
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier: LqxT24wIEXjw2JaQwpuoZTGRMm8L6zrkPYmCa1299LY=
Subject key identifier: 75:61:38:BD:E7:2D:01:D0:E4:DD:0A:CC:D9:3F:47:AC:68:ED:0E:9A
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial: 0474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number: 045A
Signing time: Sat 19 Sep 2026 00:02:58 +0000
Manifest this update: Sat 19 Sep 2026 00:02:57 +0000
Manifest next update: Sat 26 Sep 2026 00:02:57 +0000
Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: OeSS8nxMtRVNC9x+6vnYiG/OGMpDde2F8xc//qBD5MA=)
2: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=)
3: 1D30B9BEA7A411F192B38F0D4C11F970.roa (hash: S2r3R58U9HZx8Oj62ub3ESAs357F2eSsSbNvAZ9A3m8=)
4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Validity
Not Before: Sep 19 00:02:57 2026 GMT
Not After : Sep 26 00:02:57 2026 GMT
Subject: CN=6aadd131-cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:84:4d:80:c6:74:dd:2b:0f:96:cd:43:be:
71:7c:1a:a1:71:59:35:4a:28:5b:d1:0d:82:0e:ab:
31:79:f8:f3:3f:56:a9:91:27:86:e1:ca:4b:ac:56:
9a:f8:05:80:17:83:87:03:d2:bd:19:d9:48:26:50:
3d:c5:29:4e:6a:48:6e:6d:79:88:16:c7:2f:05:9c:
34:37:c3:6a:3b:19:9f:a1:68:e2:5a:00:b9:91:50:
06:a4:79:3c:4c:ed:92:69:87:50:dd:d3:d9:08:1d:
22:b3:6d:9d:74:61:13:f1:ba:44:f1:d0:ce:11:80:
c3:43:ff:68:9a:a3:2b:66:92:dd:8f:41:68:9c:20:
6c:51:50:4d:4d:1e:9d:37:02:23:7b:8c:2a:e5:ca:
fd:88:eb:95:8f:3b:e7:df:82:0c:5a:40:89:9f:1e:
62:c0:ee:37:e9:4b:1c:c9:6a:d8:66:60:3e:e9:af:
c0:9f:96:d1:10:e4:8c:7f:e1:22:77:8a:54:5f:9d:
d1:94:96:74:f3:8c:d6:97:c6:f9:9d:4d:9a:c2:ac:
a5:a1:8d:e6:9a:f1:e4:46:6d:c6:37:7e:0c:c1:3a:
19:cf:cf:bc:2a:13:65:2a:5a:56:6c:41:3a:26:e3:
4d:da:f6:c5:b5:33:f6:ad:fd:e4:a6:85:96:0e:96:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:38:BD:E7:2D:01:D0:E4:DD:0A:CC:D9:3F:47:AC:68:ED:0E:9A
X509v3 Authority Key Identifier:
keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:e2:ec:f5:8c:49:77:0d:e8:a9:3d:d1:3c:5c:5a:6a:d2:
70:f8:fb:1f:e1:d6:ac:d6:9e:01:2d:ea:2e:ad:d7:a2:b6:bc:
ae:18:20:26:43:97:e3:96:39:31:b1:d6:7b:e3:82:01:4e:a9:
0d:d3:01:35:70:89:34:54:46:07:92:38:25:28:69:10:1f:46:
35:c2:b8:a1:91:11:d0:3e:da:9f:a1:e2:94:cb:9a:b5:d8:a8:
03:7b:74:7c:18:3f:f1:00:b1:a0:3a:52:ac:41:50:29:07:66:
f2:47:88:d8:07:f2:db:b6:a1:63:58:be:6b:85:d3:5d:2c:da:
45:4b:4b:b5:fc:a1:a1:6d:19:ba:ae:1d:19:d7:a6:ee:ef:65:
33:fb:a2:c3:86:14:0f:d3:e3:af:ba:98:4c:a5:74:f3:e9:30:
e9:94:7f:c3:f8:50:41:30:05:7a:55:36:25:07:43:36:ff:d3:
e4:53:2d:56:95:78:fd:d7:a7:5f:3a:42:f7:4b:ce:58:95:5b:
0b:8d:bf:98:a3:72:36:06:55:39:ba:ea:03:d9:11:ef:f2:8a:
67:8f:75:55:84:21:65:32:e4:e5:44:75:e9:69:53:20:73:30:
f8:cb:fd:27:36:f4:33:85:1e:e1:37:dc:5d:c8:e8:52:6e:d1:
78:0d:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:33:47 2026 by rpki-client