
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json)
Hash identifier: KIh/PVsmT1mG2xuX6WyWNpyc5l0mlyCYJUzw0gbw2ZU=
Subject key identifier: 4D:3E:A5:BE:25:70:AA:5D:40:F6:CB:5F:11:D2:6B:8B:06:72:34:1A
Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
Manifest number: 0F
Signing time: Tue 28 Jul 2026 02:53:31 +0000
Manifest this update: Tue 28 Jul 2026 02:53:31 +0000
Manifest next update: Tue 04 Aug 2026 02:53:31 +0000
Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: 3DqKI9mLWqdlr2Ss05/ZSY35fsNYZBbcjK8hARLqVUM=)
2: 8197428E8A2F11F1979432C96D11F970.roa (hash: 3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=)
3: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 02:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Validity
Not Before: Jul 28 02:53:31 2026 GMT
Not After : Aug 4 02:53:31 2026 GMT
Subject: CN=6a6819ab-eea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:81:75:03:6a:0d:f9:3c:a5:57:18:0e:ca:
c8:46:90:44:13:d5:c6:7f:1a:95:18:e1:64:ab:83:
b9:61:a7:4f:b6:ab:9b:2b:83:c6:ab:f1:24:33:4e:
de:25:53:60:d7:1e:e8:66:cc:80:0e:a6:d4:7b:08:
7e:cb:9f:0d:1e:55:c8:12:fb:d0:8d:94:b5:79:e4:
ed:bc:2a:10:87:6d:fa:61:e1:4a:34:01:0b:97:e8:
a3:43:e9:03:a1:8f:ab:09:c7:9b:e5:a1:aa:32:33:
66:63:f7:07:3e:5a:6d:67:4d:1e:e4:f9:99:e4:ad:
ce:e9:ad:ad:91:7d:5a:37:20:8e:cf:64:0e:28:e3:
a1:8a:c7:b6:93:2c:3a:20:09:49:ac:92:d6:d5:83:
df:40:b8:6f:49:05:81:6e:99:85:0b:32:46:1e:54:
1e:2f:5f:64:03:59:ee:8c:3b:f1:9c:a3:22:ce:4f:
74:40:19:0d:a9:b2:23:1b:af:cc:5e:97:0e:34:1b:
73:df:85:34:4d:c9:ea:cc:9e:20:30:c3:89:cf:06:
ba:50:5d:c0:64:95:65:8b:7f:91:fe:58:e6:80:99:
09:ef:4e:2b:39:0d:9b:a0:ad:63:6a:d4:cf:de:da:
84:d3:aa:87:8c:6d:95:02:cc:0f:90:b0:54:30:2e:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:A5:BE:25:70:AA:5D:40:F6:CB:5F:11:D2:6B:8B:06:72:34:1A
X509v3 Authority Key Identifier:
keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:82:3d:26:6e:b0:15:71:15:3c:17:27:3e:81:88:34:0c:84:
8b:f6:c2:61:6c:6b:9b:5f:f7:7b:4b:55:54:e5:1a:a3:7a:83:
89:36:37:e1:01:ac:29:f2:46:3c:93:8e:54:65:4d:56:b4:17:
2c:91:f5:36:ff:8a:e7:e0:8d:0a:39:25:ee:cd:84:45:80:7d:
e1:c2:c2:db:50:87:9e:34:8c:7e:84:02:e9:b0:d9:30:8c:ae:
73:9d:af:05:33:f8:c7:31:30:95:25:a0:62:9b:b6:1e:81:71:
be:e6:1e:89:f3:6e:e0:88:1d:28:c3:93:1d:28:cf:63:fa:61:
b2:bf:56:04:01:a4:93:fa:c9:e5:46:ce:7c:2f:cc:da:73:6a:
f5:e8:90:bd:ea:7e:0b:0a:ae:d8:6d:68:a9:eb:df:6b:fc:1a:
7e:76:92:84:d0:16:a9:e4:bb:67:77:73:fe:1d:66:5f:81:7f:
d0:7d:32:9c:2f:1f:1e:05:57:92:ba:bc:b2:47:92:53:be:5e:
58:07:4a:2f:04:41:a5:21:7f:7a:d0:34:b9:9c:0e:40:f5:50:
d8:c3:47:ce:d4:5f:85:7d:e8:19:2b:7e:ad:9b:5e:22:97:b8:
61:c0:df:41:52:d0:d5:e5:ff:e2:44:04:03:eb:ec:67:38:fe:
e9:8b:71:92
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MjQzMjExMC8GA1UEBRMoRjVFQ0M5MzYyQzFEM0I3MzgyNEY1RDQyOTlBREJGQUI0
QUY4NEQ4RDAeFw0yNjA3MjgwMjUzMzFaFw0yNjA4MDQwMjUzMzFaMBgxFjAUBgNV
BAMTDTZhNjgxOWFiLWVlYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfzoF1A2oN+TylVxgOyshGkEQT1cZ/GpUY4WSrg7lhp0+2q5srg8ar8SQzTt4l
U2DXHuhmzIAOptR7CH7Lnw0eVcgS+9CNlLV55O28KhCHbfph4Uo0AQuX6KND6QOh
j6sJx5vloaoyM2Zj9wc+Wm1nTR7k+Znkrc7pra2RfVo3II7PZA4o46GKx7aTLDog
CUmsktbVg99AuG9JBYFumYULMkYeVB4vX2QDWe6MO/GcoyLOT3RAGQ2psiMbr8xe
lw40G3PfhTRNyerMniAww4nPBrpQXcBklWWLf5H+WOaAmQnvTis5DZugrWNq1M/e
2oTTqoeMbZUCzA+QsFQwLguHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTT6lviVw
ql1A9stfEdJriwZyNBowHwYDVR0jBBgwFoAU9ezJNiwdO3OCT11Cma2/q0r4TY0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyL0E3MDc2NEY2ODJD
QjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNPQ1QxMUNtYTJfcTByNFRZ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWV6Sk5pd2RPM09DVDExQ21hMl9xMHI0VFkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
NDMyL0E3MDc2NEY2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNP
Q1QxMUNtYTJfcTByNFRZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBkgj0mbrAVcRU8Fyc+gYg0DISL9sJhbGubX/d7S1VU5RqjeoOJNjfhAawp8kY8
k45UZU1WtBcskfU2/4rn4I0KOSXuzYRFgH3hwsLbUIeeNIx+hALpsNkwjK5zna8F
M/jHMTCVJaBim7YegXG+5h6J827giB0ow5MdKM9j+mGyv1YEAaST+snlRs58L8za
c2r16JC96n4LCq7YbWip699r/Bp+dpKE0Bap5Ltnd3P+HWZfgX/QfTKcLx8eBVeS
uryyR5JTvl5YB0ovBEGlIX960DS5nA5A9VDYw0fO1F+FfegZK36tm14il7hhwN9B
UtDV5f/iRAQD6+xnOP7pi3GS
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:17 2026 by rpki-client