
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier: 6ebh9qbOQmqR2wTtYySK9Zw8BdMqsV5GQe/cQz9eImQ=
Subject key identifier: D5:B4:07:32:7B:FC:E3:AD:14:68:0A:33:3C:CC:74:DF:1B:C6:14:5A
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number: 06C9
Signing time: Thu 16 Apr 2026 22:11:40 +0000
Manifest this update: Thu 16 Apr 2026 22:11:40 +0000
Manifest next update: Thu 23 Apr 2026 22:11:40 +0000
Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: 0Eo1vBawu8/uMbN3QIM+7iTPWnRFbciLN12JivENV2k=)
2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: 5o5rYNJMY6u7IAuqR1fUcxMRSoD/mkjMM0hq6ZRpfKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Validity
Not Before: Apr 16 22:11:40 2026 GMT
Not After : Apr 23 22:11:40 2026 GMT
Subject: CN=69e15e9c-9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:cd:19:50:9b:35:5b:59:4f:68:a6:b8:75:
0d:ec:05:34:42:f3:6c:ec:44:87:53:a3:41:e8:23:
23:12:36:87:e4:34:f7:7c:e3:f1:1f:c6:d2:38:24:
f8:16:88:e2:0c:05:33:a1:03:39:08:84:8b:38:d5:
5f:26:b0:84:59:87:a7:76:bd:1a:0b:a0:d7:6b:f7:
8c:23:19:e9:4f:d9:40:2a:26:ee:a1:ca:8e:6f:a3:
4f:9e:33:6b:75:75:84:09:0b:07:99:2b:e7:cd:a2:
cf:7e:e4:5c:df:bb:91:5a:ce:a0:23:11:aa:e9:b2:
72:32:5a:75:96:2b:68:35:e4:9c:fe:f1:17:4c:fa:
23:81:3b:f7:c6:49:96:38:23:51:a1:00:a2:fe:4c:
ad:12:93:92:eb:29:55:54:7b:cb:34:3a:53:05:cd:
f8:d0:e6:df:3b:7d:b0:64:25:a1:26:f3:a2:a7:41:
4a:ac:73:14:ca:33:5f:22:cf:8b:28:84:83:76:a7:
5c:dc:67:9a:e9:ed:e2:da:f4:3d:3a:04:15:b1:fe:
5a:dc:04:1a:61:fd:af:d5:e7:97:7b:57:a3:b1:95:
fd:47:48:c6:ff:db:76:18:20:f6:2c:4d:64:a4:bb:
7c:dc:b2:25:53:5c:fb:0b:8c:c2:e0:99:5e:d0:59:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:07:32:7B:FC:E3:AD:14:68:0A:33:3C:CC:74:DF:1B:C6:14:5A
X509v3 Authority Key Identifier:
keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:5b:ca:bb:03:7e:5a:02:23:e5:6e:8d:0f:e0:49:d5:90:
4e:ac:23:40:0b:78:17:b8:c1:35:5d:95:23:f5:3d:68:3d:92:
54:31:31:71:4a:56:30:df:4e:ed:c0:22:87:bd:49:37:79:90:
12:80:da:26:f1:5f:6a:00:8e:ca:bc:47:83:5a:96:47:a9:c6:
83:4a:25:14:79:0d:be:d5:73:9d:51:37:6a:42:58:8d:24:1b:
43:ec:d8:83:b1:4a:3c:85:d7:55:34:09:19:60:c0:b3:13:47:
e1:a8:9a:b5:38:fa:1a:61:16:3a:c7:34:5a:97:c9:79:1b:1f:
8c:db:7d:ba:9b:4f:79:bf:78:a3:6a:3e:9a:4e:09:27:5e:84:
42:0b:cf:8e:73:70:17:66:c4:17:41:a9:ac:92:d4:75:e1:ed:
7b:18:4e:f2:89:39:27:6e:ed:c9:58:57:6c:05:47:8e:c5:72:
cf:ed:2b:cd:d7:2f:b0:fb:4d:b8:52:a1:68:a9:48:c5:41:6b:
3b:85:db:a9:cf:b9:91:af:70:b6:bd:6b:f2:c0:7c:21:f7:7d:
f4:1a:ed:d4:ba:20:ab:1b:ae:b0:b8:5a:b9:4f:d6:88:f1:83:
dd:10:f4:98:dd:be:7d:e5:a8:57:6e:56:35:b6:51:19:93:85:
aa:79:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:23 2026 by rpki-client