
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier: N9+fBXwl3b8LTv2RJ1juUOl5q7TaKgFhPlZhVS1t9Zk=
Subject key identifier: 9D:63:8A:97:BD:80:E9:4A:D5:03:17:93:5A:28:83:A6:77:42:4D:3D
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number: 018F
Signing time: Wed 13 May 2026 04:58:01 +0000
Manifest this update: Wed 13 May 2026 04:58:00 +0000
Manifest next update: Wed 20 May 2026 04:58:00 +0000
Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: YdloKCvRvCiPELyQDzuWjW2eZfVBpnUR/e2OACdNoTU=)
2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Validity
Not Before: May 13 04:58:00 2026 GMT
Not After : May 20 04:58:00 2026 GMT
Subject: CN=6a0404d9-8154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:21:f5:49:83:ca:52:3f:90:86:4b:0b:d3:
40:2d:96:56:19:7e:80:c5:38:e6:2b:dd:c1:5b:2f:
e3:df:12:76:65:c8:39:46:7b:2f:a4:1c:7d:35:09:
34:34:a5:a0:00:40:cb:3b:05:27:17:3a:78:2e:f4:
92:ed:7d:04:31:b9:63:bc:1f:1b:e3:b3:9b:de:5a:
9e:53:42:b3:69:db:a2:96:20:d1:f0:d9:e3:16:a0:
4f:e0:8a:77:62:84:e4:da:dc:3e:3e:1c:15:22:ad:
1c:66:38:78:db:ca:69:cc:9f:d1:45:2c:d4:50:a8:
ff:09:f2:43:74:11:0b:69:ec:7d:15:e1:54:42:34:
db:c7:35:3b:73:37:bb:89:e7:56:b7:fd:08:aa:43:
dd:b3:54:fa:e3:f6:4b:c6:f8:0d:35:e3:e0:42:0f:
9d:3b:58:f2:6d:40:2b:f2:aa:82:8f:48:f2:f1:9b:
9d:b2:6e:58:6c:a7:a0:d5:d4:fd:3a:b0:ff:03:8a:
eb:75:60:d0:e2:2b:81:03:e5:d1:c3:7d:d7:f1:53:
17:e9:f0:85:1b:a1:db:98:e5:1b:85:8c:35:23:7d:
7a:1b:a4:77:01:08:94:13:51:8e:08:10:e0:85:b8:
f5:9b:97:b9:0c:e3:19:b5:55:69:3d:20:1c:08:88:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:8A:97:BD:80:E9:4A:D5:03:17:93:5A:28:83:A6:77:42:4D:3D
X509v3 Authority Key Identifier:
keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:72:1f:c6:2c:37:9d:35:00:bc:ec:0c:33:d7:85:43:00:
ca:c0:88:75:e5:01:0b:67:5e:84:c8:c9:a9:c3:f6:c2:5e:1e:
23:1b:f0:4d:99:3a:15:42:2d:81:dd:5f:cc:91:17:65:41:f5:
f8:61:ee:d2:c3:99:fd:25:59:10:51:cf:16:f3:73:02:b3:ae:
64:57:24:51:bd:bb:1b:4c:43:3e:98:8d:50:d4:72:26:8b:aa:
ca:1e:b3:f6:a3:d2:e1:e2:d4:cc:76:fa:11:66:94:05:ec:50:
59:4f:31:04:ab:0e:8f:d7:1a:ea:60:c2:38:02:b7:e4:ae:21:
07:f9:59:4f:ee:a0:2b:1d:76:23:30:e0:a8:0a:3d:1f:34:81:
d0:cb:50:74:e5:e4:a7:b8:27:d6:8b:1b:4c:af:03:5d:5c:fe:
9a:47:c5:bc:52:1d:c8:cf:c4:24:18:95:91:60:93:8f:b0:47:
b9:01:a4:86:39:c5:40:c4:79:e3:2f:10:77:85:a8:bf:ba:ab:
7c:f3:85:cf:7c:ce:a5:52:39:d9:d4:34:20:71:b1:48:2d:e4:
02:64:5a:80:a6:0f:6e:be:e1:4d:da:c2:38:1c:8a:cf:cc:bd:
fc:f8:05:53:99:f6:92:90:12:92:e3:f0:21:d5:dc:da:42:5f:
c3:af:78:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD
MThBQkYzM0IwHhcNMjYwNTEzMDQ1ODAwWhcNMjYwNTIwMDQ1ODAwWjAYMRYwFAYD
VQQDEw02YTA0MDRkOS04MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWch9UmDylI/kIZLC9NALZZWGX6AxTjmK93BWy/j3xJ2Zcg5RnsvpBx9NQk0
NKWgAEDLOwUnFzp4LvSS7X0EMbljvB8b47Ob3lqeU0KzaduiliDR8NnjFqBP4Ip3
YoTk2tw+PhwVIq0cZjh428ppzJ/RRSzUUKj/CfJDdBELaex9FeFUQjTbxzU7cze7
iedWt/0IqkPds1T64/ZLxvgNNePgQg+dO1jybUAr8qqCj0jy8Zudsm5YbKeg1dT9
OrD/A4rrdWDQ4iuBA+XRw33X8VMX6fCFG6HbmOUbhYw1I316G6R3AQiUE1GOCBDg
hbj1m5e5DOMZtVVpPSAcCIg7/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1jipe9
gOlK1QMXk1oog6Z3Qk09MB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0
NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2
OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdEByH8YsN501ALzsDDPXhUMAysCIdeUBC2dehMjJqcP2wl4eIxvwTZk6FUIt
gd1fzJEXZUH1+GHu0sOZ/SVZEFHPFvNzArOuZFckUb27G0xDPpiNUNRyJouqyh6z
9qPS4eLUzHb6EWaUBexQWU8xBKsOj9ca6mDCOAK35K4hB/lZT+6gKx12IzDgqAo9
HzSB0MtQdOXkp7gn1osbTK8DXVz+mkfFvFIdyM/EJBiVkWCTj7BHuQGkhjnFQMR5
4y8Qd4Wov7qrfPOFz3zOpVI52dQ0IHGxSC3kAmRagKYPbr7hTdrCOByKz8y9/PgF
U5n2kpASkuPwIdXc2kJfw694xA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:58 2026 by rpki-client