
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: Y7aoZRwIN5mKcPMS5JlxmtPggULcTH0PvFBcKkFHJr8=
Subject key identifier: 28:29:ED:C5:9F:AD:4E:A9:58:FC:C0:9E:2D:B8:19:28:74:5F:5B:C1
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 0424
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 041C
Signing time: Fri 25 Sep 2026 00:09:08 +0000
Manifest this update: Fri 25 Sep 2026 00:09:08 +0000
Manifest next update: Fri 02 Oct 2026 00:09:08 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: rixuI8DOFwHANx8mkeorfZPmeevZvwUoIe9ERNuJXuQ=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: Sep 25 00:09:08 2026 GMT
Not After : Oct 2 00:09:08 2026 GMT
Subject: CN=6ab5bba4-dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:83:49:18:89:a2:96:b2:29:76:3b:5c:f6:
b2:5d:2f:60:0d:08:44:fc:5c:26:96:d8:b1:33:53:
45:20:f1:23:c9:1b:44:d8:65:9c:da:bf:f1:0d:4a:
48:c6:3a:6a:ce:da:8b:9a:b4:c9:05:97:e8:0a:1a:
2c:7f:fa:b8:90:b7:de:a4:6c:11:9f:65:8d:0a:ac:
4a:86:8e:24:49:18:78:07:26:06:1f:3f:6b:a8:f5:
1b:2b:c5:c7:62:7f:1e:9e:43:6a:a9:4d:05:08:8c:
fa:d4:b1:c3:4a:a0:98:14:40:3f:9b:ba:40:24:b3:
ea:ac:44:7f:f9:5c:b9:8a:e2:90:e7:d4:ed:ab:23:
68:61:29:ef:74:03:fa:ae:72:c8:d9:54:0b:a3:81:
67:47:a2:d9:74:10:79:aa:b5:b7:e0:a4:e0:97:b5:
f2:db:b5:25:5c:00:fc:eb:6b:4f:cf:97:c5:32:48:
a4:ba:03:e7:66:a2:04:c8:d8:c4:32:43:9b:c3:da:
9a:03:b5:01:72:a5:c3:45:a8:6d:91:25:6f:98:a8:
73:81:ca:88:73:05:64:c8:e0:cf:0b:97:a0:6c:c9:
07:17:3e:17:c1:f2:f4:18:3d:a2:89:41:42:13:6a:
f8:c8:c6:62:72:92:d6:d3:34:0f:8b:83:22:87:63:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:ED:C5:9F:AD:4E:A9:58:FC:C0:9E:2D:B8:19:28:74:5F:5B:C1
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:28:83:c4:73:8d:de:79:fa:5a:52:bb:02:25:a7:73:de:
2b:78:d9:d3:fb:38:19:64:22:4d:f7:c0:c9:7f:5f:04:11:a0:
6b:a2:c6:4c:f9:e0:12:15:75:00:92:10:e5:97:ba:cc:29:fe:
96:93:d6:21:36:8d:7d:4c:7e:0c:6f:59:1e:96:66:3f:06:28:
27:dc:9e:da:49:95:76:a2:22:0b:ec:42:41:22:1a:45:44:5b:
46:92:28:ff:28:59:25:4e:e1:16:63:60:b6:ce:7c:d7:09:97:
4f:51:1f:61:4b:84:45:19:f5:65:8d:f5:ab:4d:cc:50:fd:ab:
dc:f8:f9:63:a9:ba:d9:5e:ce:ad:63:5b:78:e9:af:c9:a6:20:
3f:23:30:83:0e:cc:0b:a0:66:24:79:50:7b:39:cf:a1:40:ff:
7a:eb:11:4f:d6:f8:15:4d:ac:33:52:38:69:5b:6e:91:9f:9d:
e8:26:21:6e:7c:e9:a2:18:ee:52:fd:57:44:b8:9e:4e:0a:47:
5b:4d:af:39:7e:96:dc:3b:13:9e:b9:cb:b6:80:dc:06:40:a4:
f8:88:db:05:93:f1:f2:65:a7:55:5c:34:71:8c:f9:f0:f2:a0:
15:6f:9b:3b:26:cd:45:92:03:b1:75:b6:0a:7f:ad:5c:48:73:
4f:1e:9b:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy
MUYwQTUxMzUwHhcNMjYwOTI1MDAwOTA4WhcNMjYxMDAyMDAwOTA4WjAYMRYwFAYD
VQQDEw02YWI1YmJhNC1kZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWqDSRiJopayKXY7XPayXS9gDQhE/FwmltixM1NFIPEjyRtE2GWc2r/xDUpI
xjpqztqLmrTJBZfoChosf/q4kLfepGwRn2WNCqxKho4kSRh4ByYGHz9rqPUbK8XH
Yn8enkNqqU0FCIz61LHDSqCYFEA/m7pAJLPqrER/+Vy5iuKQ59TtqyNoYSnvdAP6
rnLI2VQLo4FnR6LZdBB5qrW34KTgl7Xy27UlXAD862tPz5fFMkikugPnZqIEyNjE
MkObw9qaA7UBcqXDRahtkSVvmKhzgcqIcwVkyODPC5egbMkHFz4XwfL0GD2iiUFC
E2r4yMZicpLW0zQPi4Mih2Ou+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgp7cWf
rU6pWPzAni24GSh0X1vBMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB
OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP
UndMZktmSFUzUFVoOEtVVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtBYog8Rzjd55+lpSuwIlp3PeK3jZ0/s4GWQiTffAyX9fBBGga6LGTPngEhV1
AJIQ5Ze6zCn+lpPWITaNfUx+DG9ZHpZmPwYoJ9ye2kmVdqIiC+xCQSIaRURbRpIo
/yhZJU7hFmNgts581wmXT1EfYUuERRn1ZY31q03MUP2r3Pj5Y6m62V7OrWNbeOmv
yaYgPyMwgw7MC6BmJHlQeznPoUD/eusRT9b4FU2sM1I4aVtukZ+d6CYhbnzpohju
Uv1XRLieTgpHW02vOX6W3DsTnrnLtoDcBkCk+IjbBZPx8mWnVVw0cYz58PKgFW+b
OybNRZIDsXW2Cn+tXEhzTx6bqw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:23:06 2026 by rpki-client