
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier: iD0TyImLLYVNt765riESm6XF4CiQrxDMg9Y99tphffQ=
Subject key identifier: 5B:2B:1E:EF:0F:44:F3:9B:94:9B:41:40:FF:E8:BB:23:8A:0C:56:DC
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number: 0835
Signing time: Mon 02 Mar 2026 02:28:34 +0000
Manifest this update: Mon 02 Mar 2026 02:28:32 +0000
Manifest next update: Mon 09 Mar 2026 02:28:32 +0000
Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: 9RyNC+8/c+hrm8TuEl//9WdXPzzJub5Wp1dGtjDf5FU=)
2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: Py85vp4AMD4Bnp9n+DbipYlNxs+oqYZrxO/3VQr06b8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Validity
Not Before: Mar 2 02:28:32 2026 GMT
Not After : Mar 9 02:28:32 2026 GMT
Subject: CN=69a4f5d1-67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:26:51:43:17:41:41:9a:bc:07:21:8c:ea:
41:c6:9e:4b:69:17:74:49:35:7a:e7:f9:96:39:4b:
e0:42:9c:88:f7:09:f8:e2:a0:b0:58:e0:e6:52:45:
e3:e2:cf:d0:59:91:4c:04:b8:1b:eb:31:fb:9b:3a:
b1:fe:38:39:f8:88:d0:ea:44:34:96:23:b3:45:a9:
e0:76:e1:79:04:90:17:a4:6d:27:36:ad:f2:4e:19:
93:16:9f:a0:07:0f:51:7a:95:e2:49:83:64:88:5c:
2f:71:cd:1f:5f:a6:6e:97:ef:62:c9:2d:fd:ad:97:
67:ba:8d:43:a7:c0:4c:94:81:ec:69:78:4b:0d:6d:
98:84:c8:5b:b5:fd:ec:f5:f0:78:36:df:1c:0a:18:
c4:da:e9:7e:25:9b:57:ce:c0:2c:90:6f:fb:03:76:
50:00:94:55:91:55:01:f7:43:2e:dc:07:41:cc:63:
e6:ba:aa:4d:ce:8e:ca:0d:0c:0a:bd:c1:d4:9a:df:
fb:77:15:18:e2:b4:69:81:c0:13:de:78:8c:4f:eb:
a5:a8:76:de:fa:60:16:d0:b9:cf:53:79:88:c2:b2:
18:72:1b:89:e4:2b:e4:d3:b7:d4:56:ad:ec:a2:24:
7f:6d:c9:d7:55:eb:cd:22:7e:f2:ca:ed:8d:13:cf:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:1E:EF:0F:44:F3:9B:94:9B:41:40:FF:E8:BB:23:8A:0C:56:DC
X509v3 Authority Key Identifier:
keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:19:6d:90:60:fa:04:4e:46:09:f8:4a:1c:c7:96:91:f6:
71:cc:d2:ef:1c:46:99:e3:04:e2:90:7c:3f:55:00:54:a0:5f:
b8:40:b7:f9:35:d8:21:c5:55:24:08:03:4d:30:78:52:bf:26:
68:5e:49:34:80:06:ab:35:ce:62:bb:f9:0f:20:85:bb:10:a0:
23:56:2a:d8:05:97:37:a0:0a:88:f2:cb:6f:47:06:9c:01:ca:
70:4e:2d:89:59:43:79:64:d3:05:41:86:a1:10:2b:3d:a8:47:
9c:b2:8a:37:97:e6:f8:6d:b2:8b:08:b9:8d:8e:c9:20:ff:b5:
a2:67:70:68:53:90:d1:f2:72:3e:11:15:4f:33:0b:d6:59:78:
fa:7f:a2:e7:ba:46:bc:c7:e7:fd:00:48:a3:07:4c:e1:34:e6:
d4:f8:e5:2c:15:44:07:cf:b8:8f:9a:7f:05:a2:d6:13:0c:40:
6a:dd:c7:e8:5c:01:82:e4:b8:38:89:f5:4d:6e:8f:a5:87:07:
e3:f4:49:b8:fe:0c:46:08:3e:24:14:65:d7:9c:89:2e:04:50:
54:74:4f:31:14:3c:83:ff:06:ef:41:e6:17:94:c7:59:29:0d:
49:f5:03:78:57:1b:50:3a:04:2b:a4:8c:aa:cb:c2:c2:c2:7e:
7a:50:e7:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz
OEJFNTQwOUUwHhcNMjYwMzAyMDIyODMyWhcNMjYwMzA5MDIyODMyWjAYMRYwFAYD
VQQDEw02OWE0ZjVkMS02N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypkmUUMXQUGavAchjOpBxp5LaRd0STV65/mWOUvgQpyI9wn44qCwWODmUkXj
4s/QWZFMBLgb6zH7mzqx/jg5+IjQ6kQ0liOzRangduF5BJAXpG0nNq3yThmTFp+g
Bw9RepXiSYNkiFwvcc0fX6Zul+9iyS39rZdnuo1Dp8BMlIHsaXhLDW2YhMhbtf3s
9fB4Nt8cChjE2ul+JZtXzsAskG/7A3ZQAJRVkVUB90Mu3AdBzGPmuqpNzo7KDQwK
vcHUmt/7dxUY4rRpgcAT3niMT+ulqHbe+mAW0LnPU3mIwrIYchuJ5Cvk07fUVq3s
oiR/bcnXVevNIn7yyu2NE88lKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsrHu8P
RPOblJtBQP/ouyOKDFbcMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy
QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq
d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAARsZbZBg+gRORgn4ShzHlpH2cczS7xxGmeME4pB8P1UAVKBfuEC3+TXYIcVV
JAgDTTB4Ur8maF5JNIAGqzXOYrv5DyCFuxCgI1Yq2AWXN6AKiPLLb0cGnAHKcE4t
iVlDeWTTBUGGoRArPahHnLKKN5fm+G2yiwi5jY7JIP+1omdwaFOQ0fJyPhEVTzML
1ll4+n+i57pGvMfn/QBIowdM4TTm1PjlLBVEB8+4j5p/BaLWEwxAat3H6FwBguS4
OIn1TW6PpYcH4/RJuP4MRgg+JBRl15yJLgRQVHRPMRQ8g/8G70HmF5THWSkNSfUD
eFcbUDoEK6SMqsvCwsJ+elDneg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:02 2026 by rpki-client