
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json)
Hash identifier: GiBR6Q34IN5GYv9sm1JtMYWt+sMTMXHlhMRbzhrgFWw=
Subject key identifier: 3C:57:82:F8:47:B9:A8:59:9D:12:93:06:B6:66:20:AE:CE:F5:62:1B
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial: 0B92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
Manifest number: 0B7E
Signing time: Tue 24 Mar 2026 18:56:58 +0000
Manifest this update: Tue 24 Mar 2026 18:56:57 +0000
Manifest next update: Tue 31 Mar 2026 18:56:57 +0000
Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: Gi/CzhMBalG4fdgP0h0j9LnUcHOAwQdXW+SkQUPVdII=)
2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: Jnv0aGtmJmZtRkDFN/NTaEJWu0H9zmfWsPffd7dQQS4=)
3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: kjB0Uc0AizKtO+4LmZXnWut0vQIyfADTe082hQ2EIDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Validity
Not Before: Mar 24 18:56:57 2026 GMT
Not After : Mar 31 18:56:57 2026 GMT
Subject: CN=69c2de7a-c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:2c:0d:73:fe:d5:0b:87:42:9f:09:ea:f1:
ff:f0:23:bb:74:29:9f:9a:98:73:a3:ed:18:07:66:
4b:24:2c:c2:b5:c8:16:54:61:e5:45:8c:fb:6c:2e:
99:5f:d9:aa:0e:86:e3:78:a8:d5:41:0e:72:dc:52:
b2:39:24:56:03:44:9d:f9:1f:58:8b:7d:68:8f:51:
13:e2:ca:a6:0e:2d:39:e4:ab:fa:61:ff:67:60:1d:
da:fc:69:f0:64:7f:9d:bf:8a:b4:8d:e8:3c:13:95:
f2:28:53:77:5e:8f:b5:e6:f4:35:36:d9:32:f9:35:
12:75:8b:6c:b7:4d:f4:7a:e5:df:51:bf:1e:59:25:
67:c7:3f:33:2d:65:3f:ae:46:98:34:38:ad:ca:51:
69:bd:05:50:36:61:d3:0a:3e:ee:50:2b:e2:ce:85:
b5:9c:42:c2:fc:46:45:dc:7c:3a:35:d3:86:21:bb:
5e:ce:a0:b0:cc:34:db:db:28:98:de:13:4a:9b:80:
2a:81:45:26:26:f2:8d:e9:b5:73:61:1f:5b:95:d1:
b0:1b:9d:76:94:e9:bf:7d:9d:03:05:7b:02:9a:5c:
e3:a5:cb:1c:4a:57:af:5c:14:8f:a3:70:7d:6c:ab:
7f:31:f5:63:d2:ee:cd:59:b7:d0:29:e2:6c:c9:a6:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:82:F8:47:B9:A8:59:9D:12:93:06:B6:66:20:AE:CE:F5:62:1B
X509v3 Authority Key Identifier:
keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:28:2b:d6:8d:a0:21:da:48:72:37:fa:6e:2c:61:0c:e7:8b:
27:79:c5:3e:d1:0c:47:81:61:68:2f:b0:1d:64:dc:6d:56:c8:
ed:a6:26:ba:ae:2b:33:72:ae:91:8f:19:9b:d2:3d:9e:c1:00:
e1:84:17:8d:22:66:d3:db:55:b5:1e:60:f3:47:23:c2:24:58:
23:0a:33:42:8e:5a:8e:b0:44:02:61:29:19:c5:eb:55:c0:3b:
b7:c0:9f:fb:ee:7a:8e:d4:15:28:53:c0:c2:df:dc:05:5f:c5:
e5:d5:4c:16:6f:6f:db:8f:14:bd:02:87:46:ad:7f:7c:20:fa:
04:b7:ce:eb:a9:fa:8c:16:29:23:7d:72:fb:3c:c4:70:a3:a9:
7f:76:1f:11:07:74:a9:78:43:19:f4:e6:04:f2:8a:3f:a6:0a:
a6:e0:5f:7a:0a:25:b5:12:be:dd:36:3a:5b:66:27:e2:5b:23:
e3:eb:07:c9:38:38:6d:fa:10:e6:82:56:aa:49:3a:ce:a2:8d:
fe:6d:ea:0b:41:b3:f1:7e:4c:5e:4f:fa:a3:06:1d:1a:6a:25:
76:46:bc:bc:7b:1d:96:29:10:53:c4:1d:c9:f6:ef:c3:8b:65:
49:8d:b7:25:34:6c:70:09:58:fc:15:2c:09:90:a9:d0:32:6e:
c6:38:60:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw
NThDNzU1QUUwHhcNMjYwMzI0MTg1NjU3WhcNMjYwMzMxMTg1NjU3WjAYMRYwFAYD
VQQDEw02OWMyZGU3YS1jMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnJIsDXP+1QuHQp8J6vH/8CO7dCmfmphzo+0YB2ZLJCzCtcgWVGHlRYz7bC6Z
X9mqDobjeKjVQQ5y3FKyOSRWA0Sd+R9Yi31oj1ET4sqmDi055Kv6Yf9nYB3a/Gnw
ZH+dv4q0jeg8E5XyKFN3Xo+15vQ1Ntky+TUSdYtst030euXfUb8eWSVnxz8zLWU/
rkaYNDitylFpvQVQNmHTCj7uUCvizoW1nELC/EZF3Hw6NdOGIbtezqCwzDTb2yiY
3hNKm4AqgUUmJvKN6bVzYR9bldGwG512lOm/fZ0DBXsCmlzjpcscSlevXBSPo3B9
bKt/MfVj0u7NWbfQKeJsyaa5FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxXgvhH
uahZnRKTBrZmIK7O9WIbMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5
MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT
djZGY1JIczVna29GakhWYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWCgr1o2gIdpIcjf6bixhDOeLJ3nFPtEMR4FhaC+wHWTcbVbI7aYmuq4rM3Ku
kY8Zm9I9nsEA4YQXjSJm09tVtR5g80cjwiRYIwozQo5ajrBEAmEpGcXrVcA7t8Cf
++56jtQVKFPAwt/cBV/F5dVMFm9v248UvQKHRq1/fCD6BLfO66n6jBYpI31y+zzE
cKOpf3YfEQd0qXhDGfTmBPKKP6YKpuBfegoltRK+3TY6W2Yn4lsj4+sHyTg4bfoQ
5oJWqkk6zqKN/m3qC0Gz8X5MXk/6owYdGmoldka8vHsdlikQU8Qdyfbvw4tlSY23
JTRscAlY/BUsCZCp0DJuxjhgwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:22 2026 by rpki-client