
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier: MTgMqw4IOSvQwSJ6GhzDRQ6864tzbEGmfD9hjs9ZvZE=
Subject key identifier: 61:70:43:DE:BA:D1:D5:BF:40:4F:71:42:BC:84:45:AE:28:2E:AE:7B
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial: 082F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number: 0ACA
Signing time: Wed 22 Jul 2026 21:38:55 +0000
Manifest this update: Wed 22 Jul 2026 21:38:54 +0000
Manifest next update: Wed 29 Jul 2026 21:38:54 +0000
Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: VrAAUkRguOcDMzzAhcIHMZvc2/rKJFnGtS0T6TwxlXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Validity
Not Before: Jul 22 21:38:54 2026 GMT
Not After : Jul 29 21:38:54 2026 GMT
Subject: CN=6a61386e-2853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:31:a6:3d:f9:0d:25:51:d1:5f:01:fe:4f:
1a:7a:7b:61:d8:15:c4:50:bf:d6:96:8e:18:59:de:
76:95:82:fb:b3:bc:09:07:34:53:f4:ea:e4:51:4e:
dd:6e:72:c9:3f:c1:f8:8c:73:89:80:97:24:90:53:
2d:e9:b8:f8:a9:d7:a0:54:17:52:d9:26:fe:96:06:
08:18:61:70:a1:8d:9d:20:84:c8:b1:d1:98:a4:d8:
8c:f3:02:5c:4c:47:5b:b5:8a:f9:b9:c5:4a:f8:dc:
4d:e9:e9:e4:23:fa:46:16:52:3e:fb:d6:62:04:67:
98:99:c9:67:50:0c:00:f4:87:9a:62:98:b3:39:15:
97:cd:dd:ec:ce:a6:18:35:f6:fb:e1:c8:bd:48:f0:
db:a4:fe:80:1a:4f:53:35:1e:66:d7:e5:69:79:cc:
68:99:dd:71:75:05:ea:53:c5:52:e4:85:6f:62:fb:
84:01:17:f3:26:9c:e3:3e:61:c3:0f:fe:84:d3:6b:
b1:fb:f1:5d:73:f0:f7:ca:b3:14:2f:80:71:e6:a2:
cb:f7:0d:57:57:69:e5:7c:e7:8d:e8:87:58:21:da:
bf:df:da:83:ba:f6:22:76:76:e9:5b:35:94:2e:b5:
a5:6c:e2:62:87:4b:d3:65:a7:25:0e:43:f2:00:f8:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:43:DE:BA:D1:D5:BF:40:4F:71:42:BC:84:45:AE:28:2E:AE:7B
X509v3 Authority Key Identifier:
keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:af:43:da:e3:b5:67:22:6f:5a:e7:c3:80:d6:db:56:21:0c:
a2:28:62:4b:97:64:42:1a:9d:58:bc:58:6a:50:e4:3b:39:fe:
dd:e9:ee:d3:7f:46:1e:11:26:dc:1a:e8:76:e5:3f:f8:83:8d:
fc:4a:fc:ba:47:92:9c:8f:37:a2:d7:9e:df:24:50:0e:38:98:
f3:e1:77:79:79:23:26:06:91:f5:8c:32:5e:87:cc:07:f6:b9:
11:69:ea:e6:87:a9:c6:e5:30:13:e5:40:06:4d:26:40:9b:58:
b7:df:ae:b4:6b:11:ed:c9:86:fd:ff:fa:3b:6c:21:87:e8:ab:
4b:55:f4:bc:33:4a:f2:93:00:c2:d8:91:38:7a:c4:4e:30:da:
86:1f:48:93:dc:13:60:44:32:eb:4d:a7:f6:7a:aa:bd:55:23:
91:02:f4:9f:cc:8d:7d:51:70:67:5f:73:dc:4f:66:4e:d6:6f:
75:21:e4:c1:27:04:7a:a3:cb:d0:77:93:a3:05:36:90:77:53:
9b:72:8d:20:7f:50:04:b0:a2:48:d2:56:03:fc:97:c7:4d:85:
b8:5e:0e:52:25:ca:f3:d5:96:c1:7f:80:41:ab:a6:f2:eb:c8:
f4:1d:9b:d7:1f:51:30:60:83:3e:14:f5:84:f8:7f:fe:39:01:
f0:8b:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:34 2026 by rpki-client