
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier: gNQl/zOBA+pE/r+vBsZQO8s/0+p4vDSgEunJ6Z4XUZM=
Subject key identifier: A8:B8:0C:AB:8A:47:98:FA:06:E9:B1:38:48:AA:00:1C:F1:63:BA:01
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number: 0D0C
Signing time: Fri 12 Jun 2026 18:21:07 +0000
Manifest this update: Fri 12 Jun 2026 18:21:06 +0000
Manifest next update: Fri 19 Jun 2026 18:21:06 +0000
Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: easK1hBwCqdBlwDFFclYxEfBoHM61xRRWJ/qqrqO5KY=)
2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: mFvMp8zPdnLh3HE2cfPLt1XD9e+2V2rN9bXj6Bt9pgs=)
3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: 1HE8yGNDssBftj1LAFhds8elRbEeqxTTho89AYi5gvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Jun 12 18:21:06 2026 GMT
Not After : Jun 19 18:21:06 2026 GMT
Subject: CN=6a2c4e13-12e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:ab:a3:35:e4:05:32:bc:4e:fd:31:6c:af:
a8:b2:48:ee:a4:e0:d6:38:55:4c:9d:f1:96:72:86:
2e:ac:e3:b2:58:ca:5a:2d:bf:14:d4:8f:b8:b8:e0:
56:63:0f:07:f8:f4:89:65:ab:b1:51:9b:e7:18:2d:
82:25:ed:15:ff:8e:10:5f:f6:80:34:48:d3:cc:c9:
41:9f:01:06:fd:9c:62:b9:4c:0d:4e:16:b4:5b:66:
48:eb:e1:fe:86:55:e7:a3:e5:34:3e:89:c0:c2:e5:
f0:ab:a8:21:01:dc:cb:87:81:25:eb:e1:21:83:c4:
62:58:52:e2:d7:5c:36:ae:7e:79:f4:4b:08:ee:38:
d3:ba:aa:11:47:ee:80:00:df:26:4e:c2:8f:f6:73:
ed:54:d9:02:63:2a:9a:be:52:dd:22:88:df:77:c4:
eb:04:8a:bf:83:55:a8:a1:0f:01:48:fa:83:67:d0:
04:27:5b:25:7e:d7:e7:db:ea:06:d4:fa:a9:4a:25:
a2:93:a5:92:da:ff:c3:7a:b3:63:6c:5f:96:73:35:
df:1f:99:81:76:15:43:f8:1e:52:26:48:b5:32:67:
d1:3f:ae:8d:5c:e3:e2:b9:92:43:2a:94:95:d6:4c:
60:64:61:6c:e0:66:d9:06:bf:6b:38:50:50:21:72:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:0C:AB:8A:47:98:FA:06:E9:B1:38:48:AA:00:1C:F1:63:BA:01
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2b:c8:c8:fe:13:fb:39:c0:48:db:83:d5:9a:d5:1e:0d:d7:
82:55:38:8d:5c:60:8c:73:17:6e:ae:b9:54:df:4c:f2:7e:41:
85:4a:71:91:ad:7e:d7:27:23:ec:86:39:cb:23:99:02:61:f9:
af:bc:76:a3:81:03:92:36:e1:c9:e2:5a:63:93:b1:00:83:37:
dd:41:ff:f9:fc:ca:e6:a0:3c:6b:6a:92:2e:0e:9d:91:6f:76:
39:39:c6:17:83:8c:7b:b7:bc:d3:d5:0b:99:1e:cc:c0:9a:26:
ef:d7:46:84:de:37:ec:ed:ec:ff:91:31:e4:a0:10:c1:26:50:
4a:1e:b3:be:8d:43:de:30:5c:e7:9f:e0:d5:38:d8:a8:96:d9:
a1:7f:31:ee:42:94:35:47:fd:92:0c:0d:7c:c6:1c:3d:61:20:
59:57:82:b7:db:ba:34:97:f4:2f:8a:64:29:6c:aa:f8:61:58:
0b:6f:82:18:73:7e:72:93:2f:95:8d:2b:1b:1a:6a:69:71:2a:
d3:e8:3b:a5:7f:83:1a:9f:f5:b5:a0:72:e0:87:c5:81:b8:46:
12:b5:a2:91:a9:b9:07:b8:8b:a6:e7:84:4a:3c:c7:e2:1f:01:
f5:ca:fa:34:74:65:6e:da:9b:84:2f:a4:f5:d9:37:de:72:0d:
e2:d8:85:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjYwNjEyMTgyMTA2WhcNMjYwNjE5MTgyMTA2WjAYMRYwFAYD
VQQDEw02YTJjNGUxMy0xMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArw2rozXkBTK8Tv0xbK+oskjupODWOFVMnfGWcoYurOOyWMpaLb8U1I+4uOBW
Yw8H+PSJZauxUZvnGC2CJe0V/44QX/aANEjTzMlBnwEG/ZxiuUwNTha0W2ZI6+H+
hlXno+U0PonAwuXwq6ghAdzLh4El6+Ehg8RiWFLi11w2rn559EsI7jjTuqoRR+6A
AN8mTsKP9nPtVNkCYyqavlLdIojfd8TrBIq/g1WooQ8BSPqDZ9AEJ1slftfn2+oG
1PqpSiWik6WS2v/DerNjbF+WczXfH5mBdhVD+B5SJki1MmfRP66NXOPiuZJDKpSV
1kxgZGFs4GbZBr9rOFBQIXItswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKi4DKuK
R5j6BumxOEiqABzxY7oBMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj
MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApSvIyP4T+znASNuD1ZrVHg3XglU4jVxgjHMXbq65VN9M8n5BhUpxka1+1ycj
7IY5yyOZAmH5r7x2o4EDkjbhyeJaY5OxAIM33UH/+fzK5qA8a2qSLg6dkW92OTnG
F4OMe7e809ULmR7MwJom79dGhN437O3s/5Ex5KAQwSZQSh6zvo1D3jBc55/g1TjY
qJbZoX8x7kKUNUf9kgwNfMYcPWEgWVeCt9u6NJf0L4pkKWyq+GFYC2+CGHN+cpMv
lY0rGxpqaXEq0+g7pX+DGp/1taBy4IfFgbhGErWikam5B7iLpueESjzH4h8B9cr6
NHRlbtqbhC+k9dk33nIN4tiFrA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:14:55 2026 by rpki-client