
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: eHKOoRuvTSKbArgC9Ab9ZKidn+SwjxXkj/EUTBdxMpw=
Subject key identifier: BF:1F:00:CB:C2:12:CC:00:B1:9D:96:2A:44:5B:D6:A8:96:31:B7:74
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 0984
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0951
Signing time: Thu 16 Apr 2026 20:05:27 +0000
Manifest this update: Thu 16 Apr 2026 20:05:26 +0000
Manifest next update: Thu 23 Apr 2026 20:05:26 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: Y39yIhQvsqugsRWtgyC1+xoxseusXG0xH0AZleXen1A=)
2: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: umj7JneQB0kl/ZQXdk4AXsjR8t2ySSAFoDKMYZURBhM=)
3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
6: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436 (0x984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Apr 16 20:05:26 2026 GMT
Not After : Apr 23 20:05:26 2026 GMT
Subject: CN=69e14107-1aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:16:3f:6f:c7:62:94:52:30:04:19:44:23:
f4:b1:8f:61:06:f4:89:9a:13:2c:c8:58:00:26:fb:
36:3c:ac:73:89:ba:84:f6:0a:86:7c:bc:c0:86:ba:
0f:28:43:db:1a:1d:6d:51:fe:d9:ff:9f:e4:9c:5e:
f9:b6:a6:6f:5b:2e:9f:a9:00:13:6d:9f:90:bf:a2:
a7:6a:3a:3a:1a:3c:50:37:a0:63:bd:4b:27:03:8a:
1d:4b:b3:81:fc:2f:b4:18:22:21:a9:8a:df:9f:90:
20:24:0c:a3:dc:8f:23:f6:0b:c7:1d:6a:32:e3:22:
38:ec:c6:c2:22:63:ef:82:67:ef:09:69:71:83:e0:
06:f9:00:07:b6:d8:24:44:4a:5d:89:6c:5f:df:7c:
09:53:cf:73:28:6e:b2:00:9d:0a:15:a3:1b:e4:d9:
41:c8:5f:ff:30:74:c0:e9:87:cf:61:26:c0:fe:f5:
a5:46:30:a9:22:f9:8d:86:3d:49:bc:2d:59:a9:16:
3b:9a:6b:90:4a:4c:f7:ee:a0:3a:f6:e8:d2:6c:b3:
bd:bc:e6:76:b6:00:48:7e:c6:a3:61:54:76:f1:99:
a5:5e:6c:c8:4e:45:ca:50:3c:de:38:9c:00:3d:f3:
33:93:0d:98:0f:c9:46:53:d5:a3:b4:29:03:c7:88:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:00:CB:C2:12:CC:00:B1:9D:96:2A:44:5B:D6:A8:96:31:B7:74
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b6:f3:12:18:7a:e5:e2:da:ed:1d:11:33:ce:f9:1e:8d:26:
cf:bf:00:df:29:7b:94:46:c8:f4:e5:f4:6b:3f:ef:9a:9d:72:
66:f2:06:93:1b:db:a3:a3:98:a5:df:e4:ec:af:37:b7:08:3c:
8c:d4:f6:3d:c0:bc:f7:a0:7f:8c:eb:6d:bb:b6:72:1d:ae:36:
02:d3:70:37:28:7f:ea:9e:18:a3:7e:9f:bf:16:77:5d:28:8e:
5f:8c:5e:10:79:ea:e5:15:d5:6b:88:9f:41:69:88:91:fa:57:
a2:75:e6:dc:b6:d9:ee:93:66:4e:f8:64:6e:57:21:d3:a3:14:
56:13:e0:f4:6a:74:f7:b0:0d:68:76:10:48:42:a6:5f:2b:b2:
37:07:f3:67:33:3e:84:fe:9f:ea:d9:21:3b:1e:11:58:8e:45:
f3:d8:fe:66:03:5f:07:74:35:53:1e:ab:d6:2a:de:0a:c2:72:
12:6d:aa:d5:29:f7:c6:5c:98:77:4c:85:7f:df:94:a6:07:d0:
2d:97:da:f9:e8:e9:74:ec:e6:6b:6c:61:20:96:bc:c5:51:b6:
a0:c1:df:56:92:c5:83:a6:a3:10:c2:52:b0:c1:ab:05:b4:44:
58:91:eb:2b:bb:39:cf:36:7e:76:b0:a5:b8:e1:dd:35:dd:91:
5c:e7:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:14 2026 by rpki-client