
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json)
Hash identifier: U1XIY3932JaGeD7ZXHDt6Jxfbi4ePEUaL0v1YZIkJUw=
Subject key identifier: CB:0D:49:D8:5D:88:1B:07:7D:3B:9B:D0:35:FA:F6:B2:92:67:21:5A
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial: 08A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
Manifest number: 0894
Signing time: Wed 22 Jul 2026 21:08:52 +0000
Manifest this update: Wed 22 Jul 2026 21:08:51 +0000
Manifest next update: Wed 29 Jul 2026 21:08:51 +0000
Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: CqvIWLkzXII6E+1XaMaLb7urwvKIMirDEcmCYDPptcg=)
2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645
Validity
Not Before: Jul 22 21:08:51 2026 GMT
Not After : Jul 29 21:08:51 2026 GMT
Subject: CN=6a613163-0141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:6c:32:9b:89:96:49:2d:a8:2f:31:bc:9f:
0a:63:55:45:14:92:c0:a7:4b:87:62:3c:4d:3f:04:
16:8f:50:1a:4d:92:ba:1c:fe:7a:3b:04:5f:da:63:
e6:9e:97:fd:17:54:a4:6b:bf:d2:72:08:c5:9e:3d:
9e:ad:ad:13:fb:40:47:fd:7d:69:1e:c1:45:4d:54:
88:f3:bd:f3:36:62:a4:44:06:1b:c1:83:65:30:3c:
96:e1:05:00:22:be:96:42:a5:1f:c7:a6:74:e6:c5:
a5:f9:19:ee:82:03:d5:3e:22:73:20:c6:c9:61:f1:
e3:71:11:fd:c2:1f:12:d5:47:13:6b:de:17:0a:24:
36:04:d0:50:00:2e:6f:df:47:15:c3:ec:47:a1:99:
b8:8a:9d:9a:7d:a5:c9:63:e4:04:26:ee:43:dc:ad:
b7:43:fa:77:38:81:ea:b2:db:95:c7:ce:12:c7:71:
50:2b:0b:7c:fb:b6:3d:67:fb:2f:1f:64:1a:41:e3:
54:d6:31:2e:b1:47:50:2a:a3:17:07:cf:2d:a2:0d:
c6:6e:1c:c7:4e:81:35:a4:a6:ed:0a:ff:01:58:66:
a2:85:fb:a5:0e:71:94:af:58:e2:b1:c8:e1:a3:d1:
67:b7:7f:d7:72:8f:8b:6b:af:ec:06:3b:cc:fd:ac:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:49:D8:5D:88:1B:07:7D:3B:9B:D0:35:FA:F6:B2:92:67:21:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:76:4c:4e:34:08:6f:bb:61:42:a1:16:ad:f2:7e:09:51:
67:94:f2:b4:8c:a2:5c:5c:e9:78:32:e8:bc:70:0b:e8:3d:33:
10:40:b3:3f:61:d5:83:7f:4b:5f:81:80:5f:7a:53:bd:8a:30:
05:09:15:68:2e:75:a0:85:c7:dd:ca:dc:a9:08:e4:15:ed:eb:
7f:c7:5f:ff:11:d5:c5:43:84:78:80:7c:7b:8f:51:85:e4:c6:
8a:e3:8e:4c:52:b2:2a:24:b1:db:40:58:75:ef:89:2f:2c:4b:
a4:81:b1:14:a2:9c:86:17:ec:5f:73:d7:f9:cf:4d:63:7c:99:
4a:64:c5:75:ba:fa:af:f9:38:d7:d5:78:d3:2d:35:a0:d3:53:
e2:e1:25:7d:d1:ed:c0:de:23:07:34:a1:ed:f3:68:37:a8:59:
28:62:e0:dc:c6:c3:0e:47:72:7c:dd:98:c5:54:11:51:80:c5:
03:e8:3f:12:dc:9a:e9:bf:b2:e1:39:d1:cc:58:aa:27:c7:a7:
93:e5:4c:ad:82:3e:ee:bb:6d:15:2e:5c:20:b0:1c:07:93:95:
13:70:b9:0a:03:ff:e4:93:22:b8:1a:dc:cd:21:f7:f3:91:1c:
bc:3f:aa:f2:a2:24:30:a4:3f:52:f7:16:47:29:21:4d:13:37:
57:0b:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:44 2026 by rpki-client