
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: tnXpRCbFnr629w566HTyjTQTKLSOGKIdQv2pQddIs08=
Subject key identifier: 7D:BA:57:09:8B:62:91:BC:39:1E:47:38:57:77:CE:5F:C0:50:98:4C
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 0963
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0935
Signing time: Sat 28 Feb 2026 20:32:36 +0000
Manifest this update: Sat 28 Feb 2026 20:32:35 +0000
Manifest next update: Sat 07 Mar 2026 20:32:35 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: bKl5kTgmIxEscIji4JtKfMmkCIR2phD2Vts2VmjZiF0=)
2: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=)
3: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=)
4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=)
5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=)
6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Feb 28 20:32:35 2026 GMT
Not After : Mar 7 20:32:35 2026 GMT
Subject: CN=69a350e4-1971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:12:21:57:3a:96:e9:5f:72:d0:ce:4a:9a:
16:8f:82:ec:82:b8:7c:43:c1:2e:50:75:8e:c3:19:
e1:ed:1c:49:f4:6a:fc:89:2b:34:5c:a9:d6:63:1f:
fd:e5:c2:79:71:b3:da:84:6d:b1:4b:07:f9:d5:0d:
e1:00:35:f0:86:e1:70:4d:b3:10:41:fd:08:56:bb:
5a:2f:73:56:e2:45:38:70:66:62:30:71:7d:8c:e8:
27:d9:81:bc:5c:81:6b:0b:2a:4f:78:dd:40:d6:9d:
f7:c8:8d:17:2e:93:61:cc:d8:bb:a6:ae:d1:de:00:
9f:fa:a3:b7:0b:f0:2c:92:bb:85:25:2a:19:fb:92:
cb:f1:33:7e:d1:1d:6f:06:57:20:f0:1c:e5:ac:5e:
4d:63:1f:0b:3f:1a:9b:22:6b:8a:7d:35:f0:aa:40:
22:8b:4c:ea:bc:d0:0c:1f:a1:94:9d:b5:54:fb:9a:
a0:b1:d5:21:bf:a2:f6:3a:7c:22:38:98:08:2f:53:
06:6d:24:87:98:76:24:2d:76:ed:ac:8b:a2:2a:15:
49:57:ce:25:16:54:ca:c2:6a:42:4f:72:0a:e5:85:
96:a2:c1:bd:23:89:13:0f:16:9f:9d:0c:4a:93:ad:
5e:a6:02:0f:42:ee:5f:8b:33:4f:c9:b4:f3:85:b6:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:57:09:8B:62:91:BC:39:1E:47:38:57:77:CE:5F:C0:50:98:4C
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:bc:56:38:b3:57:ea:14:39:93:21:28:99:ad:6e:35:4c:
d7:6b:47:48:31:09:48:df:86:ed:c7:3d:d8:13:a9:09:6e:5f:
c0:11:c6:d9:9d:d3:e5:3a:3a:8f:9a:46:60:4f:df:47:3c:43:
da:d4:82:58:a8:d1:95:79:5d:51:f3:40:f7:62:56:52:e1:7d:
d7:74:9c:34:fc:ea:b6:cb:9b:a0:fe:10:e8:be:f9:3d:5b:a6:
84:87:00:31:61:9f:f4:11:60:ac:2c:c3:0f:d8:a2:4d:ab:51:
ec:5d:8a:62:42:b1:2d:14:59:40:f9:30:aa:d5:f1:5a:27:45:
dd:67:41:bc:34:3c:85:b8:88:d1:c8:3c:90:c8:c6:1e:7e:6b:
b1:0c:5f:08:1c:07:3d:6e:bd:54:48:30:8e:ff:66:a1:09:68:
ea:6f:51:81:fa:7c:3c:97:6e:8f:1a:58:e6:ee:bd:ae:d2:44:
73:16:80:00:ca:2a:eb:d1:1d:68:ec:94:0f:2b:1b:60:68:43:
51:04:be:6a:d3:d3:e9:cc:9c:5f:b2:c6:35:c2:79:b0:23:27:
27:6d:78:dd:b3:8f:c0:32:6d:46:97:8b:23:7a:59:f3:1e:21:
ae:d6:7e:25:8a:dd:83:66:6b:05:20:7e:42:48:66:37:e8:9d:
87:7e:02:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjYwMjI4MjAzMjM1WhcNMjYwMzA3MjAzMjM1WjAYMRYwFAYD
VQQDDA02OWEzNTBlNC0xOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1USIVc6lulfctDOSpoWj4Lsgrh8Q8EuUHWOwxnh7RxJ9Gr8iSs0XKnWYx/9
5cJ5cbPahG2xSwf51Q3hADXwhuFwTbMQQf0IVrtaL3NW4kU4cGZiMHF9jOgn2YG8
XIFrCypPeN1A1p33yI0XLpNhzNi7pq7R3gCf+qO3C/AskruFJSoZ+5LL8TN+0R1v
Blcg8BzlrF5NYx8LPxqbImuKfTXwqkAii0zqvNAMH6GUnbVU+5qgsdUhv6L2Onwi
OJgIL1MGbSSHmHYkLXbtrIuiKhVJV84lFlTKwmpCT3IK5YWWosG9I4kTDxafnQxK
k61epgIPQu5fizNPybTzhbZMJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH26VwmL
YpG8OR5HOFd3zl/AUJhMMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK
ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFGG8VjizV+oUOZMhKJmtbjVM12tHSDEJSN+G7cc92BOpCW5fwBHG2Z3T5To6
j5pGYE/fRzxD2tSCWKjRlXldUfNA92JWUuF913ScNPzqtsuboP4Q6L75PVumhIcA
MWGf9BFgrCzDD9iiTatR7F2KYkKxLRRZQPkwqtXxWidF3WdBvDQ8hbiI0cg8kMjG
Hn5rsQxfCBwHPW69VEgwjv9moQlo6m9Rgfp8PJdujxpY5u69rtJEcxaAAMoq69Ed
aOyUDysbYGhDUQS+atPT6cycX7LGNcJ5sCMnJ2143bOPwDJtRpeLI3pZ8x4hrtZ+
JYrdg2ZrBSB+QkhmN+idh34CBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:14 2026 by rpki-client