
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier: 0qjzDJ3vr84BrR+iV+k0zqPPRBzB3FQ0uADQd3bhuVg=
Subject key identifier: 59:D5:9A:45:94:94:59:80:1C:0B:A2:55:DA:14:18:22:4E:96:7E:F7
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number: 67
Signing time: Wed 13 May 2026 08:03:59 +0000
Manifest this update: Wed 13 May 2026 08:03:58 +0000
Manifest next update: Wed 20 May 2026 08:03:58 +0000
Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: MsavksRpTzaLb7qb8QiOw7xPQwxRysjXLqQ3RzzrO/o=)
2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Validity
Not Before: May 13 08:03:58 2026 GMT
Not After : May 20 08:03:58 2026 GMT
Subject: CN=6a04306f-f14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:f2:5a:07:16:72:9a:f9:ac:2f:ff:0d:1f:
14:40:a0:40:18:aa:39:46:c3:80:22:1d:ac:5c:a5:
00:40:e4:2b:46:57:2f:94:78:a1:0a:c7:63:f1:ff:
bb:aa:82:82:bd:cc:34:46:cb:85:73:7f:72:da:26:
1a:98:5b:32:95:79:54:b3:03:44:75:9e:35:bf:97:
f8:b2:8c:6e:d8:73:e5:02:78:3c:11:cd:be:11:b7:
53:fc:68:ae:f5:ef:43:8c:64:e7:0d:9b:f7:c2:74:
47:fe:da:20:00:b4:2e:7c:56:17:46:5e:7f:6e:c7:
54:4d:cb:90:b4:52:67:88:19:85:1c:e1:c1:cf:25:
d9:a1:df:96:e2:ae:ca:ae:d1:73:ac:0c:ec:d0:ca:
57:ba:f7:f2:df:cb:13:96:c6:ad:ac:7e:f4:03:f8:
2c:d8:82:24:25:68:21:0e:59:ec:a9:38:4a:7d:04:
14:54:37:14:62:9e:18:39:a3:cc:5f:d6:da:53:fd:
97:6a:bb:78:7b:05:d1:68:a6:f0:31:b2:49:b3:43:
ec:00:21:ec:49:ac:e5:b9:1f:22:cd:4e:cd:13:2f:
2c:f6:56:4a:f3:df:93:49:62:23:39:b9:fb:d3:65:
59:a2:36:6e:c3:22:b1:9b:e0:4c:f7:1c:87:5b:ca:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:9A:45:94:94:59:80:1C:0B:A2:55:DA:14:18:22:4E:96:7E:F7
X509v3 Authority Key Identifier:
keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:2f:43:cc:8c:d2:a5:5c:55:7a:a4:25:3d:f7:ad:6e:29:
92:50:ee:c3:51:ec:c6:6e:39:b3:ed:7a:15:ff:dd:bd:eb:82:
a2:35:38:0b:2a:66:d9:f2:05:18:07:55:53:62:b1:cd:f0:3c:
1d:82:7a:0e:b3:d1:e0:80:04:cc:e6:ea:21:1c:f3:b6:a4:4e:
d3:e0:3d:04:35:6d:51:30:cf:ca:45:2d:14:58:8a:71:4f:a8:
b3:49:36:e5:29:4a:0d:18:13:ad:d9:1c:36:5f:d0:e3:5d:bf:
51:90:71:27:d1:77:81:6b:39:64:c9:89:41:e9:78:43:c1:87:
75:e7:9b:3b:9c:b3:ec:17:d4:2f:38:cb:dc:db:43:6c:93:91:
44:a0:61:26:ee:45:35:64:4c:54:e4:5e:4b:50:0a:20:9c:0c:
d3:7e:68:51:65:fd:9b:ad:bd:7c:d1:b3:5e:d4:e1:66:05:58:
e0:15:60:82:24:82:ed:49:60:e2:57:bf:83:0f:21:19:07:ae:
ca:11:fb:0a:60:aa:99:68:38:4d:6e:73:2d:92:61:b9:03:01:
f3:4d:ba:b5:b9:2e:d5:c7:63:fe:de:a6:4f:28:44:cd:55:2f:
6f:c4:e6:ee:0f:ea:0e:12:51:e9:2d:b8:31:e3:3f:00:cb:d7:
67:41:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:50 2026 by rpki-client