
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier: kgnHdm4D2mW3tX6cviZbyYFpXMAqcpyRpbIMXAmDnKU=
Subject key identifier: DE:F2:A3:30:13:D5:BB:10:14:CB:2F:16:68:71:19:7B:38:A2:C1:3B
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 07:01:31 +0000
Manifest this update: Wed 25 Mar 2026 07:01:31 +0000
Manifest next update: Wed 01 Apr 2026 07:01:31 +0000
Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: mk/VsIUbC4h65jiPwx3gTxwvlg51MG8IBaNj4Iseaa4=)
2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Validity
Not Before: Mar 25 07:01:31 2026 GMT
Not After : Apr 1 07:01:31 2026 GMT
Subject: CN=69c3884b-f06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:5d:7a:2b:d7:a6:ad:e5:eb:22:4f:14:b8:
a3:e0:59:7e:72:44:b4:74:25:8e:41:86:5c:6a:ed:
20:69:41:b8:8a:e1:27:47:07:a9:f7:f0:fa:68:9f:
fa:97:23:47:9f:a6:b3:c3:d8:47:69:2b:5e:29:d2:
27:85:e3:af:53:02:95:51:20:3d:99:cf:b8:31:65:
ac:3f:c3:43:91:a5:47:52:21:1b:fe:f7:30:41:da:
e4:76:74:31:e7:82:86:06:9b:eb:f8:88:f4:fb:5f:
6d:73:5c:85:b9:c1:9f:bc:22:2c:4e:b9:e4:13:9d:
4c:0b:4c:54:c2:d4:42:31:60:df:8d:47:01:d0:d2:
ae:65:cf:c4:df:de:ac:d7:c2:0e:83:57:d9:f2:98:
bc:e0:8a:45:d6:15:b4:29:7f:5e:a5:f9:2d:3c:3d:
ed:dd:a1:b1:56:cd:84:d2:54:b8:9c:0b:26:83:0e:
66:1a:43:db:1e:33:d8:c4:74:cc:86:f4:5f:c1:f9:
b8:a0:2d:b2:35:c8:7e:cd:a4:9f:eb:6d:fa:5d:96:
61:41:0f:4e:26:df:75:91:9e:83:94:ab:ac:93:0e:
ca:22:cb:92:2d:f3:66:4c:8f:f5:f8:ab:1b:e1:81:
76:80:76:49:89:db:65:2c:32:f6:4b:f7:da:af:66:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:A3:30:13:D5:BB:10:14:CB:2F:16:68:71:19:7B:38:A2:C1:3B
X509v3 Authority Key Identifier:
keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:9a:0f:10:f9:cb:9c:a0:ef:d6:39:4c:32:00:b6:ac:ff:87:
50:7a:e6:0b:89:81:0c:c8:dc:69:c9:9a:d6:15:5e:e9:e5:57:
7a:79:57:11:c3:69:8d:c9:5b:ce:0d:b6:e9:5a:89:14:92:7d:
83:1a:c4:8c:6b:65:b5:19:0c:09:36:0a:6e:bd:2a:85:3e:e0:
41:b1:51:3b:ad:7c:cb:ee:d5:fc:23:aa:21:e2:52:f4:d4:55:
41:60:75:d0:02:06:1e:d8:74:1c:a2:30:82:16:c7:1b:5d:5f:
ae:33:b6:89:ba:8d:85:ce:35:1e:e7:92:97:98:01:76:f6:04:
cd:7d:41:1e:62:c0:f0:c8:05:65:39:48:9e:9e:1d:7b:dc:c3:
e4:31:6b:48:d6:68:09:20:ba:78:3a:3f:be:fa:96:82:1a:fc:
48:14:36:2e:9b:07:e1:94:5b:8c:9d:d7:e5:de:b6:0c:68:65:
bc:84:bc:22:97:a7:5d:8c:41:90:24:9b:c1:6a:e0:6f:ca:64:
51:76:05:da:a2:54:c0:5d:ef:0d:63:1d:f0:62:f6:2c:79:87:
f9:f4:5d:ba:6b:22:f6:8b:42:62:24:a8:e0:9c:cc:e7:18:29:
0a:f8:08:b0:7f:d0:28:2d:70:60:a2:d9:bf:41:5f:5e:94:c0:
63:a5:2e:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OTAxRTExMC8GA1UEBRMoMDNEODc0RkYyRjVEMzIwOEU3RUI2MjVBNzczN0ZDRDQ0
Q0VFMkFDMjAeFw0yNjAzMjUwNzAxMzFaFw0yNjA0MDEwNzAxMzFaMBgxFjAUBgNV
BAMTDTY5YzM4ODRiLWYwNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCufF16K9emreXrIk8UuKPgWX5yRLR0JY5Bhlxq7SBpQbiK4SdHB6n38Ppon/qX
I0efprPD2EdpK14p0ieF469TApVRID2Zz7gxZaw/w0ORpUdSIRv+9zBB2uR2dDHn
goYGm+v4iPT7X21zXIW5wZ+8IixOueQTnUwLTFTC1EIxYN+NRwHQ0q5lz8Tf3qzX
wg6DV9nymLzgikXWFbQpf16l+S08Pe3dobFWzYTSVLicCyaDDmYaQ9seM9jEdMyG
9F/B+bigLbI1yH7NpJ/rbfpdlmFBD04m33WRnoOUq6yTDsoiy5It82ZMj/X4qxvh
gXaAdkmJ22UsMvZL99qvZpRXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3vKjMBPV
uxAUyy8WaHEZeziiwTswHwYDVR0jBBgwFoAUA9h0/y9dMgjn62Jadzf81EzuKsIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0RFMkQ2NEVBNzhE
QTExRjBCMEZCRTIxNkM0RjlBRTAyL0E5aDBfeTlkTWdqbjYySmFkemY4MUV6dUtz
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQTloMF95OWRNZ2puNjJKYWR6ZjgxRXp1S3NJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
MDFFL0RFMkQ2NEVBNzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0E5aDBfeTlkTWdq
bjYySmFkemY4MUV6dUtzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBImg8Q+cucoO/WOUwyALas/4dQeuYLiYEMyNxpyZrWFV7p5Vd6eVcRw2mNyVvO
DbbpWokUkn2DGsSMa2W1GQwJNgpuvSqFPuBBsVE7rXzL7tX8I6oh4lL01FVBYHXQ
AgYe2HQcojCCFscbXV+uM7aJuo2FzjUe55KXmAF29gTNfUEeYsDwyAVlOUienh17
3MPkMWtI1mgJILp4Oj+++paCGvxIFDYumwfhlFuMndfl3rYMaGW8hLwil6ddjEGQ
JJvBauBvymRRdgXaolTAXe8NYx3wYvYseYf59F26ayL2i0JiJKjgnMznGCkK+Aiw
f9AoLXBgotm/QV9elMBjpS77
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:13 2026 by rpki-client