
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
File: 9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft (raw, json)
Hash identifier: 50BN7Tj9PXSD3qBoCAlVVyO87Uuyq24ujJFT9xmeEXU=
Subject key identifier: 97:A9:69:BB:9E:4E:C2:A5:84:7C:4A:23:F4:33:6E:6F:B2:11:11:DF
Authority key identifier: F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
Certificate issuer: /CN=A91D2A6D/serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
Manifest number: 3A
Signing time: Mon 21 Sep 2026 00:38:35 +0000
Manifest this update: Mon 21 Sep 2026 00:38:34 +0000
Manifest next update: Mon 28 Sep 2026 00:38:34 +0000
Files and hashes: 1: 9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl (hash: o1n4+86Esindgf1Y9jAm9TuvLAmq6PRtLlgn78nQNuQ=)
2: 3F2882786B9911F19129D9096D47A888.roa (hash: LrMK47xAaSNKfir1pZggdafMp40B6KiAGZbM8Zztl8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Validity
Not Before: Sep 21 00:38:34 2026 GMT
Not After : Sep 28 00:38:34 2026 GMT
Subject: CN=6ab07c8b-a7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:ea:2b:70:08:38:3b:fe:ec:a0:f0:3e:2b:
81:fb:bd:33:c5:06:86:87:01:34:91:87:5b:68:38:
10:45:22:a8:a2:8c:f9:bc:93:2d:ea:18:dd:91:de:
38:66:9c:7b:e2:ff:9c:37:bc:a9:c7:c9:6f:99:e1:
01:7c:1f:58:75:1b:71:89:66:39:a8:c3:47:95:6f:
2b:a0:7a:f3:51:14:5a:17:4a:62:6b:a3:ca:e9:08:
71:9a:04:8f:52:1d:b7:07:82:db:04:fc:ef:d6:a9:
4f:bc:42:c8:bf:40:07:a9:a8:ba:d1:ff:53:bf:89:
da:11:14:98:8a:e9:a6:96:13:80:d6:51:48:9b:0f:
1c:55:e1:7b:d0:ed:7c:ba:bb:ee:2e:5c:0f:1e:ed:
b5:21:ce:f1:1e:92:5c:cb:d2:d2:3f:36:24:21:50:
fe:24:22:52:b6:f6:f0:04:3c:3e:74:ee:b0:1b:48:
02:13:6e:6a:e0:1b:5a:ac:ad:a8:d4:12:3d:3d:c8:
c5:cc:7d:c9:2f:f5:77:5a:7f:b3:ee:d3:28:18:21:
9d:38:b1:c1:04:74:d8:cc:91:f9:99:49:08:88:79:
1a:61:92:51:34:ed:44:cc:14:70:6f:46:65:cf:80:
9c:d6:8e:80:7c:20:32:a3:3c:9c:c3:2c:69:71:85:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:69:BB:9E:4E:C2:A5:84:7C:4A:23:F4:33:6E:6F:B2:11:11:DF
X509v3 Authority Key Identifier:
keyid:F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:02:de:bd:d7:d8:99:f2:d8:cf:df:49:ae:3f:b1:d0:b4:a3:
4a:76:8f:b3:c9:d4:06:25:ea:9e:f7:f0:75:b6:47:53:97:56:
9f:3d:56:2e:68:8c:00:e8:5c:a0:2c:6e:5b:7a:98:be:76:d3:
4c:af:2e:7b:2a:b2:db:20:04:b2:cb:0e:2a:4e:48:46:34:24:
df:8d:5f:f8:cd:3a:f3:34:2a:bf:8d:ce:dd:79:aa:e4:4a:7b:
4a:e4:2d:6f:74:54:64:91:48:66:80:41:54:b8:f4:41:89:d2:
84:8a:5c:74:87:14:9c:c4:15:ca:e9:f3:84:4f:86:07:9e:d9:
6c:93:54:67:e8:53:6a:e8:99:cd:a4:b8:fa:9d:63:2a:e8:a9:
c8:35:be:73:2b:8d:a4:88:aa:9e:3a:7b:38:97:5a:d3:03:9e:
b5:f7:c8:b2:18:48:fd:98:5f:05:bb:81:3a:a8:a3:5e:02:fa:
91:d7:d5:0e:c2:3e:f1:93:dc:75:7b:69:ad:37:67:6c:96:82:
20:4d:2e:b7:37:51:64:47:f3:39:09:a2:96:34:db:f7:cf:64:
cb:41:cf:4a:af:26:0b:44:80:eb:ce:64:88:ea:d5:00:18:0b:
4d:f1:b2:56:45:60:ea:c4:de:bd:d0:cb:d9:c0:50:92:bc:f5:
59:45:70:7c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkE2RDExMC8GA1UEBRMoRjY5MTkzODE2OTZBRkI5MTdEMkEyRkNFNUYyMUMxRDg1
MzNGRjE2MjAeFw0yNjA5MjEwMDM4MzRaFw0yNjA5MjgwMDM4MzRaMBgxFjAUBgNV
BAMTDTZhYjA3YzhiLWE3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtneorcAg4O/7soPA+K4H7vTPFBoaHATSRh1toOBBFIqiijPm8ky3qGN2R3jhm
nHvi/5w3vKnHyW+Z4QF8H1h1G3GJZjmow0eVbyugevNRFFoXSmJro8rpCHGaBI9S
HbcHgtsE/O/WqU+8Qsi/QAepqLrR/1O/idoRFJiK6aaWE4DWUUibDxxV4XvQ7Xy6
u+4uXA8e7bUhzvEeklzL0tI/NiQhUP4kIlK29vAEPD507rAbSAITbmrgG1qsrajU
Ej09yMXMfckv9Xdaf7Pu0ygYIZ04scEEdNjMkfmZSQiIeRphklE07UTMFHBvRmXP
gJzWjoB8IDKjPJzDLGlxhUKHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl6lpu55O
wqWEfEoj9DNub7IREd8wHwYDVR0jBBgwFoAU9pGTgWlq+5F9Ki/OXyHB2FM/8WIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTZELzUwQjBDMjg2NjBB
ODExRjFBM0I1RUI4RTc5NDdBODg4LzlwR1RnV2xxLTVGOUtpX09YeUhCMkZNXzhX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOXBHVGdXbHEtNUY5S2lfT1h5SEIyRk1fOFdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QTZELzUwQjBDMjg2NjBBODExRjFBM0I1RUI4RTc5NDdBODg4LzlwR1RnV2xxLTVG
OUtpX09YeUhCMkZNXzhXSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC5At6919iZ8tjP30muP7HQtKNKdo+zydQGJeqe9/B1tkdTl1afPVYuaIwA6Fyg
LG5bepi+dtNMry57KrLbIASyyw4qTkhGNCTfjV/4zTrzNCq/jc7dearkSntK5C1v
dFRkkUhmgEFUuPRBidKEilx0hxScxBXK6fOET4YHntlsk1Rn6FNq6JnNpLj6nWMq
6KnINb5zK42kiKqeOns4l1rTA56198iyGEj9mF8Fu4E6qKNeAvqR19UOwj7xk9x1
e2mtN2dsloIgTS63N1FkR/M5CaKWNNv3z2TLQc9KryYLRIDrzmSI6tUAGAtN8bJW
RWDqxN690MvZwFCSvPVZRXB8
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:37 2026 by rpki-client