
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: cuOxAJZmpPdktOckZqwblCehw4BfiWDbQvilDetx/6w=
Subject key identifier: 89:C7:E3:72:92:C1:7A:E3:93:D8:72:19:1C:B2:91:75:9F:54:A1:AC
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 0994
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0960
Signing time: Tue 12 May 2026 20:12:57 +0000
Manifest this update: Tue 12 May 2026 20:12:56 +0000
Manifest next update: Tue 19 May 2026 20:12:56 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: B9OjdFSmsHL5DLA+rpO1F6deQLW3DbAeyHq+BtVLG+0=)
2: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: ulIWI26V47R53BZSt6uCetTpw45HUPI+vILpTZRiHGA=)
4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
5: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: May 12 20:12:56 2026 GMT
Not After : May 19 20:12:56 2026 GMT
Subject: CN=6a0389c8-38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:b1:96:3f:fa:89:c3:89:73:94:b4:db:cb:
7b:54:cd:53:db:3e:07:1a:5d:4d:13:97:a7:30:97:
57:6c:88:ee:6c:35:01:8d:d0:8f:05:5c:bd:f7:03:
c7:c2:74:15:91:11:f6:8f:d9:c8:87:15:be:00:08:
27:b0:e1:ee:4c:98:22:3e:93:75:1e:4c:28:97:57:
3e:5c:cd:1a:53:6e:4b:12:ba:7c:54:c2:0b:ab:bc:
33:50:a6:5c:7d:bb:66:b1:4d:99:a2:da:c2:36:a7:
ab:a8:43:e6:25:25:f4:db:64:8d:2a:d2:12:11:2b:
3e:49:17:58:f3:2a:9a:6d:67:02:ca:3c:3d:45:b0:
0d:38:7f:13:4a:9e:4e:ed:47:50:85:5e:e2:fd:3c:
5a:c4:6b:fa:93:8e:f8:d9:12:66:e6:26:99:42:55:
74:94:57:08:2b:19:a1:d3:08:8d:fa:c7:98:f4:20:
fb:c9:d7:52:15:e0:8f:31:cc:2d:9a:db:65:78:9c:
32:cc:c4:ea:0d:2f:c6:d5:c7:df:b0:67:b7:4d:59:
af:89:56:1e:a0:36:ef:5c:1b:c9:00:96:96:35:b1:
f6:46:81:54:bb:9e:7f:6e:ce:12:72:e6:82:4e:9e:
87:d4:62:45:42:20:35:df:e6:f5:90:40:f3:dd:b3:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:E3:72:92:C1:7A:E3:93:D8:72:19:1C:B2:91:75:9F:54:A1:AC
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:e9:fa:b4:97:4b:38:ae:99:ba:08:b6:2a:8a:f9:ce:da:
57:dc:72:75:c3:bc:2a:1d:22:83:ca:79:80:8b:14:9a:7c:1e:
38:87:ff:b6:b7:f7:16:0e:d0:88:a1:df:34:d1:a0:e5:c1:a7:
1d:6c:09:74:4b:72:9d:62:b7:cf:80:0f:56:d4:6c:75:52:a5:
c5:11:d0:e9:31:2b:f4:49:0e:46:45:8b:5f:62:65:68:51:37:
d6:5a:16:1a:c9:d6:28:8e:db:b6:e5:d3:73:5f:90:1a:57:30:
7f:f2:69:41:9c:7b:67:5a:8f:2e:27:09:ed:4c:90:39:4d:2b:
fb:78:87:04:d9:77:81:5a:1c:44:5c:83:94:0c:01:7e:b4:35:
42:c9:4c:d0:c9:79:1a:6b:9d:a8:76:43:5b:5e:4d:24:a3:c2:
a0:67:c1:9f:d6:cb:84:1a:94:d4:f6:36:87:b3:d7:59:af:1b:
e8:d1:f6:0a:d5:47:e0:92:0e:24:20:24:31:bc:70:8a:67:7d:
52:cc:f3:85:9c:3b:ab:73:a9:2f:9c:f1:fe:23:f9:66:87:9f:
72:6e:b7:df:ee:bb:85:44:a6:ff:5b:ec:76:27:e7:14:d6:63:
80:7c:dd:60:9a:62:c9:fe:e5:e3:26:ed:ee:99:4e:f1:ed:43:
2c:f6:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:16 2026 by rpki-client