
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier: bzRyfEEiePrcMC65XP78w2vN9OdL8ytx9P0YBDNsoV0=
Subject key identifier: C7:53:B9:C8:78:FD:C2:0B:20:C6:6B:3B:B1:11:43:19:8C:33:F2:05
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 15E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number: 15D0
Signing time: Thu 16 Apr 2026 16:40:54 +0000
Manifest this update: Thu 16 Apr 2026 16:40:54 +0000
Manifest next update: Thu 23 Apr 2026 16:40:54 +0000
Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: o7okbFN/fw+eN9eMH6w201/a3nbsTYm3LXxp1H0ZpsQ=)
2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: EPqw16UZs4OnmCADVn6Ufam9TmNvvzwwy0aV8LX+wk0=)
3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: TAyyXoTPcbbK7G+yCCqdnjIbOPrO1+rGTob4cAtBF5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5601 (0x15e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: Apr 16 16:40:54 2026 GMT
Not After : Apr 23 16:40:54 2026 GMT
Subject: CN=69e11116-2d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:91:0f:48:ca:32:f9:1a:61:c5:2e:c3:2d:
aa:ef:2d:6a:53:ae:ad:a3:f0:9d:b6:29:8e:9c:a1:
af:82:81:81:a2:87:44:92:1b:25:5f:7d:b5:79:83:
da:a0:15:4b:db:49:c9:f2:4e:66:5c:e1:1d:38:d7:
3e:97:a2:83:d5:23:91:0d:9e:05:ad:79:5d:1b:2b:
be:25:da:92:37:2d:75:da:2a:3d:70:f2:4d:a6:07:
3d:f7:09:77:b5:25:cd:39:e3:e6:13:ec:74:1e:86:
a1:cb:94:53:e3:a2:a4:a1:15:8b:ff:58:18:62:2c:
86:11:62:10:79:b5:52:1b:84:4b:0a:60:65:16:65:
c8:2f:82:60:de:ea:5c:42:f9:2f:e6:e3:82:40:d1:
35:9d:80:9e:20:df:8e:a1:4c:7a:ec:a4:07:76:9e:
b3:f3:20:b1:2d:f2:a5:94:e1:b6:b3:11:b5:7e:f8:
75:f3:10:67:4e:44:97:9e:2d:f0:6a:3a:34:d8:00:
7c:44:de:1a:eb:db:af:2d:97:5a:b7:94:3a:86:94:
62:cc:05:08:6a:17:cd:e4:14:29:56:3c:89:10:58:
47:33:05:9f:7d:0a:fc:d2:82:47:cb:a5:fe:f4:cf:
76:b0:e6:55:d3:e0:33:37:4b:4e:a5:f5:26:c0:19:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:B9:C8:78:FD:C2:0B:20:C6:6B:3B:B1:11:43:19:8C:33:F2:05
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:f2:2f:21:dd:60:63:9d:fc:d7:84:56:33:dd:c1:38:f4:16:
3f:cb:bf:ed:39:65:e1:f4:5c:e7:9d:bd:c6:ee:a2:7a:ef:5d:
61:22:a0:5c:7a:ff:ae:65:64:f0:9f:0d:c5:9f:95:39:97:ef:
a6:63:94:91:f4:12:4d:6f:d5:2e:54:8d:50:38:2d:20:a9:ef:
e4:88:f1:30:3d:12:d7:7e:d8:f2:42:25:45:b0:be:75:f8:5d:
1a:08:1e:ec:af:b6:19:e8:20:bd:e4:b8:8b:8b:15:ab:a7:ef:
78:2c:4e:50:70:7e:cf:ca:c1:06:b3:27:65:55:d7:c7:0e:98:
cf:c7:92:e1:b5:70:ab:47:3e:1c:8b:09:45:5c:72:1b:69:59:
c6:7c:83:83:04:32:75:36:d3:a4:a3:c0:39:fb:91:1d:6a:cd:
95:88:1c:7f:ad:6f:51:d8:ae:3f:cd:b8:76:31:5e:4e:df:6e:
39:90:42:31:c4:c2:ad:3c:d5:6c:d1:9e:f5:ce:ce:f8:c4:9d:
26:39:c6:91:e6:2d:40:06:4c:51:40:24:dd:e6:0c:9c:9b:85:
13:97:10:f5:fc:b4:d3:ee:48:cf:83:90:98:df:10:00:59:23:
c0:09:f1:8c:7c:7b:75:d3:5e:6b:a7:7a:68:d4:10:d6:70:bd:
5c:72:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:53 2026 by rpki-client