8:ba:ea:18:43:40:75:e2:42:06:3f:4e:88:10:50:fd:8c:
12:45:24:08:5c:ab:42:8c:c2:d6:c2:00:fe:65:6b:51:e4:2f:
5b:38:29:03:ef:a2:56:61:d0:3a:98:6a:63:09:41:c8:ca:b6:
72:ce:79:cb:ae:9b:89:80:d7:b8:10:4a:51:2c:07:63:ab:7c:
97:db:c3:71:ef:f1:33:dd:b1:5a:20:b0:47:5c:23:c7:91:b0:
c7:73:1d:4f:e2:20:02:fb:dc:65:b1:73:27:f1:6e:9f:9c:b2:
14:28:e8:32:11:e9:13:05:ca:61:76:0d:e1:07:08:a4:58:d7:
bc:19:34:95:ca:e7:da:ee:5b:43:5c:5e:91:2a:e7:30:b4:03:
73:0b:3e:c1:2b:d5:dd:17:a3:ba:1c:ab:ee:bb:6e:74:26:a3:
e3:5e:40:a9:de:65:95:30:9f:78:eb:5b:3e:88:d9:01:4d:fd:
7b:aa:44:42:4a:ac:72:04:89:45:c8:7a:61:4a:12:bf:da:e1:
c0:44:b7:82:aa:d7:75:1b:55:1b:d5:52:ee:19:41:d2:80:77:
3b:ce:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:23:14 2026 by rpki-client