
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: j00fvy1L1m4TgNT4aB3ltT7kzn9JXGWOAcPetQO66ag=
Subject key identifier: 89:61:15:46:2E:F9:1B:69:A4:78:09:4F:7E:EC:5C:50:A6:7C:76:14
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 03BE
Signing time: Wed 25 Mar 2026 00:18:15 +0000
Manifest this update: Wed 25 Mar 2026 00:18:14 +0000
Manifest next update: Wed 01 Apr 2026 00:18:14 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: AMwDeEspmBkhGCxUyPcuaBt38iN6aarxv8HBvcv01es=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: Mar 25 00:18:14 2026 GMT
Not After : Apr 1 00:18:14 2026 GMT
Subject: CN=69c329c7-467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:a8:3b:f5:11:f9:b1:d4:c9:f3:8e:19:0a:
99:fe:9c:8f:49:57:0c:03:40:c1:76:e4:59:ff:5a:
d9:b2:54:72:e0:a0:a4:cc:8c:1e:bf:76:fc:4f:7d:
12:a2:a7:f1:93:42:6a:d7:65:e2:a5:00:6b:3e:10:
d2:93:3d:4b:9a:65:a6:71:f9:c3:0f:f8:5e:66:7d:
54:83:a6:74:a3:84:10:d4:fe:56:40:b9:67:50:7f:
9a:ab:74:7e:79:cb:99:0c:4b:98:83:2b:36:d9:5b:
6b:f7:72:c8:09:05:49:2e:bd:1b:b1:f6:59:de:8b:
51:fe:78:de:de:04:e4:28:a2:21:7b:40:93:4c:32:
45:2c:39:2d:9b:66:9d:6b:d0:80:b7:3f:a6:4c:ac:
c9:39:43:ec:3f:11:c1:85:41:fd:f1:25:7d:7a:c0:
10:25:cd:ba:19:21:6a:f9:8d:4c:30:33:33:97:35:
ae:ea:f5:ea:52:d6:c7:31:87:66:ab:db:e3:3f:ec:
3c:ca:e6:70:4c:7e:7d:a1:83:62:91:af:fa:9f:80:
ae:15:03:fb:e0:7d:0f:f1:84:11:fb:4a:1e:3a:3d:
c1:8d:69:29:69:66:e7:96:66:10:8c:01:85:50:19:
33:b6:01:ef:d2:b8:d2:79:f9:87:b4:58:ec:d3:0d:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:15:46:2E:F9:1B:69:A4:78:09:4F:7E:EC:5C:50:A6:7C:76:14
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6d:02:b4:51:b4:54:72:64:3c:0f:49:4f:2b:96:da:41:ac:
3c:77:bd:0b:a0:8f:24:1c:bb:f4:ff:f9:b3:c6:9a:c8:8f:ea:
ed:9e:e6:fb:db:9b:14:8b:20:39:07:52:d0:1d:30:15:f8:6c:
2d:d1:53:45:61:2a:65:ae:42:09:c4:36:3e:98:ae:89:77:79:
8a:c8:88:2d:f8:7d:93:c8:67:b7:0a:df:a5:d2:61:61:0c:83:
d5:0f:20:43:2e:f6:ba:13:bb:97:43:19:07:d1:3c:6d:f6:6d:
32:56:df:88:ea:7e:a9:2f:19:12:13:eb:e3:1c:5a:d7:0b:be:
8a:3d:20:1a:fe:e5:a8:97:78:d8:9f:73:35:36:26:55:b2:7d:
60:7f:9e:20:bc:be:24:a7:00:f7:f0:37:a7:8f:ab:1c:3d:cb:
5b:de:91:cd:3c:f2:9f:9e:6c:51:38:49:42:0d:8e:2c:25:a0:
b5:9e:c1:46:4c:28:bc:5e:90:31:21:7e:57:21:fb:dc:16:aa:
3b:34:16:81:6c:ad:8d:dc:51:39:aa:a4:4a:f5:1a:f9:7d:62:
14:2d:f0:28:51:43:53:c3:ae:88:3f:25:05:b1:7b:77:ef:b1:
80:25:0a:f3:45:2e:ee:0b:0b:ce:09:2c:5e:56:81:7e:6b:43:
b9:ac:ca:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy
MUYwQTUxMzUwHhcNMjYwMzI1MDAxODE0WhcNMjYwNDAxMDAxODE0WjAYMRYwFAYD
VQQDEw02OWMzMjljNy00NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqRyoO/UR+bHUyfOOGQqZ/pyPSVcMA0DBduRZ/1rZslRy4KCkzIwev3b8T30S
oqfxk0Jq12XipQBrPhDSkz1LmmWmcfnDD/heZn1Ug6Z0o4QQ1P5WQLlnUH+aq3R+
ecuZDEuYgys22Vtr93LICQVJLr0bsfZZ3otR/nje3gTkKKIhe0CTTDJFLDktm2ad
a9CAtz+mTKzJOUPsPxHBhUH98SV9esAQJc26GSFq+Y1MMDMzlzWu6vXqUtbHMYdm
q9vjP+w8yuZwTH59oYNika/6n4CuFQP74H0P8YQR+0oeOj3BjWkpaWbnlmYQjAGF
UBkztgHv0rjSefmHtFjs0w2aPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlhFUYu
+RtppHgJT37sXFCmfHYUMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB
OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP
UndMZktmSFUzUFVoOEtVVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsG0CtFG0VHJkPA9JTyuW2kGsPHe9C6CPJBy79P/5s8aayI/q7Z7m+9ubFIsg
OQdS0B0wFfhsLdFTRWEqZa5CCcQ2PpiuiXd5isiILfh9k8hntwrfpdJhYQyD1Q8g
Qy72uhO7l0MZB9E8bfZtMlbfiOp+qS8ZEhPr4xxa1wu+ij0gGv7lqJd42J9zNTYm
VbJ9YH+eILy+JKcA9/A3p4+rHD3LW96RzTzyn55sUThJQg2OLCWgtZ7BRkwovF6Q
MSF+VyH73BaqOzQWgWytjdxROaqkSvUa+X1iFC3wKFFDU8OuiD8lBbF7d++xgCUK
80Uu7gsLzgksXlaBfmtDuazKnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:06 2026 by rpki-client