
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: JI9aq6ukaihhkU655V2b22EXZ3c+P2Vb0dW6D6U/gKM=
Subject key identifier: C5:9E:6B:B7:CC:B8:F1:6E:17:C4:A1:B7:61:D3:49:A7:13:FC:70:C4
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 3530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 3521
Signing time: Mon 02 Mar 2026 01:40:10 +0000
Manifest this update: Mon 02 Mar 2026 01:40:08 +0000
Manifest next update: Mon 09 Mar 2026 01:40:08 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: SPEGep2SE1svwHiKonFUFs99hfymlcRnWPFUQgxBceE=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Mar 2 01:40:08 2026 GMT
Not After : Mar 9 01:40:08 2026 GMT
Subject: CN=69a4ea7a-034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:00:26:4b:22:7c:bf:d1:9f:25:0a:2c:cd:
ce:60:bb:d8:c0:99:fc:b3:63:52:f9:d6:c3:bc:76:
91:7d:e7:d1:d7:ef:b2:3a:00:d9:60:2b:6c:46:96:
d8:04:ad:09:88:72:40:67:0d:3a:89:49:2a:64:17:
c8:93:0a:20:a8:e2:af:98:d8:80:62:5f:d9:a3:f8:
09:e7:4b:23:38:9f:3f:fe:24:39:fd:73:87:03:11:
78:9e:e2:63:bc:1b:8b:0d:b0:62:df:2b:f3:a9:4a:
92:b1:37:c8:12:cf:f9:44:b2:63:47:65:27:9e:1e:
d8:39:fe:99:35:9d:ee:0e:c0:b4:23:34:c0:1b:a3:
62:dc:20:af:86:33:49:13:d2:de:59:91:4a:61:d2:
2c:d7:dd:3f:68:c8:70:76:0e:2c:09:18:9a:86:8c:
d7:af:ed:59:01:d1:10:93:ac:a4:01:4d:72:a9:c8:
af:45:4e:9b:81:ba:ba:fa:6d:49:a6:ec:93:0d:1b:
3e:25:9a:5f:c0:e5:8d:f5:a9:76:ad:40:15:25:ca:
e6:60:45:54:8f:64:12:53:30:b4:d5:c9:6e:46:0a:
73:50:cc:2c:fe:19:0c:83:7f:eb:e1:46:ac:cf:3f:
ca:52:a5:7f:a3:68:a1:ba:ec:69:9b:73:24:a2:a3:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:6B:B7:CC:B8:F1:6E:17:C4:A1:B7:61:D3:49:A7:13:FC:70:C4
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:71:3c:c2:af:7e:50:02:f6:3c:04:86:d7:af:0e:13:2f:
78:6b:4c:11:bf:6f:5c:b7:98:3e:41:88:21:90:46:0e:9d:e7:
76:c6:dd:73:2e:06:12:f1:66:52:87:f5:ab:41:b9:ed:b2:05:
4c:45:33:19:f2:82:6c:1d:37:71:97:f6:59:78:ac:f0:94:88:
08:7e:91:3f:e7:94:04:93:85:09:72:13:23:ce:f7:0a:88:79:
f4:30:46:5b:e0:ea:2a:ae:b9:41:4e:31:69:13:92:88:7d:19:
9a:ce:40:f5:7b:19:b9:fa:6e:8f:61:31:7a:2a:b8:b7:04:ba:
58:4d:8a:ef:f3:65:90:04:68:67:43:f9:7e:45:31:2a:46:7c:
af:e2:21:63:0b:c0:58:c8:42:a2:ac:65:a5:75:66:0d:d9:18:
50:c5:56:39:52:ca:95:80:83:99:5d:38:d4:b3:6c:96:49:27:
e2:71:98:3e:3d:64:84:bc:ea:08:48:80:ed:fb:6b:be:e2:94:
3b:80:58:3e:b6:c7:fc:0b:0d:18:8f:63:46:4a:be:b3:d8:52:
55:46:58:c8:f7:90:3a:a8:21:11:fc:23:fe:78:3e:ad:c2:b0:
15:b0:59:3c:1e:9a:58:9d:f5:81:08:36:c1:81:e2:6d:d8:3a:
af:16:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:02 2026 by rpki-client