
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json)
Hash identifier: bUepi7n6FfGghiFXVcM8mr6bC2YT5qjt3Zv62n67cq4=
Subject key identifier: 29:B1:F4:31:00:BF:8A:54:88:49:6F:9A:8A:D5:1E:AB:FA:66:08:E0
Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Certificate serial: 0E28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
Manifest number: 0E1E
Signing time: Fri 12 Jun 2026 17:47:26 +0000
Manifest this update: Fri 12 Jun 2026 17:47:25 +0000
Manifest next update: Fri 19 Jun 2026 17:47:25 +0000
Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: HlWB6NgIXmHmWNVOvLd3qnp5yNtQYUIjqT7xtKHTTas=)
2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Validity
Not Before: Jun 12 17:47:25 2026 GMT
Not After : Jun 19 17:47:25 2026 GMT
Subject: CN=6a2c462e-3e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:83:84:64:62:55:f4:91:c4:3e:7a:18:4e:
48:1c:cf:31:55:72:ec:d6:bf:ef:97:2d:ed:32:93:
0e:d5:d4:86:71:0e:a3:67:ad:e1:92:e2:d7:cd:69:
9f:e5:a0:3f:e2:a1:9d:c9:4d:ec:02:bb:13:98:5d:
f5:3e:c4:91:ff:ae:0b:bf:61:67:c5:fd:ca:0d:b4:
ed:12:03:5a:59:be:d8:2e:74:b7:2a:9a:be:90:5f:
82:50:01:c2:10:5d:41:de:2f:23:33:c2:ae:80:fa:
39:45:a2:f2:95:00:d2:f1:ba:10:88:8b:4e:cb:af:
d8:15:8f:71:ba:8f:06:95:a1:38:65:4f:4c:02:a3:
9e:20:a1:d7:87:1e:75:3a:d1:b5:e1:d5:0d:f9:bc:
10:4c:5b:56:d5:9c:e1:a1:9b:27:a7:2a:e3:9c:c3:
f6:2c:f1:52:dc:76:ac:31:70:04:b4:61:cb:8f:cc:
ec:2e:72:76:27:20:f5:bc:5c:40:cb:c4:a6:6d:af:
5e:6e:ca:b1:a9:ac:a9:d2:42:c4:0b:04:96:6f:28:
aa:12:71:d9:63:e9:24:d1:56:69:c9:c4:8f:a8:7b:
1d:b0:6c:26:67:a2:b1:ca:74:2c:54:07:7b:09:1a:
30:c1:86:a6:b0:4a:bf:a3:a9:df:fe:36:2d:dc:27:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:F4:31:00:BF:8A:54:88:49:6F:9A:8A:D5:1E:AB:FA:66:08:E0
X509v3 Authority Key Identifier:
keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:68:63:8a:87:1f:94:21:74:40:95:93:c0:c8:64:da:40:
a8:b5:1c:29:46:6d:70:62:8a:06:95:72:2e:09:8b:fc:6e:be:
5f:a2:91:6b:a3:a7:e5:c1:0d:73:e1:22:d6:f7:db:f6:ee:4e:
9f:ca:86:b8:70:45:81:29:cc:6c:de:1a:19:af:65:8f:bf:d3:
8f:ba:d2:3c:89:b0:d2:50:ef:8f:34:d3:f1:7f:d0:bc:9c:b2:
19:53:f6:ab:fb:07:ec:2e:dc:29:09:b7:03:4e:b9:65:66:b5:
0d:cb:14:37:61:7a:51:53:2f:9e:14:f0:10:5e:0b:47:c7:54:
22:5f:10:9c:07:bf:42:5b:bb:14:72:dd:2d:09:ba:c7:95:2a:
eb:8b:ec:6c:4a:ae:f4:91:dd:4f:4d:c7:e1:ff:d9:bd:12:91:
89:0c:0b:0b:f7:29:3f:71:42:8d:42:34:2e:fc:e8:cd:96:9c:
c6:e4:b3:79:2c:21:b5:b7:4c:a3:5d:66:2b:af:54:8e:57:c7:
b8:23:4c:82:09:69:bc:13:4c:48:26:b9:c5:4e:98:51:6b:cb:
e2:c5:91:10:19:84:a4:da:b7:0c:41:5b:7e:df:54:b5:8c:57:
48:d0:eb:ab:bd:fc:67:e3:93:fb:ef:d2:db:4f:59:74:c7:7e:
b8:4b:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:07 2026 by rpki-client