
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: 7+G3tN0qsopwHUt0ydsoAkvuDN1waPZ8dKaX7pfrKh4=
Subject key identifier: 53:D3:F7:33:C8:F2:08:71:67:6C:56:F7:BD:D2:83:7C:CB:56:5C:61
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: C7
Signing time: Wed 25 Mar 2026 06:10:33 +0000
Manifest this update: Wed 25 Mar 2026 06:10:32 +0000
Manifest next update: Wed 01 Apr 2026 06:10:32 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: UYn9xghVR/KAMRLZcVASUAC0MTnxHI+pGBfZHlV25Y0=)
2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Mar 25 06:10:32 2026 GMT
Not After : Apr 1 06:10:32 2026 GMT
Subject: CN=69c37c58-fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:50:73:34:71:a0:30:27:12:d0:52:d6:af:
0d:1e:f5:09:53:3a:df:cf:8f:40:d7:ad:ca:c6:cc:
0c:2e:a2:4f:38:ad:b1:15:6c:8d:e6:73:47:0a:da:
98:98:6d:4b:b4:76:11:ce:73:93:ed:bd:b3:76:d3:
bd:e9:e9:d5:94:64:1d:58:34:fe:a1:c0:25:eb:9c:
3d:f7:2c:e0:cc:39:5d:7b:6c:81:70:0a:67:33:40:
10:0e:47:2d:91:f3:91:47:61:9d:fa:85:1d:da:30:
f8:3f:84:be:ab:55:c6:27:ad:14:e0:b5:f4:39:a7:
cf:3f:13:9b:ba:95:2e:ef:6c:b4:39:6d:fa:7a:28:
cf:3e:b9:79:0a:dc:a4:52:2f:05:62:5c:c8:d1:43:
88:60:7e:c8:f6:4e:c0:6e:b7:13:42:71:0b:c1:aa:
36:8d:9e:fd:23:65:4f:da:0f:bc:b5:08:f1:8a:4b:
a7:b8:97:1d:2c:ab:ea:74:dd:c0:cc:6f:94:f7:2e:
ae:70:2b:23:d0:22:79:41:6d:94:60:eb:24:15:22:
2f:4e:c5:f0:c2:e7:dd:58:93:82:8f:64:09:02:ea:
54:c9:1e:06:c8:d3:32:ce:8d:b7:12:b3:6b:6e:1b:
5d:7f:8c:18:e7:ed:a1:0b:d9:7b:44:80:fd:94:b1:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:F7:33:C8:F2:08:71:67:6C:56:F7:BD:D2:83:7C:CB:56:5C:61
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4a:88:72:5a:e3:d5:8c:a5:6e:81:24:13:c3:47:47:f5:5a:
2d:62:d9:64:9c:41:60:75:03:82:2d:3d:d6:fd:f0:26:13:36:
55:fb:1d:b3:ad:13:23:df:ef:4a:a9:4b:c3:d8:ed:e7:69:2a:
b5:66:27:fb:ac:b5:c6:4e:f9:e3:cf:52:32:03:06:1b:59:31:
a8:6d:f1:50:4d:1b:cb:7d:c5:6c:1d:f2:9a:c4:3e:e1:fe:c7:
12:41:67:58:4d:18:bb:8b:2f:a2:6d:c5:90:d3:ef:da:32:9c:
06:13:82:94:21:c4:f6:c6:7b:cb:24:36:83:4d:99:da:e4:fd:
e3:a2:32:5d:9e:bb:92:eb:b1:bd:c8:36:08:5d:65:97:fe:cf:
0d:f2:b7:aa:6f:41:ba:0f:43:c3:d5:9f:21:2b:29:57:ef:84:
28:64:a4:e6:c8:3e:89:98:da:59:06:79:bd:c3:ac:43:7e:2c:
76:19:01:8c:a0:91:71:55:e0:6b:c9:5a:b5:74:a3:0a:0c:24:
92:f7:1c:62:f1:60:95:a3:c0:5b:c7:2b:57:f5:ab:3f:16:2d:
98:f7:34:0d:97:c2:4c:9e:6c:f6:7e:d6:94:7d:27:26:ab:eb:
60:39:8c:47:80:44:27:dc:4e:21:e3:db:46:06:91:4c:1b:b4:
ac:3c:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:54 2026 by rpki-client