
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json)
Hash identifier: 3KAfneaCf5FvjybvluT/s+PfsHD88rQnmnleOBSxb6A=
Subject key identifier: 2E:1A:EC:CB:C4:C4:80:4E:90:93:E2:18:F4:58:98:27:79:41:E4:1A
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
Manifest number: 028E
Signing time: Wed 13 May 2026 01:46:35 +0000
Manifest this update: Wed 13 May 2026 01:46:35 +0000
Manifest next update: Wed 20 May 2026 01:46:35 +0000
Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: b/0TSLY/5/yVtbbPbJF7BhZgkgjwE2YG6pwyzOzg8b0=)
2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Validity
Not Before: May 13 01:46:35 2026 GMT
Not After : May 20 01:46:35 2026 GMT
Subject: CN=6a03d7fb-cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:de:9e:4a:c9:ec:da:60:21:9f:35:ed:00:
eb:36:69:24:0d:ea:af:33:89:50:e9:b4:8e:3d:03:
10:74:c8:d0:f8:63:ab:db:51:d9:89:d9:c3:39:ea:
dd:50:f6:2c:02:92:8b:b9:42:06:5e:cb:77:c8:15:
3b:b2:d4:b8:dd:ec:dd:38:2d:1c:d7:87:ec:b2:1c:
02:00:b3:7e:8f:ab:12:7e:03:0d:fc:4b:e7:14:0d:
f6:22:7e:77:d9:15:01:43:b8:09:cc:2c:19:e1:4f:
95:1b:d0:ea:f5:ff:e6:e4:72:4a:74:01:ca:00:41:
bc:7e:71:2a:f1:21:70:75:7e:c8:1e:73:6d:73:91:
80:ac:63:48:8b:38:b0:79:18:9c:52:3c:3e:e6:20:
70:3c:4a:d5:7e:10:ef:ba:48:60:a0:b7:eb:a9:27:
2f:78:7f:fc:b4:08:dd:a2:0c:f6:5f:8d:99:a7:71:
99:d9:9b:ad:bd:0d:0f:77:76:83:a9:38:4e:6b:05:
03:35:c6:6e:d7:15:ed:31:74:20:17:b5:03:f7:38:
fa:81:78:e7:cf:aa:6c:ea:4e:ae:24:89:f3:45:94:
09:3b:8f:5f:3d:17:21:e9:10:53:53:76:1c:0e:22:
95:21:18:bb:6f:16:5e:25:78:92:25:4f:b9:bd:93:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:EC:CB:C4:C4:80:4E:90:93:E2:18:F4:58:98:27:79:41:E4:1A
X509v3 Authority Key Identifier:
keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:56:4e:d2:be:3c:1e:61:56:15:26:78:af:00:77:cd:11:a7:
e3:7c:16:d1:57:1c:0e:5b:21:14:ec:5f:0e:06:54:8b:e2:56:
f2:16:76:15:a9:22:45:29:11:21:9d:21:11:09:bf:ed:0f:2e:
09:49:c5:f2:44:d6:ab:48:20:ab:fd:61:49:22:ec:32:ef:3e:
9a:41:80:8b:f5:b4:8e:d2:b3:8f:c1:33:ef:7f:a3:5a:96:4e:
2a:31:47:3a:89:50:bc:13:d9:7a:52:ed:1e:4c:f3:c5:ae:7b:
df:f5:96:bc:11:cc:85:ff:0b:64:1e:f5:a5:f7:58:cb:18:29:
5b:c8:1e:82:e0:35:d3:46:a5:f5:e7:47:0c:bd:0d:f3:2d:ef:
c3:c6:40:f9:da:9e:e4:7c:76:1a:2c:14:e6:d1:82:88:f9:ab:
09:0c:e7:18:39:31:7d:e4:20:8b:f9:35:a1:91:38:1e:12:1e:
13:d2:3b:4d:bf:37:4c:e5:b8:90:2e:2e:6a:36:4c:82:f3:04:
7d:2a:ac:40:9e:28:ab:a6:74:d1:25:92:d8:cc:be:b2:35:a0:
c6:62:78:a7:ec:ec:49:e8:c2:4b:55:9e:f8:58:f5:89:f9:23:
65:9f:d8:96:7e:9b:f3:01:d4:a9:7d:37:7b:89:78:f4:2b:c7:
a6:bf:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:31 2026 by rpki-client