
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier: pqV5ibsE4LJl1RIaigoyl6Ddjm6TX9Z48Wc3e0pDWNM=
Subject key identifier: 30:AD:DB:C6:12:4E:EA:E3:79:9C:51:98:C0:6F:BE:05:C1:46:E9:BF
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number: 084F
Signing time: Thu 16 Apr 2026 20:42:59 +0000
Manifest this update: Thu 16 Apr 2026 20:42:59 +0000
Manifest next update: Thu 23 Apr 2026 20:42:59 +0000
Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: o67raE3ABvL6Fq8JGZGSKxbOMTSRnrdua6SIBj4rkZ0=)
2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Validity
Not Before: Apr 16 20:42:59 2026 GMT
Not After : Apr 23 20:42:59 2026 GMT
Subject: CN=69e149d3-b781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:b1:e5:f3:4a:a3:b0:ae:0e:47:15:c3:01:
11:56:ca:c3:f4:25:4a:d4:96:3a:0d:01:55:ab:3d:
bc:37:86:bc:1b:28:4a:88:ae:0d:85:db:ec:e6:76:
ac:58:4f:df:b7:79:d8:86:0f:14:80:c1:75:09:89:
29:af:43:17:eb:43:d6:8b:68:29:32:61:bf:5f:c1:
77:6f:97:ef:d1:81:c8:5c:38:86:ab:45:43:1b:42:
bc:de:0a:9b:53:01:21:8e:81:6d:15:1b:d1:50:64:
da:62:5d:e6:dd:f8:5b:37:d7:08:0f:f0:72:78:e7:
bd:d9:6d:4c:28:b0:25:1c:f8:f6:ff:83:43:75:05:
9e:e7:5e:90:da:db:6f:07:a5:be:3b:70:95:0e:78:
11:48:d5:3f:bd:cf:06:56:7f:e6:e6:f3:e8:96:2c:
dd:0b:61:7b:21:4a:90:e9:d0:c7:87:9d:01:c4:2b:
d2:89:48:50:c7:6d:a1:c1:1b:ce:17:21:51:78:e0:
02:42:1b:ab:5a:54:fa:fb:41:dd:2a:78:12:13:4e:
14:c5:ce:82:c1:64:fb:fd:a1:0c:13:2b:b2:05:c7:
1e:f7:9f:bd:3c:88:7d:3f:cf:f4:a1:36:75:20:23:
2f:27:1f:57:75:e2:b6:32:da:81:59:f3:e3:57:59:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AD:DB:C6:12:4E:EA:E3:79:9C:51:98:C0:6F:BE:05:C1:46:E9:BF
X509v3 Authority Key Identifier:
keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:28:25:96:d2:03:e7:2c:d1:25:a6:40:dd:22:52:12:16:
2b:8f:94:69:cf:09:9b:3e:c3:1d:11:0d:66:c5:1c:60:dd:fe:
1f:86:49:1e:c3:c7:50:f9:a0:30:80:3a:50:d0:57:ff:96:a2:
60:04:c5:02:b1:36:ab:1c:e4:bc:5f:19:a7:82:4c:7d:36:db:
fc:d6:2d:b4:71:04:ce:87:88:b7:65:e1:2c:f7:e2:db:b8:67:
3a:ea:39:80:89:5f:59:f2:71:43:c8:1d:ee:98:8a:11:2f:14:
90:5f:c1:14:04:5f:64:10:56:74:4b:d9:a4:cd:a5:0d:00:a6:
59:d3:f0:a0:97:1b:47:67:95:4d:c8:5c:03:5c:c7:31:89:c2:
08:6d:11:65:67:e5:32:3e:17:38:aa:b7:1c:09:44:cf:77:f6:
a3:a8:3b:21:11:ec:30:73:b0:b9:90:6f:0e:7e:e5:a1:33:8f:
c4:75:df:61:a7:c4:7e:a1:8d:26:dd:27:ab:56:85:ec:2c:26:
53:63:fb:f2:49:81:e9:da:83:ca:cf:0c:16:f4:fb:cd:38:98:
79:99:f5:ed:03:af:7d:33:fb:3a:e4:a1:eb:d5:11:b1:ac:64:
d9:98:8e:70:ca:27:26:ba:3d:10:0f:4d:a2:0f:e9:18:2e:77:
51:f0:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:15 2026 by rpki-client