
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json)
Hash identifier: hH7wLiOmVCmP09jCH6nx9TPILTF63pbrhRSZQFR8ACU=
Subject key identifier: 74:69:EF:2C:98:11:CC:8A:6F:3D:2D:5B:8E:14:6D:FC:E5:71:57:0D
Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Certificate serial: 0D79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
Manifest number: 0D62
Signing time: Thu 24 Sep 2026 17:57:57 +0000
Manifest this update: Thu 24 Sep 2026 17:57:57 +0000
Manifest next update: Thu 01 Oct 2026 17:57:57 +0000
Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: 3k/1mhhmaUKEjVWYkzs/CiPHPfM4OihCQeREL04kFMA=)
2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: JwOjYA/Jw9dwtNja6OhiUESlnckDLqCGhIODnzf58NE=)
3: 2WoULcyaOwLKeaIJth7CVjpxQLg.asa (hash: SL6OwRPsWHRB4bKs+npcCF5BsUIB6xDOB2b8KBHe94c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3449 (0xd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Validity
Not Before: Sep 24 17:57:57 2026 GMT
Not After : Oct 1 17:57:57 2026 GMT
Subject: CN=6ab564a5-ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:10:80:aa:69:c2:99:0f:e1:c7:7a:86:22:
1a:d7:8c:45:e1:8e:96:d4:12:ac:13:41:8b:5a:3e:
6c:18:48:f3:2d:73:26:a2:6b:e4:08:e9:9d:b8:37:
fc:8c:a3:fb:ba:68:a6:c6:21:2a:76:46:84:4d:60:
29:7a:64:ba:f6:a2:aa:30:e9:30:06:ab:59:15:ba:
3f:f2:35:dc:fe:8f:42:57:97:70:73:a1:bc:2c:80:
c0:f1:52:f1:c0:1c:e6:74:79:fa:cf:4e:3d:06:54:
be:29:9d:99:42:8e:bf:92:fa:f0:1e:75:a3:46:4d:
b0:2b:6f:02:25:fd:65:d9:bf:f6:1b:5e:ea:42:63:
c6:a3:eb:f8:0c:f6:cf:e4:dc:4e:31:db:ac:ac:dd:
8f:67:33:30:89:43:62:8b:b4:c2:de:f7:6f:ba:1e:
55:2d:16:3e:55:92:2c:ca:f9:14:4e:59:ae:55:63:
75:26:48:a5:19:43:63:2f:9f:d6:0b:e3:aa:67:77:
41:db:49:25:01:d5:e2:fa:07:64:36:b4:68:7d:0e:
5a:17:3f:00:68:63:b6:33:d4:07:fb:7a:82:bd:31:
a1:a4:2e:c3:1d:24:4b:0f:91:dc:73:2f:36:d1:49:
82:a6:54:c8:e9:91:64:e1:96:2f:99:99:44:e0:81:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:EF:2C:98:11:CC:8A:6F:3D:2D:5B:8E:14:6D:FC:E5:71:57:0D
X509v3 Authority Key Identifier:
keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:62:6d:77:76:1e:ea:7d:3b:4e:a5:ad:8e:a7:90:e8:16:
cb:c9:52:4c:f6:b9:55:17:ea:25:d7:2e:17:ea:95:c7:e0:47:
1f:e7:70:ab:c0:2e:60:cf:08:e1:17:76:34:0c:87:c2:4e:7b:
fa:c7:d2:d4:c9:48:0b:7d:06:c7:55:dd:28:df:b4:3e:8a:9c:
65:22:97:f5:0a:e4:14:49:8d:84:f5:f1:0d:13:e0:a4:dd:57:
a2:ef:be:84:b4:f1:43:06:38:6c:5c:ee:97:36:77:06:7b:5d:
41:c3:93:dd:e2:67:fa:a3:a1:33:92:48:4e:4a:4d:13:7f:c9:
1f:97:f0:22:ad:ba:f1:25:e3:49:93:15:5f:b1:7b:83:15:b6:
a5:e8:c5:9c:ae:b5:a1:5e:c1:f1:29:2b:ac:d7:ef:2a:3c:7e:
f5:ee:28:4c:a2:7c:1a:68:ec:4b:cb:87:b4:2d:e8:94:b6:4b:
d0:32:22:56:52:8b:43:be:f9:ba:60:68:de:8e:d7:1d:a0:ca:
13:9a:ec:77:fb:73:1c:98:3a:e1:2a:6b:a6:14:fd:ec:5e:bd:
5b:99:0b:a8:f7:4b:e5:7d:b4:3e:e8:a1:e5:e5:cc:89:bb:42:
89:ad:5d:92:53:b2:d6:20:ce:9f:71:7f:cb:fb:09:21:d6:ff:
d1:d9:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:38:41 2026 by rpki-client