
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier: wqKCBDp5QmHTyPRmy1Fo5tDmMt6CUiKraba4Jj9wbvo=
Subject key identifier: 71:11:2D:CB:B8:6C:81:16:F5:B1:73:A2:24:A3:3C:D6:AC:DB:27:39
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number: 01D9
Signing time: Wed 07 Oct 2026 04:33:11 +0000
Manifest this update: Wed 07 Oct 2026 04:33:11 +0000
Manifest next update: Wed 14 Oct 2026 04:33:11 +0000
Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: BX3D1bxVeAvAZnKmAWsip3OHtxoWOws3Psppi+sicwA=)
2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Validity
Not Before: Oct 7 04:33:11 2026 GMT
Not After : Oct 14 04:33:11 2026 GMT
Subject: CN=6ac5cb87-1256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:d4:b6:b0:eb:d7:4b:5a:4a:f8:54:16:8e:
8f:3b:b9:06:60:33:05:37:19:98:b8:ee:73:3b:dc:
a2:94:e0:4e:6c:80:b2:b9:8a:80:66:b0:42:d8:a3:
16:7f:8a:2a:fa:52:72:9f:98:d5:fd:24:56:87:18:
80:d8:36:d1:04:db:4b:a1:a8:b6:5f:dc:a9:b7:be:
1a:ba:8a:35:aa:99:fb:6b:4a:0a:d7:d5:89:3b:bc:
1e:ba:dc:18:4c:73:77:9b:3e:0e:74:29:9f:a6:76:
19:ed:94:50:7e:87:a1:58:62:06:c5:24:ec:b0:11:
b6:4c:fa:9a:59:da:9f:c4:6f:2d:51:94:8d:40:fd:
3a:0c:e4:70:11:f1:76:69:d5:96:9c:8e:43:c9:ce:
d6:72:2d:5f:14:e6:23:80:18:4a:9b:3a:2b:b8:53:
8a:16:19:a5:43:60:2f:83:8f:ce:2e:b2:6a:c4:96:
fc:a6:a7:7a:08:f7:6c:f5:0d:23:ed:8f:70:82:23:
bf:d0:68:18:6b:95:85:0d:bd:69:1c:76:4a:20:3e:
c1:bc:68:87:69:e6:fa:ce:58:a3:8d:6d:bd:72:96:
78:ad:69:16:f2:07:11:d6:02:0b:bc:45:34:3a:ff:
83:b4:96:87:f2:9f:f0:9c:0b:a7:d5:4c:ac:95:5c:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:2D:CB:B8:6C:81:16:F5:B1:73:A2:24:A3:3C:D6:AC:DB:27:39
X509v3 Authority Key Identifier:
keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:74:72:f6:56:e3:77:ef:02:6b:9a:84:34:22:58:2e:fe:
57:b0:4a:15:d9:f0:a6:86:26:78:29:01:92:30:2b:52:6c:1a:
ae:bb:69:d7:1f:e6:bf:ef:ea:27:02:96:6e:97:cd:d7:fb:48:
0f:4c:77:93:e8:e2:78:e8:98:72:38:f4:80:ae:44:6a:47:ef:
1d:67:0e:75:0a:87:98:e1:5c:aa:bf:92:4a:38:58:52:09:30:
82:25:7f:51:07:b5:04:cd:2b:23:d4:b5:9a:e4:af:d1:1a:96:
eb:29:bc:e4:a3:0f:74:5c:84:e7:03:94:5f:be:a2:53:b2:eb:
ca:45:f5:2d:e1:fa:90:ff:e7:15:c2:70:7b:fd:55:be:fc:af:
a9:59:c0:cd:c9:d3:76:0c:7a:7e:91:5f:46:72:70:40:6f:f0:
37:eb:12:a8:6e:5f:bd:e9:91:74:52:b3:eb:bd:89:f4:33:b2:
73:3d:d2:7f:7a:9d:30:7f:e0:ce:33:4d:81:49:51:63:fb:b3:
fe:3a:19:fe:7d:df:d9:63:49:a6:6e:43:5b:93:9e:cc:2c:7a:
24:ae:e2:4e:55:a6:9e:da:c6:29:a2:c9:bb:3c:ce:be:29:a8:
ff:d3:c5:9a:b2:80:6c:69:90:00:07:d8:cf:6f:00:2c:fb:f1:
32:76:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:03 2026 by rpki-client