
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json)
Hash identifier: m9yqRAt9dtQVqnltunJXi7kxGBaIc/+l3m75OAl8Ax4=
Subject key identifier: 1B:D4:80:F4:29:91:DE:11:BC:0C:25:97:7C:4C:B6:86:97:35:76:AD
Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
Manifest number: 021B
Signing time: Wed 25 Mar 2026 02:11:54 +0000
Manifest this update: Wed 25 Mar 2026 02:11:54 +0000
Manifest next update: Wed 01 Apr 2026 02:11:54 +0000
Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: gbVC+hJvyfKaS05wiVviwNsq9najKKwoM9W/3lFLHgY=)
2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: g+l89b9JgcsjGN0NMNtUcqebgscm2xtZ0tt1Dq+667A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Validity
Not Before: Mar 25 02:11:54 2026 GMT
Not After : Apr 1 02:11:54 2026 GMT
Subject: CN=69c3446a-7189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:83:09:be:80:88:1d:92:2a:6b:41:49:bf:
6f:cf:35:17:7e:b3:dd:2c:b8:b2:1d:38:ff:87:29:
7b:02:e5:34:c0:ac:f7:e8:6e:10:56:8d:be:c4:eb:
fd:76:b5:2c:22:3d:e5:cf:55:c1:bc:d6:6c:01:fd:
3a:e4:90:96:3e:b7:5e:cc:a4:ba:cf:fc:15:3c:3c:
13:1c:b9:03:06:af:95:96:06:3a:0a:9f:cd:e8:44:
9b:8e:d4:8c:19:dd:95:e2:42:83:86:cf:dc:3f:ca:
52:36:41:66:ca:97:de:8b:60:87:a5:89:a0:50:9a:
0d:0a:d8:30:d2:15:28:a2:c9:95:29:d0:1c:17:04:
bd:a3:28:2e:2b:29:7e:e1:99:80:60:06:1d:85:c5:
6c:97:b6:77:3d:40:4f:86:5a:d2:22:d1:10:44:98:
90:45:6d:01:5f:a8:e2:66:5a:bf:6d:ed:18:3d:c9:
3f:8e:35:a9:bb:e5:e5:e2:93:e5:dc:af:7a:d0:4f:
c5:17:99:b7:a2:f3:57:e2:04:ec:75:0a:0e:0e:14:
b6:a5:7e:ff:4f:8d:eb:89:3e:f3:b0:73:59:ae:d1:
83:8b:00:f4:90:e3:8c:45:d9:58:fb:05:30:45:93:
6b:45:e6:da:ad:64:2e:a0:45:46:77:df:fa:21:ae:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:80:F4:29:91:DE:11:BC:0C:25:97:7C:4C:B6:86:97:35:76:AD
X509v3 Authority Key Identifier:
keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5a:d1:89:9f:10:ab:b0:d8:3a:7d:b2:8d:62:09:82:6a:47:
f8:f1:fe:83:72:18:9b:eb:73:57:dc:2f:6b:ec:e1:90:26:b5:
9e:20:09:12:54:b4:69:a9:7a:8d:af:fa:9b:11:1c:b8:f3:f1:
60:0f:c5:fb:5f:d5:78:62:35:c9:3d:95:6e:c8:d2:54:17:71:
a0:ff:d7:51:a2:6f:61:b6:0f:37:b8:bd:bf:48:a8:25:af:e3:
aa:e7:01:05:94:34:64:1b:b6:56:ad:ad:47:31:2d:75:09:fd:
fa:2b:eb:ec:51:b3:ab:f0:66:cf:2a:f2:51:f2:ee:62:af:d8:
8c:ed:a0:65:e1:01:2b:23:1d:60:ab:eb:42:87:e5:2a:78:14:
77:08:d0:06:ce:8f:ad:e7:8a:6a:6c:9a:6b:07:f8:3b:aa:c0:
63:f3:ae:9a:50:5c:dc:eb:ba:51:b8:54:97:e1:32:0e:28:5e:
2e:0d:1b:a8:b2:f6:c0:d8:fb:2e:26:c1:e3:5a:99:ba:93:73:
f7:67:77:b1:52:d1:06:9d:c3:59:7c:18:24:f4:4e:06:86:eb:
4f:2e:94:2d:2c:40:50:61:e0:44:ec:e3:21:cf:85:f7:25:5f:
48:16:a6:78:9d:2c:15:98:3f:01:9e:9c:dd:7d:7c:c8:cc:d3:
a6:65:1a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:02 2026 by rpki-client