
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: L7cXZhB3C/DjaYo+HtADHn6HcWbV4ajCRY1CcYsDd2M=
Subject key identifier: 20:21:B8:81:D8:B9:C3:0D:23:EF:66:5A:90:1E:96:88:2F:C6:CB:0D
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: 013D
Signing time: Fri 13 Nov 2026 05:44:59 +0000
Manifest this update: Fri 13 Nov 2026 05:44:59 +0000
Manifest next update: Fri 20 Nov 2026 05:44:59 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: M6RC+c5JdvIj1Bv1o173UbVs4phTY4KM5+42Ar4BFcQ=)
2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: hjlB+aB6tVZtBmOR1311n7Du0s/A2ct9E2kTQriis3g=)
3: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: IL7V0fAfJ20CzSs+8gJtBNu5MEW6nOBLoAc46/26Fn8=)
4: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: lTs4KJOgOTvzw9aKQ/IYKy0OU3CuwvNSelWl5UOPyos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 05:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Nov 13 05:44:59 2026 GMT
Not After : Nov 20 05:44:59 2026 GMT
Subject: CN=6af6a3db-9035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:dc:1f:a7:d0:72:0c:3b:8a:e5:38:1d:29:
8c:60:83:ee:fd:34:0c:f3:cc:cd:52:0d:4f:94:b0:
ec:a0:65:6d:8f:ad:fb:99:7b:ce:d4:2f:9e:82:e5:
08:10:16:4d:40:fe:b1:65:7c:c1:b4:a9:33:27:55:
e4:78:37:e4:98:c4:a9:d6:e6:1b:d2:f6:0b:ff:19:
76:eb:6b:85:36:32:7b:1b:fe:b4:22:4d:4a:7d:2f:
22:db:5f:22:69:d1:cd:69:d4:5c:09:df:c8:bb:2a:
c9:28:d9:77:1a:40:5b:c9:db:22:32:30:44:70:d5:
5a:a1:f1:34:0c:74:8b:43:06:bd:24:97:91:f8:2a:
7e:ce:c2:d5:66:ae:b4:53:00:bc:5d:57:ea:69:08:
47:22:40:2e:3f:d4:02:83:30:58:d8:6d:50:47:1f:
62:1a:d5:ca:12:0c:c0:f0:6b:a0:a9:9d:64:ad:82:
bf:3e:60:22:0d:6f:84:71:a0:f1:81:37:a0:49:4c:
79:e6:81:f0:43:71:ff:03:74:55:4a:70:89:81:67:
10:ef:b7:5b:31:a6:70:40:8e:b0:eb:bf:8d:76:64:
f9:b1:b3:8a:68:7f:9c:86:95:f2:b0:2a:63:6b:60:
0b:01:f0:1a:13:27:4a:9e:ce:d2:69:0d:7f:9a:3e:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:B8:81:D8:B9:C3:0D:23:EF:66:5A:90:1E:96:88:2F:C6:CB:0D
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:99:cd:3e:75:64:e3:2d:54:b6:c3:aa:09:86:27:cd:2d:0f:
08:41:12:92:13:71:fc:15:84:a7:bb:57:dc:2e:e4:e4:c7:da:
86:ee:52:df:41:d2:22:bf:1d:f8:d5:23:f8:0c:c1:38:a0:bd:
22:61:1e:e4:9b:df:1a:16:d8:fa:42:20:ab:f3:3a:0f:a4:cd:
d8:a5:fa:55:cd:d6:5b:ab:cc:ab:ca:e0:56:5b:02:e6:a9:1b:
32:f1:cf:7c:73:ab:c1:10:b5:42:95:64:1c:95:3c:6b:e8:02:
11:f4:5d:db:7f:51:e9:8d:f5:85:49:1a:62:80:dc:68:ee:7a:
6d:2b:53:f5:ec:59:4c:43:89:81:e4:a4:77:5e:8c:b9:23:d6:
37:a6:66:b1:97:fa:d2:da:33:c5:85:9a:66:b8:e4:96:cf:3d:
87:c8:c4:8f:ca:93:40:e4:64:11:d1:4a:e9:39:f4:b4:56:ac:
b2:c0:76:43:7d:64:54:24:83:0b:9c:dd:2c:cc:48:e1:f2:b7:
3d:d4:0a:d0:a0:2e:a5:8c:0a:c7:80:42:fe:a1:94:30:96:8e:
10:b4:fc:ea:c7:3f:10:6a:98:60:36:74:39:82:77:32:a2:a3:
08:1e:d6:db:15:9d:be:00:6a:e8:0d:00:65:e8:d2:b2:9b:dc:
15:17:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:26:24 2026 by rpki-client