
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier: dVTq1bu66fL8d/MdxTV5VmnVqnQqBoFiJxZXFpKHY90=
Subject key identifier: 63:A0:C2:4C:0B:0D:1D:A8:B8:DD:E5:0A:22:8D:11:EF:A6:7F:F7:D9
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number: B1
Signing time: Thu 23 Jul 2026 08:57:14 +0000
Manifest this update: Thu 23 Jul 2026 08:57:13 +0000
Manifest next update: Thu 30 Jul 2026 08:57:13 +0000
Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: sTyjzdTLURm1ykOyQcwBgHyDk69kOumTvOcIi73Cknk=)
2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Validity
Not Before: Jul 23 08:57:13 2026 GMT
Not After : Jul 30 08:57:13 2026 GMT
Subject: CN=6a61d76a-45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:27:d5:1d:8f:5b:0f:3a:41:d6:4a:ee:39:
76:3d:31:eb:cd:79:0c:98:43:e9:7a:06:e6:3d:b4:
f7:e5:4d:0e:ef:38:09:c0:ab:43:f7:23:aa:f6:54:
38:a0:42:43:c1:8e:e5:52:71:0b:4e:85:6e:54:d9:
04:4d:d2:f0:d9:77:e4:b3:da:68:dc:6c:81:87:64:
72:89:25:d2:d3:8a:c1:a8:98:0e:f5:56:9f:53:f1:
9e:82:58:11:d0:4f:f8:f6:32:e7:e3:78:ca:41:12:
1d:ca:51:84:31:ac:8e:85:ec:a1:02:14:c4:26:b7:
3a:22:d8:c3:8e:f4:00:af:af:36:a9:3c:54:59:68:
b3:91:1b:3c:16:06:f9:f0:bd:7e:ad:ca:d1:7b:af:
ad:30:6b:8b:a1:de:d9:1d:53:d9:37:b9:a9:da:05:
28:cb:57:8d:8a:38:9b:52:de:3a:d6:f5:97:0b:a1:
77:ed:25:77:51:f7:5f:1e:0d:2f:9f:c3:ee:25:2d:
9c:2a:f6:93:05:d5:0b:25:3c:83:39:b2:f5:10:e1:
10:fd:0f:ab:df:b2:ee:fb:8e:0e:c2:00:38:83:2b:
18:89:45:3a:84:36:25:19:7c:96:44:86:ce:0b:c4:
22:d5:6a:3d:f2:90:d9:11:23:45:35:b0:41:91:7b:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:C2:4C:0B:0D:1D:A8:B8:DD:E5:0A:22:8D:11:EF:A6:7F:F7:D9
X509v3 Authority Key Identifier:
keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:63:55:80:21:f5:a3:ba:2f:d7:3d:24:a5:cb:a1:f7:57:
d6:e5:48:b5:60:ef:7a:4f:ea:aa:8f:7f:53:f4:df:71:ad:27:
52:61:ad:f1:9f:c7:0c:0d:ed:62:e1:bf:cf:7e:90:5c:1a:df:
03:4f:5a:21:57:f5:86:d7:e2:f7:53:4a:b4:f0:87:bd:34:ff:
43:ce:d0:fa:09:59:75:6e:03:f4:fb:08:eb:07:cb:d9:11:8d:
bb:cf:92:cd:01:cb:98:00:33:90:9f:ec:cb:ab:82:5b:a1:f1:
a5:9a:44:2a:eb:3c:b0:a9:04:c3:a0:9f:7f:64:db:d0:fc:0f:
2b:41:d1:84:af:63:e0:7a:ce:19:cd:79:d1:bb:dc:90:96:60:
37:86:b8:99:99:70:7f:3c:18:25:6b:ab:c6:30:7a:bb:db:86:
72:1b:19:88:9b:40:e0:03:e0:97:4d:b3:5a:cf:1e:87:47:4a:
af:e2:d2:bd:a6:15:ed:58:8e:96:70:1c:ec:d0:55:c5:17:5a:
26:20:e1:4f:a6:4d:2a:4c:7f:f4:0a:d9:40:7c:ca:5b:df:cf:
9f:4c:53:9c:ef:33:fb:21:07:2e:3c:ef:fd:83:2d:5d:42:2e:
c2:ea:3a:fb:87:9b:e1:ed:57:a3:43:27:9d:8e:2c:90:06:b2:
12:87:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:44 2026 by rpki-client