
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: gkcc301HRyaVeeonRMnncQtyed2QDSoyExJ0h7wQnGQ=
Subject key identifier: DC:DF:A2:59:A9:89:9F:F0:CB:50:D5:5A:07:34:CD:2E:55:6A:DA:1C
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: D6
Signing time: Wed 25 Mar 2026 06:18:11 +0000
Manifest this update: Wed 25 Mar 2026 06:18:10 +0000
Manifest next update: Wed 01 Apr 2026 06:18:10 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: AW4kFbGVFn6sacBKMOu8GfKNXhWIzDseuC5v5gqFVeM=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 7IPdyrB8hldu0/eD1JF7CKYpSU0HFM1oIZi+GkIqvMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Mar 25 06:18:10 2026 GMT
Not After : Apr 1 06:18:10 2026 GMT
Subject: CN=69c37e23-7262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:1f:1b:88:79:85:49:8c:ab:7b:78:d8:0f:
c6:4a:a5:c7:e3:95:92:6f:cf:37:e9:3e:58:ac:95:
32:de:7e:de:4b:de:22:5d:2c:66:6b:ca:4e:9d:6b:
db:1a:9d:84:dd:a8:a4:91:2b:43:ae:e1:b7:55:7f:
24:87:01:a3:46:5e:76:7a:17:f4:76:2c:53:10:ce:
40:72:4f:c3:af:88:69:c6:e4:7f:56:b1:6c:cb:70:
18:13:26:d4:82:15:14:3a:e2:38:2b:23:29:b9:3b:
8a:e5:a7:ef:f4:09:be:0b:39:fd:e1:9d:16:ca:3a:
10:af:51:d7:c1:58:f3:7b:2a:db:53:be:cb:22:a0:
aa:dd:dd:6c:0b:b3:b0:12:c7:65:fc:0d:17:e3:d7:
70:ff:2c:78:2b:bd:bc:9c:91:bb:33:c8:30:ba:1e:
ff:7c:c6:59:ad:9e:54:d2:11:e3:ba:bd:87:c5:c0:
a2:9d:97:22:83:90:42:39:bb:b5:9c:7a:2e:e1:8d:
bc:32:b1:a9:1d:9c:c5:ca:12:b1:a5:8b:f7:ec:b2:
dd:d9:25:80:d3:45:af:6a:88:de:3e:74:36:2e:f6:
57:12:f5:e8:fc:53:57:eb:b9:08:a9:f4:b1:98:e3:
83:59:32:d8:bb:90:8f:f2:11:2f:ee:32:bb:be:4f:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:A2:59:A9:89:9F:F0:CB:50:D5:5A:07:34:CD:2E:55:6A:DA:1C
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:80:d0:cb:fe:6d:d5:5b:cb:73:a4:d0:90:d8:b4:ce:5f:
48:f3:a9:43:b2:0f:55:12:b1:1c:99:d3:74:3b:b3:0b:35:d7:
76:fe:60:37:e9:8c:07:7c:3f:f9:a3:aa:6f:24:94:19:a8:64:
d5:2d:08:02:43:0e:28:0a:30:9b:3d:73:f0:07:2c:66:36:5b:
74:ea:56:11:c4:c9:b9:8d:db:b6:6a:c1:dc:74:f3:d7:10:2d:
d1:a8:0c:70:cf:59:e8:90:24:6f:5e:9a:26:ee:83:3b:39:b8:
fe:d2:b6:ce:9f:fc:69:4a:2f:4e:00:47:45:27:e4:a4:30:5b:
e7:e8:0d:77:30:4e:9d:2b:02:67:26:41:c2:00:10:61:9b:3e:
8c:ed:fe:00:06:a3:5d:25:06:8a:f5:f2:c0:7e:a1:eb:7f:29:
36:ac:5f:17:1d:ea:d7:62:2e:d8:91:cb:ba:16:b3:bf:03:77:
11:43:27:c7:1a:81:7d:7a:b5:47:a5:d1:b1:d5:af:40:72:34:
44:6a:f4:2d:3e:6e:da:d8:d8:ff:61:f1:1d:75:b1:23:8d:28:
d0:23:7d:18:ab:e9:d8:48:2c:94:03:0a:69:13:7d:d2:96:b9:
e4:c4:00:66:0e:a6:26:a7:c3:f4:97:ab:8f:f3:60:1f:f1:54:
c3:62:07:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQTUxMTAvBgNVBAUTKEY3MjY3RTgwQkU4MTdGMDQzRDI4RkI3RTczMDVGNEM0
ODhBODM5MUEwHhcNMjYwMzI1MDYxODEwWhcNMjYwNDAxMDYxODEwWjAYMRYwFAYD
VQQDEw02OWMzN2UyMy03MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZkfG4h5hUmMq3t42A/GSqXH45WSb8836T5YrJUy3n7eS94iXSxma8pOnWvb
Gp2E3aikkStDruG3VX8khwGjRl52ehf0dixTEM5Ack/Dr4hpxuR/VrFsy3AYEybU
ghUUOuI4KyMpuTuK5afv9Am+Czn94Z0WyjoQr1HXwVjzeyrbU77LIqCq3d1sC7Ow
Esdl/A0X49dw/yx4K728nJG7M8gwuh7/fMZZrZ5U0hHjur2HxcCinZcig5BCObu1
nHou4Y28MrGpHZzFyhKxpYv37LLd2SWA00WvaojePnQ2LvZXEvXo/FNX67kIqfSx
mOODWTLYu5CP8hEv7jK7vk8SvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzfolmp
iZ/wy1DVWgc0zS5VatocMB8GA1UdIwQYMBaAFPcmfoC+gX8EPSj7fnMF9MSIqDka
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FBNS9CQUZCMzU3NDE1
QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3UTlLUHQtY3dYMHhJaW9P
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09Sby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3
UTlLUHQtY3dYMHhJaW9PUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd/qA0Mv+bdVby3Ok0JDYtM5fSPOpQ7IPVRKxHJnTdDuzCzXXdv5gN+mMB3w/
+aOqbySUGahk1S0IAkMOKAowmz1z8AcsZjZbdOpWEcTJuY3btmrB3HTz1xAt0agM
cM9Z6JAkb16aJu6DOzm4/tK2zp/8aUovTgBHRSfkpDBb5+gNdzBOnSsCZyZBwgAQ
YZs+jO3+AAajXSUGivXywH6h638pNqxfFx3q12Iu2JHLuhazvwN3EUMnxxqBfXq1
R6XRsdWvQHI0RGr0LT5u2tjY/2HxHXWxI40o0CN9GKvp2EgslAMKaRN90pa55MQA
Zg6mJqfD9Jerj/NgH/FUw2IHEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:27 2026 by rpki-client