
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json)
Hash identifier: LYf2+n6+hI6N24rpHZP/6pMPiSogWeJR960DexyT7vY=
Subject key identifier: 70:66:B0:6A:6B:D2:58:58:53:D7:33:99:92:C9:38:3E:CB:AB:A7:15
Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
Manifest number: EF
Signing time: Mon 11 May 2026 06:29:54 +0000
Manifest this update: Mon 11 May 2026 06:29:54 +0000
Manifest next update: Mon 18 May 2026 06:29:54 +0000
Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: 9el4fIXfYi3foDvp6m+KwNu8/F2egszeSNR/wAVl6eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Validity
Not Before: May 11 06:29:54 2026 GMT
Not After : May 18 06:29:54 2026 GMT
Subject: CN=6a017762-f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:8e:07:09:4e:fd:8e:5e:c2:f4:c9:b3:69:
a9:16:ad:68:80:25:d8:ff:24:87:d6:5b:cb:c5:d2:
37:21:76:a1:33:ee:65:a3:05:c9:06:17:37:b8:8f:
2b:cb:c5:75:c1:7e:d7:f2:d0:73:41:a2:46:c5:26:
af:d3:25:65:8a:7b:08:f8:43:85:68:19:17:62:d6:
65:22:2f:61:d1:6e:38:e9:06:58:40:58:57:dd:ee:
35:4f:8b:87:98:d4:e6:4d:ec:26:45:cd:da:02:a0:
e1:04:85:37:de:66:24:75:62:e3:cf:12:0f:b7:9a:
f0:ad:bd:46:36:c7:43:cd:92:ee:5e:5f:4e:98:03:
5a:a8:3a:f4:6e:66:ec:06:3d:f1:f6:37:55:eb:c1:
f5:e9:ab:92:06:b6:f2:53:3e:d3:e5:d4:78:4f:f4:
50:5f:90:20:20:d8:b4:58:2d:90:b5:b4:b8:3a:44:
bb:ba:4e:94:93:cb:37:ee:4f:e9:7a:26:04:4d:df:
1e:22:cb:e9:c5:c8:90:ff:d0:91:93:95:e0:13:e2:
90:a5:f6:58:53:e6:33:e1:af:e2:53:02:76:3f:5b:
d3:0e:7b:1e:fb:29:6c:de:62:36:76:96:d1:d2:19:
fc:a1:9d:f6:28:65:23:1d:ba:10:c7:e4:bf:14:c9:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:B0:6A:6B:D2:58:58:53:D7:33:99:92:C9:38:3E:CB:AB:A7:15
X509v3 Authority Key Identifier:
keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:db:c8:ab:a5:e5:45:e0:2b:45:ac:0a:54:68:76:60:2b:
3a:c3:eb:53:a0:9d:f2:e3:9d:e3:23:8c:0f:41:25:31:ca:f8:
dd:8f:50:0e:c6:22:ae:da:66:e5:43:ca:f4:0a:f1:df:a5:e1:
05:f1:4f:17:bf:29:da:44:1f:76:79:d1:7a:6d:90:81:50:a6:
ae:92:42:be:61:38:3f:4c:5d:f6:87:de:33:74:81:e6:df:4d:
1e:ed:5f:f7:95:e8:51:c6:49:01:00:e5:64:af:e8:a8:44:00:
a7:05:0a:87:07:4c:c5:a6:8c:3f:58:fb:ec:ac:43:35:12:ba:
bf:2d:ec:1e:bc:62:d4:0b:b6:ee:f4:a7:1b:98:b2:e9:ef:ed:
df:81:6e:4a:e0:ca:39:2d:b9:ed:6a:fb:6d:d8:f7:3e:37:a3:
b0:4f:eb:5c:61:9c:b6:29:27:6b:04:23:dd:32:fe:61:f3:cb:
46:c4:f9:6b:a3:8d:58:4d:f3:63:28:dd:28:b6:73:81:07:df:
a4:0b:eb:0c:c1:56:fc:47:1d:1a:b0:80:21:d7:b1:39:ff:c3:
b3:73:0e:71:d2:c3:db:75:c3:a2:81:70:f9:fd:7e:b7:a7:38:
2f:c9:0e:73:0c:ca:04:be:78:ac:80:e7:03:2b:60:1b:25:f2:
36:0b:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:04 2026 by rpki-client