
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier: K8z5E9oNLOEB/pTIyF/B8nDP4DmESr4IUAyAowOu1tQ=
Subject key identifier: DC:A0:5E:AD:20:69:BF:0B:1E:25:D1:5C:46:47:EC:51:5A:5C:EE:40
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial: 091D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number: 1504
Signing time: Thu 16 Apr 2026 18:45:40 +0000
Manifest this update: Thu 16 Apr 2026 18:45:40 +0000
Manifest next update: Thu 23 Apr 2026 18:45:40 +0000
Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: KzYA0tltM6PkR4hnc+WY7sHZKPdbnwyW9wRJcqzKD7A=)
2: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: 1kffUSlltPUrAXr4qbgMKEHLahPn0f0i1hKA6TYPuXQ=)
3: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: WP8uvLo3dm5cFDDJiS6DGbwFfOiibsT0ay5tm2cY/KY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Validity
Not Before: Apr 16 18:45:40 2026 GMT
Not After : Apr 23 18:45:40 2026 GMT
Subject: CN=69e12e54-59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:0a:f7:da:42:a3:4a:9b:51:3c:30:e9:19:
ab:90:fb:ec:bc:b1:e2:4b:ab:7a:12:7d:d0:3b:52:
78:21:29:d9:40:ff:44:bd:f0:05:89:aa:eb:57:5f:
28:82:e2:52:0d:17:dd:b5:6f:50:bb:9c:cf:d1:93:
a0:2f:d3:6f:83:bd:c7:c9:9f:42:de:34:5a:db:7d:
94:a0:4a:2e:fb:b4:3d:7d:aa:74:02:82:5f:f6:e1:
6a:d2:65:1d:5a:e1:d2:bc:0e:59:1b:12:03:dd:6c:
44:a4:f4:f5:76:a4:0d:4a:b2:fe:ef:e7:2c:db:2a:
2f:5a:a5:7a:3b:7e:d9:99:cf:06:d5:56:08:b9:0e:
fe:f7:a0:98:73:f2:55:3e:31:76:25:61:e5:7e:70:
13:c3:e7:81:7d:50:c9:ae:cf:db:cb:db:d3:9e:9f:
e5:ad:dd:47:35:d0:58:9a:de:f7:20:24:76:b1:bc:
49:f1:a5:19:fd:af:80:92:88:a4:9d:0f:02:81:8f:
70:96:26:03:c9:fa:67:1f:0a:da:ad:c4:d7:85:ad:
a1:e9:6b:62:8e:02:4c:fe:8e:45:85:f1:70:a9:80:
8e:57:fc:f5:ad:bd:c2:da:eb:8c:4e:da:83:c5:b0:
b9:e7:5d:f9:ed:2b:2e:14:20:a7:53:2c:b4:44:55:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:5E:AD:20:69:BF:0B:1E:25:D1:5C:46:47:EC:51:5A:5C:EE:40
X509v3 Authority Key Identifier:
keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:30:cb:d4:22:f6:06:cf:01:e1:94:0a:5f:78:28:25:99:86:
22:76:9f:6d:65:67:d5:83:1b:48:06:50:75:6d:5a:c4:e0:84:
00:99:69:22:1d:85:e5:0c:6d:5a:fc:ea:87:9d:31:e2:6b:bf:
43:0c:68:96:eb:a1:a5:90:f1:c3:a0:44:1e:c1:1d:dc:cc:6b:
ce:d6:2e:be:56:c9:59:84:19:e8:57:d1:20:2a:25:1f:f7:b5:
94:74:80:90:39:af:c8:48:77:15:e8:7a:4d:55:c1:1f:ef:3e:
cd:c8:60:20:cc:9d:4b:f7:9b:10:21:24:75:db:4e:c2:be:bd:
3c:6b:8a:e2:64:4f:7c:e6:09:7b:6c:e5:5f:9f:15:91:d9:e7:
8b:79:22:b5:eb:4b:87:61:e4:36:3a:14:f3:94:ed:c6:e3:99:
3a:56:73:21:5f:c8:78:3b:28:c3:d4:c1:3b:4e:36:fd:ea:4e:
f2:d6:c7:17:6e:6a:4f:ad:9a:a0:e6:45:f0:8b:22:95:fa:f1:
ca:22:17:16:1f:cc:0c:8b:71:6d:7c:36:66:3f:cf:13:26:57:
02:9b:72:0c:18:28:83:a2:56:c1:fe:df:ea:cd:98:1a:ab:70:
5f:a7:85:dc:60:92:2e:dc:f5:16:c8:27:57:3e:69:88:82:9e:
30:f4:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:45 2026 by rpki-client