
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier: pD2mAfVSOLuQNzaFELWK8Neia13J40qqRR8Cvd7mv4M=
Subject key identifier: 36:65:84:E8:5F:91:02:E5:A5:C1:85:B2:E9:A4:FE:23:07:7F:A7:88
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number: 0237
Signing time: Mon 21 Sep 2026 02:37:41 +0000
Manifest this update: Mon 21 Sep 2026 02:37:41 +0000
Manifest next update: Mon 28 Sep 2026 02:37:41 +0000
Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: Fa5dWCTlKoum6uq+xj2TO3ad7qnPXNDWS4xOxzgnEmg=)
2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: +XblEFbHvTMWzWB5YcW4gFr8l+aiQacIHVPmD8SMV9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Validity
Not Before: Sep 21 02:37:41 2026 GMT
Not After : Sep 28 02:37:41 2026 GMT
Subject: CN=6ab09875-a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:38:b3:20:15:67:85:f4:35:32:e8:32:c7:
5d:1b:2e:a9:e9:e1:6d:dd:ee:0b:5a:ab:b8:ff:ac:
75:be:27:29:17:24:18:04:82:a6:98:1b:17:25:13:
2c:30:72:e1:9d:58:38:32:c1:f9:3f:27:e5:22:58:
3b:91:9f:48:a5:58:70:15:eb:42:52:6b:d6:6e:18:
92:95:47:66:1c:1b:be:3a:1c:b8:a1:45:75:54:a2:
9a:67:46:f1:e3:a1:f0:d0:b3:3b:04:ab:95:5e:46:
f1:77:ec:ee:08:c7:ad:73:cd:8a:40:da:7a:31:2a:
6e:c2:79:c8:04:5a:9f:b9:1b:5d:5c:ad:98:2b:95:
5e:51:ab:f7:0e:00:f7:3f:f2:b6:f0:0e:d9:f0:7b:
41:3c:5c:4f:88:4a:61:9b:dd:1e:8a:1e:38:1d:9c:
c2:30:9c:f3:26:30:8c:19:49:df:0a:51:93:a7:71:
64:1d:cf:b5:21:dc:f5:ce:fd:44:10:9b:de:bd:ed:
38:e5:ba:7e:b1:8b:b6:18:6d:73:60:df:c4:5d:6c:
44:33:e8:d2:60:37:0e:eb:1d:64:90:60:38:80:94:
04:b6:0b:5a:db:48:87:b4:6a:86:00:10:20:e8:bd:
18:95:4e:bb:0d:84:5d:7f:e4:92:58:bd:4f:29:ac:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:84:E8:5F:91:02:E5:A5:C1:85:B2:E9:A4:FE:23:07:7F:A7:88
X509v3 Authority Key Identifier:
keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:23:74:01:6d:a9:1d:ee:42:6a:ca:d3:75:35:81:91:eb:44:
20:f0:3f:c1:d8:f4:e2:f4:1b:68:c4:8d:72:ba:48:82:a1:c7:
2b:88:ae:0b:c5:61:2d:04:ca:ec:20:b7:aa:10:39:f3:9d:24:
6a:d8:01:34:c1:dc:5d:6b:48:ff:82:27:6f:a0:9b:e9:29:02:
6e:bf:e2:e2:1e:c0:78:2d:bd:f9:bd:1d:a9:02:45:37:e2:5f:
78:25:56:75:1f:81:da:d5:8a:79:40:72:ee:cf:c4:25:3a:a1:
c4:76:1b:5a:1b:bd:f3:5a:2f:58:3d:74:65:49:27:63:fd:c7:
d0:54:42:27:e2:fb:0b:ce:1b:26:e8:2c:e2:c5:45:f2:7e:28:
d8:e8:3e:04:26:2d:d5:4a:fb:5d:8c:4e:20:a8:6f:83:22:12:
55:b5:8f:6c:f3:e5:46:7e:99:7b:95:8b:5f:a3:40:28:22:78:
0d:5e:08:e2:3c:1c:52:60:3a:5c:ca:2c:c8:5b:9f:ad:00:de:
1a:11:73:12:27:e2:ec:73:ff:14:60:62:83:7c:d0:f0:c4:2f:
f2:e1:e1:e2:c1:fb:87:f1:5c:5a:31:3e:c4:f2:7d:e8:4a:d8:
ec:3c:62:cb:99:71:ce:66:f3:60:49:20:f4:07:a2:07:2b:7e:
4f:21:fd:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5
QTgwQkVBMDgwHhcNMjYwOTIxMDIzNzQxWhcNMjYwOTI4MDIzNzQxWjAYMRYwFAYD
VQQDEw02YWIwOTg3NS1hNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhOw4syAVZ4X0NTLoMsddGy6p6eFt3e4LWqu4/6x1vicpFyQYBIKmmBsXJRMs
MHLhnVg4MsH5PyflIlg7kZ9IpVhwFetCUmvWbhiSlUdmHBu+Ohy4oUV1VKKaZ0bx
46Hw0LM7BKuVXkbxd+zuCMetc82KQNp6MSpuwnnIBFqfuRtdXK2YK5VeUav3DgD3
P/K28A7Z8HtBPFxPiEphm90eih44HZzCMJzzJjCMGUnfClGTp3FkHc+1Idz1zv1E
EJveve045bp+sYu2GG1zYN/EXWxEM+jSYDcO6x1kkGA4gJQEtgta20iHtGqGABAg
6L0YlU67DYRdf+SSWL1PKay1EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZlhOhf
kQLlpcGFsumk/iMHf6eIMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0
QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5
cXhoclF1VmtGSldhZ0w2Z2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJCN0AW2pHe5CasrTdTWBketEIPA/wdj04vQbaMSNcrpIgqHHK4iuC8VhLQTK
7CC3qhA5850katgBNMHcXWtI/4Inb6Cb6SkCbr/i4h7AeC29+b0dqQJFN+JfeCVW
dR+B2tWKeUBy7s/EJTqhxHYbWhu981ovWD10ZUknY/3H0FRCJ+L7C84bJugs4sVF
8n4o2Og+BCYt1Ur7XYxOIKhvgyISVbWPbPPlRn6Ze5WLX6NAKCJ4DV4I4jwcUmA6
XMosyFufrQDeGhFzEifi7HP/FGBig3zQ8MQv8uHh4sH7h/FcWjE+xPJ96ErY7Dxi
y5lxzmbzYEkg9AeiByt+TyH9+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:11:39 2026 by rpki-client