
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: eW66bHqiQabXanEyXEJQdv9hN3Bqge8um5Wr+rOEiLc=
Subject key identifier: C5:2A:AB:89:EC:18:C3:19:DC:A8:14:1D:44:17:62:84:B7:F4:19:14
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 03DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 03D7
Signing time: Wed 13 May 2026 00:41:31 +0000
Manifest this update: Wed 13 May 2026 00:41:30 +0000
Manifest next update: Wed 20 May 2026 00:41:30 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: B+6TSEOmuiu3nzmgl+uXdBHsMLbiGwjzULvF8QyfMdw=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: May 13 00:41:30 2026 GMT
Not After : May 20 00:41:30 2026 GMT
Subject: CN=6a03c8bb-99c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:38:3b:3a:52:a6:e1:29:35:c4:50:b8:b5:
87:3f:b8:2f:58:5c:0f:03:d3:ff:89:13:1e:f0:6d:
94:99:29:d1:eb:0d:75:4e:31:30:f3:44:98:5c:a7:
e3:f5:19:87:cf:25:8d:42:6a:ce:fc:f1:02:87:35:
8e:47:2c:71:7d:55:25:6f:86:a9:b8:0e:27:d0:94:
16:e5:d2:36:a2:4e:ba:82:46:1b:1e:73:ad:24:c5:
b9:4a:7a:5b:46:05:ab:d8:2a:ae:f1:ca:66:0c:ea:
a6:c2:25:69:58:c4:80:99:3f:83:0d:42:86:1c:41:
ea:8b:be:37:e5:6b:a7:cc:ab:23:24:07:6b:57:7f:
9e:cb:0f:fd:c1:eb:e4:12:06:cd:a1:e8:79:d2:94:
f7:0d:7a:75:0d:14:60:32:3c:28:5c:33:5d:82:bd:
e4:d0:67:fb:56:b2:fe:9a:4d:57:d2:69:bf:b4:3c:
db:6f:a9:f2:6e:43:c2:ab:8f:b6:59:8b:f7:26:0f:
07:63:98:ae:07:79:aa:ae:63:2a:5c:db:05:af:fa:
ba:51:2e:f9:74:a9:98:73:58:0c:20:c7:2c:6e:07:
83:e3:aa:f2:d8:f6:fd:fd:49:df:be:e5:48:5d:e9:
23:6c:66:35:01:f1:50:39:a1:d3:0a:6e:6a:9f:26:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:AB:89:EC:18:C3:19:DC:A8:14:1D:44:17:62:84:B7:F4:19:14
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:16:75:92:34:2a:ad:de:3d:53:5c:79:c5:14:24:d9:f9:
47:16:8f:91:75:21:fc:00:a3:54:6a:6b:78:b3:e5:1d:a2:01:
25:3a:cf:f1:41:ac:09:ec:5e:50:00:68:55:98:35:6b:e7:09:
38:6d:2d:8a:cf:84:68:c7:6c:80:86:de:90:ba:ba:37:d2:71:
80:1a:bd:af:44:62:0b:f9:41:8c:11:4a:fd:fb:0a:05:d8:b9:
ce:75:bb:61:79:70:cf:96:93:4f:6f:43:2d:3c:83:3f:10:3e:
99:b6:54:d5:ad:91:2e:2b:0c:a8:07:14:55:e9:80:e4:47:a5:
db:e7:b4:72:ea:2b:44:55:a5:54:ea:73:73:83:d9:86:21:2f:
22:2a:72:90:29:61:08:92:58:db:4d:b3:e5:3c:4d:64:d9:3e:
ee:68:6d:06:f9:bb:fe:77:0c:aa:4c:de:09:2c:31:e0:88:68:
9e:b6:10:bc:c1:d0:4c:e7:a2:c6:6c:9f:42:9e:e4:d8:55:3d:
54:7f:e7:70:aa:68:49:c5:89:bc:fb:72:d7:f8:c3:b7:c6:de:
c3:e8:45:b2:34:c0:22:f0:94:5b:bd:69:43:a9:fb:b5:bc:b6:
72:07:cf:07:82:00:53:48:d5:e1:d8:85:d8:80:02:95:0e:fe:
ed:cd:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:56 2026 by rpki-client