
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: AhusAYCO8J2MGGlZTMUObADXTtpuCBqRs6KaCIgFfOM=
Subject key identifier: 93:DD:DC:F2:FE:B4:22:12:A7:E2:2D:46:00:4F:23:E9:73:8B:AD:98
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 357A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 356B
Signing time: Fri 24 Jul 2026 14:51:33 +0000
Manifest this update: Fri 24 Jul 2026 14:51:32 +0000
Manifest next update: Fri 31 Jul 2026 14:51:32 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: S6HZNgG1xNKAmEkBird3/bBQtn4GNn38nmoaER8iSmY=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Jul 24 14:51:32 2026 GMT
Not After : Jul 31 14:51:32 2026 GMT
Subject: CN=6a637bf5-2666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:4e:e3:76:4c:e2:6a:18:02:7e:a9:9c:f1:
8f:ac:97:23:e8:2a:2f:88:82:d7:2a:67:78:4c:3b:
3a:c5:f1:7c:bf:1f:e2:4d:10:08:2b:37:51:21:fd:
f9:16:b5:9a:dc:0f:a8:06:00:b8:8e:c4:42:b5:0b:
0e:9d:6e:df:c4:b8:fc:47:95:58:cc:4c:1a:4b:87:
ef:07:3b:21:94:63:f7:8b:58:65:a0:cc:5a:6e:53:
f4:59:3e:54:51:e6:54:ee:3a:83:da:2a:51:49:6b:
eb:2a:2c:61:ee:01:aa:64:2c:47:b5:af:35:58:78:
ca:7a:b0:fc:dd:c6:2f:3c:ca:22:1b:f2:1c:a4:0b:
02:c9:b8:18:d7:aa:a4:ff:92:c2:f4:fd:cb:02:18:
ce:7d:59:b3:e1:06:b1:fe:c4:6c:62:ed:2d:f3:94:
08:16:c8:12:ab:4a:d7:d0:5b:a2:11:17:9a:7f:59:
39:3a:af:a7:8b:5b:6a:87:d6:9f:f4:7e:04:b0:a7:
1d:b2:68:e8:29:3e:9a:37:40:75:a3:b9:52:9c:ff:
b5:98:8a:ae:f0:a1:d6:bc:99:7c:61:ae:8b:01:29:
4f:b6:0f:1c:4f:97:a7:46:0f:53:dc:27:80:e2:0f:
de:7d:e4:7b:50:37:ed:f2:b3:be:5b:62:66:00:f3:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DD:DC:F2:FE:B4:22:12:A7:E2:2D:46:00:4F:23:E9:73:8B:AD:98
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:d4:52:78:20:87:7b:52:7b:24:25:9d:35:38:cf:a4:ed:
51:9e:fe:68:71:bb:e4:ab:ba:9f:08:16:11:48:b1:89:fc:11:
66:ab:ab:1d:bf:d8:50:cd:02:f0:8e:86:71:4d:41:95:7f:b8:
5a:2e:4c:de:e3:bf:89:9d:84:7c:85:8e:67:db:66:42:54:b9:
e2:2a:8b:4b:79:95:ae:4b:cb:d9:e1:95:a5:7d:fc:22:a2:e9:
06:00:4c:be:84:ba:c9:b6:7b:b6:99:e4:3d:1b:a8:ee:62:2a:
1d:2f:0b:5d:86:df:ff:fd:2f:4e:67:06:c7:35:29:b0:36:7e:
5c:a0:04:32:52:8e:a6:a8:81:c7:f3:42:a9:c0:7f:99:4c:ac:
49:b7:28:9c:32:96:cc:e6:b6:14:b3:ec:00:b7:ce:97:5f:aa:
13:d1:ea:2d:a2:ca:cc:38:68:9f:d6:2e:b4:0a:fa:b9:57:40:
db:5b:3d:d2:a4:ed:49:96:9d:44:09:1d:90:14:54:e5:02:17:
3d:63:79:53:ce:59:87:24:76:16:ea:59:39:ba:b5:e6:fd:c4:
e2:73:f7:3c:20:67:75:1a:6a:c3:ba:7b:fb:ec:7f:54:f6:b4:
15:76:b2:67:7e:7c:73:6b:db:ae:0e:e1:c7:ee:b6:5f:24:2b:
4a:d1:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:59 2026 by rpki-client