
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File: 9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier: pOX5hZjOUQglbanSx+YNI9VFVduW16p1GprVImwcgd0=
Subject key identifier: AC:4A:0E:3C:CB:C1:8A:CF:C6:D5:06:38:72:EF:B3:02:39:8F:E0:4A
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer: /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number: 11
Signing time: Thu 11 Jun 2026 11:25:17 +0000
Manifest this update: Thu 11 Jun 2026 11:25:16 +0000
Manifest next update: Thu 18 Jun 2026 11:25:16 +0000
Files and hashes: 1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: BcTlgoZ/bWqqKhUIRS62D42FgAbYoTN+G86a10wyzxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Validity
Not Before: Jun 11 11:25:16 2026 GMT
Not After : Jun 18 11:25:16 2026 GMT
Subject: CN=6a2a9b1d-956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:7e:4b:15:03:9b:0f:fc:57:d7:01:e3:24:
99:16:8b:36:ca:1b:9d:4a:65:3d:25:da:2f:8e:73:
98:be:b9:ed:b6:ad:17:7c:de:45:1d:44:24:f6:19:
79:59:e1:e0:33:73:03:5d:1a:2b:fc:c9:77:a1:4b:
f6:6e:df:32:df:01:d5:ed:4e:60:d8:98:48:4e:41:
0b:5a:fd:b4:5d:e2:5d:44:c7:f4:70:a8:eb:a8:6a:
02:1e:62:03:4d:c5:4a:39:ee:8f:75:05:d5:b3:cb:
23:22:b9:5c:74:fa:f0:90:2a:d2:c4:44:91:a2:12:
50:8e:c3:84:81:37:85:8c:f3:08:e6:bc:94:91:c1:
b3:53:d7:fc:c8:50:ca:23:dd:f1:c3:b2:d6:76:7d:
ad:e2:34:fd:89:3d:6c:e5:ce:91:10:95:fa:a3:11:
5e:6e:17:9d:6e:bb:a4:aa:df:6d:4c:db:3d:25:6a:
a1:a8:30:4d:67:d7:88:59:df:3b:3b:87:da:66:19:
ee:25:38:c8:b1:25:70:59:42:95:71:1f:e8:de:41:
9d:32:9d:70:be:3b:6f:62:53:e3:f5:bf:33:f9:4d:
f6:d0:58:47:8c:28:43:ac:cb:c7:28:ad:ee:c3:92:
fd:e0:5f:36:cc:9d:b1:8e:a6:07:81:6c:84:ca:be:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:0E:3C:CB:C1:8A:CF:C6:D5:06:38:72:EF:B3:02:39:8F:E0:4A
X509v3 Authority Key Identifier:
keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:64:8f:83:06:b2:9d:1e:0b:5d:62:6e:c7:8f:f9:a2:e1:
cb:d2:19:78:e4:bc:93:5b:f3:05:8e:03:a4:ef:4a:7b:e5:8c:
b9:a0:e5:ca:23:4c:c0:5d:75:4b:ed:b6:6a:ae:7b:4b:a3:32:
fe:31:0b:1c:ae:ba:4c:f5:1d:66:d3:b5:6a:0a:1b:47:60:bb:
43:40:28:68:50:de:50:81:7d:e6:62:3f:9a:59:3b:45:d6:6a:
a3:c7:a4:c5:94:11:6e:ab:ec:01:71:a2:f0:81:04:9d:9a:70:
ab:fe:22:60:68:09:51:eb:4e:1d:0c:83:15:a5:fe:ad:5d:fd:
61:42:ac:fd:18:17:42:4d:13:59:4f:3b:6b:11:cb:a6:49:63:
54:84:e9:58:e5:ef:0d:46:11:2d:e0:a9:ec:25:23:a5:f2:d5:
29:4c:06:18:01:f5:70:65:6d:49:f4:04:63:3c:3d:99:6e:45:
0f:17:d6:a3:42:6e:0e:12:2a:6a:a8:56:e5:4a:fd:7f:92:23:
3a:f5:88:16:3f:4d:32:4e:1b:43:ca:5a:bf:9a:b9:95:9a:94:
18:a9:0c:d6:c8:bf:2e:11:0c:1d:0d:f3:e7:31:6e:dd:a3:4c:
1b:ee:0b:cf:a5:a8:ab:da:62:f6:5b:00:bd:76:a6:f8:b8:2c:
38:63:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:23 2026 by rpki-client