
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier: yaBwUjVyFfkqFclP1SqkjhpZK33yQyQDWo4XI3SDmlc=
Subject key identifier: CC:CC:2E:63:00:7F:7A:32:BA:45:1A:E7:99:E6:28:AB:A1:3E:40:87
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number: 9D
Signing time: Sat 13 Jun 2026 07:25:05 +0000
Manifest this update: Sat 13 Jun 2026 07:25:05 +0000
Manifest next update: Sat 20 Jun 2026 07:25:05 +0000
Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: C33DDy0JpLQZeIV18zJeO6p123PxtBOdiQHsYfj9cis=)
2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Validity
Not Before: Jun 13 07:25:05 2026 GMT
Not After : Jun 20 07:25:05 2026 GMT
Subject: CN=6a2d05d1-7974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:0b:8f:83:f4:1a:16:a6:30:6e:5b:7b:25:
d1:45:8e:69:e5:1a:a6:29:e9:5e:90:13:b8:cd:3b:
88:80:13:4a:49:82:c3:ce:2b:67:58:11:7a:12:68:
2c:34:9b:b9:6b:a4:b0:80:60:7d:ce:35:9d:29:8e:
9e:96:f3:d2:50:d3:74:f0:cb:f5:10:f6:91:47:6f:
51:a5:bd:69:74:8a:36:bf:9c:ee:62:8f:8e:06:42:
06:37:4e:8f:24:1d:26:6d:ea:34:67:58:54:b7:ff:
7b:2f:44:fd:6e:e7:9c:06:64:a6:40:b0:91:90:09:
8d:c4:f0:01:74:c5:5f:c8:c4:49:4a:50:9a:50:c0:
e1:1f:a5:0c:88:8d:69:65:21:40:99:a5:97:f4:68:
7e:2e:cf:78:1b:ee:01:44:a1:12:e5:12:51:e5:03:
cf:3c:91:97:ea:f2:b3:05:68:a1:0a:0a:57:ba:24:
9e:98:b8:16:65:32:04:6b:0a:dd:ee:d0:b6:0a:7e:
62:f1:f9:e2:20:40:47:e8:b3:ec:9c:22:3a:ef:18:
32:9a:d2:3a:cf:ef:4e:0c:eb:83:5e:75:46:7c:a9:
73:94:bb:c2:3f:66:09:43:00:b4:21:53:63:d6:04:
d6:fa:bf:82:eb:68:20:7f:72:e7:0f:39:03:25:21:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:2E:63:00:7F:7A:32:BA:45:1A:E7:99:E6:28:AB:A1:3E:40:87
X509v3 Authority Key Identifier:
keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:35:5c:14:65:99:ff:21:5c:d8:e8:d3:ff:12:01:1f:20:bb:
35:7d:29:d7:5f:f6:a3:73:7a:00:9c:8a:34:d0:83:a4:4b:7b:
13:ba:c4:af:64:9c:37:81:bc:6a:fe:02:fd:76:10:d9:e7:17:
54:d9:fe:bf:e5:d2:6b:09:81:55:f4:a1:47:2a:4d:2d:75:1c:
9e:6a:22:d1:5c:4d:08:b3:30:9b:4b:ce:d2:cf:27:00:8f:d1:
f3:99:b1:c8:c7:a5:e0:c3:fd:d3:9c:c1:92:e2:f6:46:63:bd:
f9:23:60:42:16:4f:ba:e0:35:4e:b3:1e:e9:cd:7c:1d:6f:50:
b8:0a:1f:7a:8c:74:51:f9:18:0f:49:a3:aa:58:ba:c4:25:7a:
83:03:03:68:d0:92:a0:8e:d1:49:0f:ab:a3:20:ae:e3:45:29:
f0:55:a2:70:f8:4a:44:5b:04:ed:7f:76:bb:86:eb:df:4e:f8:
93:5c:a2:01:33:23:9e:06:7a:0b:5d:2a:64:b6:56:38:6f:c4:
cb:24:5c:e0:30:f2:a1:7f:2e:a7:1f:d2:3e:5b:8d:18:8a:f6:
6b:9a:3f:d9:23:c1:e2:67:d5:a8:58:f3:32:a3:e5:88:d6:b2:
4f:cd:cc:4b:90:15:36:d3:9b:8a:81:19:c1:f8:7a:9d:e5:b1:
83:fc:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:38 2026 by rpki-client