
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier: acQceXIWXqd2dtDHydmkLU3X0BYpfUJknLyBVHIS74I=
Subject key identifier: CB:0D:6B:31:DB:9F:BC:4B:45:A9:A6:85:72:5D:22:CB:DC:E7:DB:85
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number: 07CF
Signing time: Sat 28 Feb 2026 21:44:15 +0000
Manifest this update: Sat 28 Feb 2026 21:44:14 +0000
Manifest next update: Sat 07 Mar 2026 21:44:14 +0000
Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: SV+0ckwBKzO+5yeZJIpMaNUvPFhcSUnJNcUHK8sGG0Q=)
2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: Oj9FhDR2K8lUe60n7u+qOlovqsf3jgizM0Z5FPXWMH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Validity
Not Before: Feb 28 21:44:14 2026 GMT
Not After : Mar 7 21:44:14 2026 GMT
Subject: CN=69a361af-87e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:03:81:db:40:9a:7d:8b:0d:2d:c8:a5:b2:
ac:fc:eb:b2:7a:b2:c6:46:c7:37:ed:da:4c:e1:62:
1b:48:3f:d1:da:cb:ae:c8:52:11:52:63:d5:ea:20:
e3:a4:16:04:a1:84:8f:58:04:cb:fe:cf:73:27:72:
a8:8f:a7:9a:22:b5:b5:7e:b9:09:98:a8:88:e7:07:
a3:c2:dd:70:f3:ab:49:c1:ec:e0:05:e8:6d:51:86:
94:59:3b:c9:b9:41:66:ee:95:67:5a:65:72:a6:66:
f0:c9:af:e3:4f:a2:5a:25:da:67:36:b5:a6:9e:76:
9b:26:cb:10:9a:ce:22:bc:e2:54:31:20:c4:39:11:
d3:73:32:f6:9c:3f:83:f4:14:7f:c0:df:dd:1e:f7:
00:02:8b:5a:ff:71:1a:3c:e1:fe:8e:4f:9d:f0:d0:
25:60:60:2c:66:fb:eb:a7:54:c8:82:35:be:47:2a:
e4:d6:de:dc:4c:28:17:79:ba:74:7a:86:4d:6c:1a:
18:a8:2e:9f:57:95:b0:18:62:69:5f:f5:92:aa:75:
4a:57:46:b3:88:f5:1d:0c:37:5f:62:e2:6b:a0:c6:
e8:a2:63:3a:60:78:f5:c4:ab:c7:c3:34:0d:8a:9a:
f7:6d:e6:62:50:24:7e:9f:e6:a2:10:4c:4e:79:a9:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:6B:31:DB:9F:BC:4B:45:A9:A6:85:72:5D:22:CB:DC:E7:DB:85
X509v3 Authority Key Identifier:
keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:06:bf:ba:56:8b:ad:7a:3c:55:67:12:ee:9d:ed:6e:32:
91:a3:a5:0b:24:27:69:af:89:18:93:92:ff:37:f5:30:5a:71:
e4:e9:7f:f8:51:cc:2e:8c:a2:68:84:83:16:95:2d:1c:68:b8:
e2:e5:63:ad:1d:ef:a2:a7:fc:54:a1:3a:54:e9:47:94:ae:0e:
23:f0:52:2a:80:42:a6:aa:cf:6c:4c:49:e1:f4:80:bb:f3:14:
2e:a6:47:41:5f:f1:51:02:07:03:0b:65:40:dc:ae:c1:66:4d:
54:52:a6:e6:ce:f6:9e:02:5a:5b:41:20:d1:92:8b:9c:33:a8:
12:1a:6d:58:da:88:14:60:58:da:65:d6:ed:de:92:76:e7:ae:
67:1f:7a:b1:fc:f4:e9:c7:20:d2:40:3c:94:23:92:98:7b:3d:
c8:59:b6:31:29:26:f9:da:6e:2a:24:a2:c9:68:17:7d:29:2d:
3b:70:5a:8e:44:6f:d1:e4:fb:67:37:64:62:e3:60:3b:42:5a:
2f:dd:fe:96:e4:59:0a:1f:be:cd:e4:ab:83:96:62:9e:bc:b8:
d9:42:1d:90:14:d8:63:3e:e4:43:99:c9:c6:35:82:fd:35:31:
c1:9b:86:85:68:a6:e8:37:97:17:e6:49:19:46:7f:65:ed:5b:
7c:9f:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:21 2026 by rpki-client