
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: NiwLIvBc0K6uFdw3CY6MmW/IHkCUViMPrTcWwjMPjls=
Subject key identifier: 09:8A:98:CD:A0:AA:00:1B:16:C5:55:FA:60:30:22:F1:D5:E9:F0:AF
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 09E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 09A6
Signing time: Sun 20 Sep 2026 19:56:21 +0000
Manifest this update: Sun 20 Sep 2026 19:56:20 +0000
Manifest next update: Sun 27 Sep 2026 19:56:20 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: vRLxsNpKEwY40J5niUIpWRr3Phu+D0fZr2ICLg7U1b4=)
2: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: y7JlO2eVn5CGG014i1w2l8zlQaUpGUw0Z7qDmj0ckcI=)
3: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: KabuLJ2jMh9Q4wRFwssFjvelmr/DGXwkhCP7WPPdCU0=)
4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: PWpc1YrCi7YtcELVVhl8DbjOytPByeC79d1ZomEe97A=)
5: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 557V948ytFkQmXJP+v3O6OYFApLgKOKU4oIchZma6K0=)
6: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: YKr4LPiv+8zUeK31cb16siUqLk0ccykz6GVFETQcSkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Sep 20 19:56:20 2026 GMT
Not After : Sep 27 19:56:20 2026 GMT
Subject: CN=6ab03a64-f2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:6a:4f:77:89:6e:47:0c:ce:67:69:31:17:
db:c5:96:6f:7a:0c:0d:ee:7a:39:05:24:4e:88:9e:
76:4a:41:19:7d:66:5d:fc:df:c4:d0:2d:33:b6:80:
64:4b:ba:86:19:3a:ff:b3:5d:30:4b:56:ec:66:9e:
1a:8d:80:69:f7:01:e2:81:2c:20:e2:47:59:6f:57:
92:9e:f1:37:a3:14:06:7d:e7:74:ed:4f:0f:ce:47:
4f:f7:67:be:27:86:4d:a7:8b:2c:4b:eb:90:72:db:
0d:47:a5:99:dd:9b:29:7e:56:d2:2a:c2:7e:cb:c7:
49:d2:5f:62:fe:f9:24:a9:f9:56:a4:b2:75:1c:45:
de:f0:dd:1d:0a:37:72:bb:3b:17:d7:68:6f:a3:36:
1a:4c:0c:95:d6:b1:fb:63:95:1e:e0:2a:54:13:9d:
a3:f5:e5:69:2f:fa:04:28:26:d9:61:44:aa:18:93:
80:29:8e:e7:fa:ec:6a:23:56:59:d9:1b:1f:e1:5d:
b7:fb:20:6e:0a:68:e8:53:b4:23:67:90:04:a9:e8:
89:46:db:33:45:3c:c0:a6:d7:15:80:22:e4:82:84:
f9:d8:3a:87:10:a9:03:94:72:d4:a2:4c:af:66:5b:
b4:5a:a3:d5:66:50:92:99:10:12:d7:e9:5e:01:16:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:98:CD:A0:AA:00:1B:16:C5:55:FA:60:30:22:F1:D5:E9:F0:AF
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:46:24:1b:c6:cc:5b:7e:65:ed:52:2b:c8:ab:6a:b1:06:fb:
da:82:37:ba:2e:d6:b2:88:b5:80:49:f9:a5:59:8a:fa:8c:f2:
8c:5e:29:f5:7c:51:f9:9e:a3:ca:f1:4f:40:f2:c3:2d:59:83:
d7:63:be:35:bb:f2:8b:9b:1f:0d:7d:72:d0:23:41:c7:6c:f9:
dc:b4:c4:a1:4b:15:7d:50:75:6e:25:ac:a3:84:d6:ba:9d:7b:
b6:8c:a5:01:2d:dc:3d:b4:6a:c7:32:65:66:6d:51:e2:c1:87:
f1:30:a1:01:6c:b3:ad:6c:14:69:42:20:25:df:15:41:72:3a:
a1:40:41:53:11:f8:3e:15:51:24:42:77:fa:06:7f:01:3e:36:
4f:be:4a:0d:63:9e:16:6c:aa:03:25:ef:85:93:c5:b8:11:82:
a4:d7:e6:24:f6:1d:29:5b:31:a5:f8:92:fa:d5:fc:13:ea:e9:
00:ac:cc:76:97:a3:f5:c1:fe:b0:b9:65:5a:30:c1:0f:b4:d0:
83:c6:65:03:6f:4b:41:05:4f:0b:28:a7:3b:26:72:72:71:f2:
a9:66:70:53:01:f8:70:f2:4c:d9:ff:14:11:21:b9:eb:2d:a4:
ff:73:98:d3:0e:16:3a:6a:e1:50:1c:79:48:44:f8:63:b1:99:
59:13:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:22:11 2026 by rpki-client