
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier: +BJNhTsmGEd5am+LAOTbTBGHGrSBz9JzHEsC5Mjoq48=
Subject key identifier: 2C:6C:69:DF:14:30:76:36:EC:AE:6F:2C:56:B5:13:F9:7B:AE:A4:43
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number: 01C9
Signing time: Wed 25 Mar 2026 03:01:31 +0000
Manifest this update: Wed 25 Mar 2026 03:01:31 +0000
Manifest next update: Wed 01 Apr 2026 03:01:31 +0000
Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: pGdz/BAHytBVt8Ps2b7VtWQDbZpM4EPA6k5b5X2lkAc=)
2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: +aZAxcACo+20cefWCITp6i2kGjKhG4exuePqYRpmNRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Validity
Not Before: Mar 25 03:01:31 2026 GMT
Not After : Apr 1 03:01:31 2026 GMT
Subject: CN=69c3500b-e07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:a6:23:3d:9d:67:9e:4a:37:29:c0:0d:27:
e3:20:ee:be:68:a3:3d:96:1d:4d:c2:f4:fd:f2:4c:
b3:ee:e6:eb:42:6f:05:ca:af:c8:51:a7:2a:e0:45:
1e:99:7d:51:a5:06:02:6c:a9:4e:60:01:f9:ab:c2:
cc:81:75:93:a0:44:06:be:d9:30:44:35:96:b6:47:
6c:f7:1e:84:90:ff:cd:15:07:9c:14:6f:05:d7:62:
fa:fb:bd:e1:a2:20:1e:7c:bc:4f:7d:e4:55:a7:18:
0c:05:9a:0a:17:be:d7:e3:0c:4d:ac:d6:79:28:09:
e8:91:a9:08:28:a9:52:50:bd:df:8d:7a:ae:b0:0a:
97:41:0d:4f:04:be:e3:bd:36:a4:f8:b0:c8:a0:33:
15:75:ec:a9:b0:90:2c:eb:31:d3:c4:97:e2:de:a7:
c4:91:fa:b5:f9:f6:11:a7:cd:3f:e3:76:5b:93:ad:
36:d4:87:05:93:57:e6:11:ae:26:ff:89:6e:58:22:
be:9d:68:4a:58:d2:a2:ff:0a:77:d9:a6:ec:a3:89:
05:d6:cb:3f:76:66:7d:1f:89:5f:df:94:5a:bc:da:
0a:64:89:88:a0:38:24:fd:5a:3d:39:ae:b4:e9:7c:
bc:68:88:a5:96:a0:4f:ec:da:bb:83:15:63:4e:56:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:69:DF:14:30:76:36:EC:AE:6F:2C:56:B5:13:F9:7B:AE:A4:43
X509v3 Authority Key Identifier:
keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:4a:2a:5f:2c:00:51:de:1d:6f:b1:9a:b0:c9:4b:5d:44:c4:
75:1c:4d:12:7c:14:99:51:38:f8:91:66:8d:65:d4:dc:ac:8c:
86:95:db:87:5c:bb:4a:0b:99:f9:4f:a4:5e:58:59:38:0d:3c:
24:78:10:b9:5c:74:a9:d4:85:e9:3e:2d:19:74:1b:59:85:43:
8c:24:f7:9d:7a:2b:0f:df:eb:8b:ce:0d:73:dc:8f:95:98:8c:
25:4d:23:14:c2:94:c5:96:74:5a:a0:48:eb:36:52:80:34:9c:
f7:69:87:a6:2f:3b:e6:f2:a0:44:ed:af:d3:57:3a:25:89:9b:
37:b0:3d:87:9f:64:2d:ba:20:50:61:43:a6:ea:45:68:ca:fa:
99:3a:bc:bc:b9:cc:40:9e:de:02:46:74:af:b8:86:11:23:52:
2b:fe:da:1f:ac:90:7f:6e:43:c9:88:39:72:b6:78:bf:3f:2a:
d6:ee:d3:6f:30:61:bb:13:05:c5:d3:c2:ed:10:05:f4:c5:5d:
0f:b6:17:66:15:2d:6c:a5:69:74:25:89:ef:86:c7:05:4a:e3:
bc:8d:65:21:7a:5a:3d:4e:d1:75:12:20:d7:ab:b6:d6:98:a2:
04:55:2e:10:e7:47:cd:d2:66:3a:82:dd:68:1d:21:15:f1:aa:
cd:a6:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:07 2026 by rpki-client