
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: N1MY4Dhd+oeKRmexhN5lKyJs3Lg6KupSz33ZZUdu/y4=
Subject key identifier: E8:1E:42:A1:41:E1:9E:0E:5B:C4:AE:4A:2D:2C:4B:AF:7A:6D:A1:4A
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 3548
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 3539
Signing time: Thu 16 Apr 2026 14:48:07 +0000
Manifest this update: Thu 16 Apr 2026 14:48:06 +0000
Manifest next update: Thu 23 Apr 2026 14:48:06 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: /F/0ZhX6S9rkSpBvwK/pG+g6BgYvbatFk44F8nMmSS8=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13640 (0x3548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Apr 16 14:48:06 2026 GMT
Not After : Apr 23 14:48:06 2026 GMT
Subject: CN=69e0f6a6-6db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:40:af:76:c6:94:53:94:17:7a:a4:6a:18:
c3:34:96:6f:51:19:0e:a4:5c:a5:30:7b:5f:6f:4f:
c6:75:26:bb:e7:0a:34:dc:30:72:f5:68:8a:25:a9:
ef:40:0b:ae:eb:c3:45:89:3f:a5:83:ce:a1:6d:8e:
3a:e5:d3:1c:72:14:17:f3:6f:95:4c:d1:f8:53:0e:
e3:ed:18:b1:5a:f9:c9:19:b8:bb:30:e8:8c:d4:31:
e5:db:bf:7a:99:f2:31:5c:3e:80:40:03:f2:be:0e:
f7:1b:f6:a1:75:0f:24:e0:27:3e:7f:72:7f:a5:2b:
ae:29:ed:f6:f3:da:19:3c:47:92:78:a0:bf:3a:f9:
b9:46:a2:21:9b:23:ec:53:bf:bb:46:fa:ec:d5:80:
a0:ce:3d:6f:56:03:d0:32:de:6c:b0:e5:4b:45:67:
40:f3:90:e9:13:98:6f:86:85:34:ae:b6:64:34:8a:
d0:f6:66:89:cf:22:de:95:79:85:bd:73:e6:f9:b5:
cd:99:28:7a:a6:cd:97:b6:ab:ca:a3:df:18:b7:76:
0e:08:9d:a5:bf:e6:1e:25:7f:ad:dd:92:be:ef:64:
94:b9:dd:19:80:fb:57:12:12:46:3f:06:78:5d:ba:
86:bb:a7:40:30:5d:49:9a:a7:62:04:0c:20:c7:7e:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:42:A1:41:E1:9E:0E:5B:C4:AE:4A:2D:2C:4B:AF:7A:6D:A1:4A
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:80:14:39:bf:9c:b7:24:40:a0:f8:e8:89:ae:b3:fe:ed:
11:cb:1b:b0:74:e1:f8:f4:3b:87:ec:83:64:40:56:90:57:8f:
e8:de:b4:0d:07:d5:b8:5a:bd:cd:45:a6:c4:87:7e:bc:4d:5d:
88:ac:63:cb:fe:7f:2d:50:ba:e8:6f:b5:50:7a:e5:d4:bd:04:
4b:3a:cf:01:2c:57:3b:a4:da:10:ea:a0:b1:5b:ad:07:8b:5e:
90:42:2f:75:1a:a6:b8:07:dd:03:a0:6f:68:31:df:2c:16:4b:
b2:3e:9f:bf:85:4f:dd:ed:1f:5f:ca:6c:d8:32:4b:f6:8d:4c:
3b:3d:f4:b7:de:1b:f7:d2:c8:ae:72:a8:80:65:37:e5:69:8b:
7a:99:39:b0:89:a3:8b:ac:e4:c0:74:27:e6:01:2b:e5:07:a1:
dc:00:cb:cc:6f:ed:cc:da:1c:63:26:f6:e1:cb:30:bc:78:56:
87:9f:5d:b9:0b:fe:c7:93:7f:72:34:41:20:56:d8:ab:02:0c:
68:fb:b7:1c:60:17:59:76:cc:7a:b4:69:22:84:13:a0:3c:15:
f7:52:a9:66:b7:c1:36:c6:82:ff:eb:b4:44:9e:07:80:a9:c7:
f0:e2:8d:e6:cd:87:7e:7d:a6:28:3c:38:93:33:62:9c:94:c3:
a1:d0:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:12 2026 by rpki-client