
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier: uxoW/7hpNpgqcpvNrQk9OZordY+rbc55YbWPP8yxArc=
Subject key identifier: 3C:72:DF:07:20:EC:8D:6E:CB:6C:C9:F0:D3:D1:B5:99:AF:C5:38:1A
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial: 0D34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number: 0D28
Signing time: Tue 28 Jul 2026 18:19:25 +0000
Manifest this update: Tue 28 Jul 2026 18:19:25 +0000
Manifest next update: Tue 04 Aug 2026 18:19:25 +0000
Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: VxIMvmD6eZhQIpOAkXkIumSY/ZTwKoIUPHZQbaXJUwg=)
2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lt2U8Cu18VjD9LLrlZLJxuz3gscrRVmnZ1LYN6DAgls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Validity
Not Before: Jul 28 18:19:25 2026 GMT
Not After : Aug 4 18:19:25 2026 GMT
Subject: CN=6a68f2ad-fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:f0:45:e3:be:cf:f2:dc:61:93:7f:7d:bd:
94:99:43:ec:ea:af:07:81:58:20:af:98:66:6c:cf:
48:bc:ac:b1:0a:53:50:ac:2f:3a:9b:22:a1:28:3d:
77:a1:65:24:66:25:2f:66:89:fd:5a:88:ae:77:8c:
66:66:80:8b:b4:9f:dd:24:36:c3:26:f6:82:cc:db:
ec:99:c1:0b:5f:a4:ee:6b:8a:5e:a9:69:ba:d9:85:
a0:1f:f8:b8:60:75:3e:97:ae:82:81:5d:80:94:14:
b7:0d:4a:33:1e:12:10:8c:f4:b6:7d:3b:18:11:40:
78:f8:60:34:8a:4a:cb:75:d3:ce:b3:19:4c:6e:63:
25:9b:54:09:43:3e:30:c7:48:3d:cb:4a:0e:ee:f0:
2c:4a:dd:bc:49:ca:01:53:89:0b:f9:9b:19:4b:83:
2c:55:43:34:fa:7d:57:dc:79:d6:cd:6b:d3:81:0e:
22:49:03:91:2d:b2:a0:8b:94:88:a2:ac:3b:38:18:
af:65:ed:51:4b:ae:f1:62:9d:88:d5:d6:52:dc:97:
25:4d:c2:b4:2d:ee:c1:88:0d:f5:79:fe:2c:6a:1a:
ed:19:2a:91:c0:53:9c:da:87:a2:d5:76:aa:27:7d:
df:f9:9a:99:f0:53:c9:26:b3:d5:36:10:c2:bf:96:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:DF:07:20:EC:8D:6E:CB:6C:C9:F0:D3:D1:B5:99:AF:C5:38:1A
X509v3 Authority Key Identifier:
keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:af:16:46:4f:30:85:38:63:b8:95:c8:24:33:91:d0:00:
4d:94:b8:06:8e:2b:1c:5d:92:45:74:ea:2a:50:36:8e:d3:71:
8f:da:69:f7:b4:95:7c:ff:62:f8:25:1b:ff:80:88:d2:66:b3:
d0:ca:4f:4b:4e:62:7f:cc:b9:74:10:d6:6c:fd:d5:07:ab:ea:
59:28:c4:05:7e:96:e1:9e:33:e2:d5:15:83:ac:bc:55:c3:f0:
86:09:50:2a:ca:9d:1c:08:b1:ec:ec:5e:6e:3a:4e:04:c2:c4:
7a:3d:26:2c:19:02:02:c4:e2:53:6f:12:4d:41:96:91:7a:a5:
2f:03:1a:e3:80:74:c8:b0:c0:8d:39:68:d4:a2:f5:41:0c:79:
c3:64:f8:fe:d1:29:12:97:ea:7d:7a:55:c5:7b:be:0e:f6:4e:
c3:41:6e:25:35:58:cc:26:e0:4e:50:00:93:49:22:c8:dd:28:
72:52:10:2d:c2:d6:47:d4:95:99:67:e9:b7:7f:0d:55:0a:c3:
86:04:4c:86:ee:b4:74:c9:32:ee:6c:43:1c:00:75:df:25:2f:
e8:aa:15:a9:88:af:fc:31:6c:84:1a:e7:25:4e:9b:90:2e:4e:
4e:67:c0:9a:c3:8c:99:0c:3f:9d:ad:ad:b7:e7:05:88:5f:43:
31:f2:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:13 2026 by rpki-client