
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier: UdLHDYZ1FlWI7Dn6AhAP1DIUTc0RZVcBW4zPC9R507k=
Subject key identifier: C8:6D:4A:E8:05:1E:A8:CE:72:01:AD:EF:1B:96:2F:E7:B6:03:8E:28
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number: 0112
Signing time: Sun 01 Mar 2026 06:56:49 +0000
Manifest this update: Sun 01 Mar 2026 06:56:49 +0000
Manifest next update: Sun 08 Mar 2026 06:56:49 +0000
Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: 8ZJs0hiMhdMRxfuwpTUalB1czs2+TyPYRoBhAm4Jqsc=)
2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Validity
Not Before: Mar 1 06:56:49 2026 GMT
Not After : Mar 8 06:56:49 2026 GMT
Subject: CN=69a3e331-8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:7c:eb:0b:62:15:27:e1:46:02:e7:03:6d:
8d:69:7a:7c:7b:25:25:c6:d7:b8:ae:f3:ba:e7:36:
a0:8d:2b:32:8e:98:56:72:74:67:5c:58:de:0d:0a:
69:52:5f:41:6a:3e:b9:79:13:50:ef:24:d5:fe:ac:
9c:41:99:29:fc:c6:97:9a:98:cf:6d:09:cf:f8:57:
6a:24:e3:4f:4f:3e:32:da:c6:8d:70:19:0d:50:4f:
76:73:2c:e1:04:2e:26:ff:dd:73:18:59:9a:d0:29:
82:93:57:28:82:8c:03:69:d6:9f:8b:ef:9c:a7:92:
8f:e6:03:c8:b6:92:5c:a5:ec:c2:a7:a5:ef:67:36:
94:73:e3:84:94:14:b5:8f:f7:69:e5:b3:0d:b0:93:
d1:d6:84:bc:4a:4f:f7:7a:56:b0:05:96:d2:49:2a:
cd:17:b9:91:0f:a8:f5:86:1c:e0:be:fb:ec:49:f6:
ef:4b:5e:d7:2f:03:6f:f0:f6:92:d5:c9:0c:2c:e7:
a6:7d:90:ab:97:c6:4d:b5:35:fc:1b:00:91:29:69:
1d:85:fb:37:42:23:b8:9d:13:f7:01:5f:8e:37:4c:
6f:d6:3c:8a:7a:ce:e4:7d:37:e4:f1:28:38:40:c8:
39:56:b2:87:29:b0:e5:a7:be:be:27:e2:6c:7e:5b:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:4A:E8:05:1E:A8:CE:72:01:AD:EF:1B:96:2F:E7:B6:03:8E:28
X509v3 Authority Key Identifier:
keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:75:4a:89:84:2f:21:28:2e:6b:e9:9f:6c:e8:cc:61:7f:08:
2f:cd:8f:b0:a5:07:c3:6e:66:97:e2:db:a8:5d:5b:28:b9:17:
f9:39:09:4d:91:29:85:63:7f:a6:4a:57:50:96:50:f2:14:37:
45:cd:42:32:24:76:d8:34:2d:72:cc:f0:8a:0c:36:e1:13:26:
58:ae:c1:9b:b9:b5:d0:50:f7:6f:34:a1:c5:1c:5e:42:0c:46:
48:29:53:79:d6:ce:89:ff:f9:2c:7c:fa:f3:ed:df:9c:04:e6:
79:f0:5c:87:3b:97:fe:68:06:68:38:cb:c0:02:bc:5f:3b:88:
89:77:60:9b:c1:6c:4f:4a:ef:02:c6:c7:e1:1c:e9:05:b3:af:
5d:cc:bf:76:63:39:9a:0f:a9:ec:24:00:77:ba:c2:76:e0:51:
f6:a1:47:81:1a:0b:8d:5b:05:96:ba:f1:c9:26:0b:5b:a3:13:
11:63:5c:7c:20:90:30:08:7e:3a:e6:cd:14:03:1a:86:48:c9:
ee:53:b8:ad:54:7b:a7:df:80:0b:80:d6:9a:3c:eb:1a:cb:10:
4d:41:95:dd:0a:69:d5:be:da:07:18:a1:3b:46:8a:ee:f6:8f:
62:37:db:66:62:b5:99:50:35:46:6a:44:cb:ef:79:25:64:ca:
73:39:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:17 2026 by rpki-client