
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier: HM+k3vklhGl1dxQ9S6ezuHX9ls5PXG2GcUiwHLCrF9U=
Subject key identifier: E0:38:47:18:BF:67:03:69:8B:3C:96:5A:0B:58:FC:1A:83:07:33:11
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 0977
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number: 0944
Signing time: Thu 26 Mar 2026 20:05:06 +0000
Manifest this update: Thu 26 Mar 2026 20:05:06 +0000
Manifest next update: Thu 02 Apr 2026 20:05:06 +0000
Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: RsfPZN+jrbWMYl8vXAwJkzIQxa1ywChNP0EWtMBJG38=)
2: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: umj7JneQB0kl/ZQXdk4AXsjR8t2ySSAFoDKMYZURBhM=)
4: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
5: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
6: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Mar 26 20:05:06 2026 GMT
Not After : Apr 2 20:05:06 2026 GMT
Subject: CN=69c59172-03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:2e:f0:b9:e0:4a:ff:fc:58:49:e6:d8:45:
40:d1:d2:f3:fc:b3:0b:1a:f4:ec:04:2c:f3:7e:58:
60:48:3c:ac:d5:bc:83:c9:71:22:73:68:1d:b9:76:
7e:93:37:39:9d:a9:90:3f:fd:8e:33:a6:86:50:2c:
d1:ba:27:1a:3a:8b:ba:01:42:14:a0:23:3d:fb:c3:
07:08:18:19:a4:bf:0a:19:d0:4b:38:fe:5d:bc:f9:
9a:37:8b:93:f6:c3:18:5a:bb:12:2e:15:12:09:7e:
b9:6b:01:d4:b8:29:f5:06:2d:6b:47:a1:dd:47:3c:
be:60:3b:02:c1:8c:67:ed:78:33:68:3f:2e:6a:9c:
28:51:1a:53:a3:b4:9e:f3:68:20:e8:11:6d:7c:08:
f4:2c:f5:a1:d7:b4:db:ea:27:55:32:3f:cb:b1:85:
83:bb:54:12:77:62:6d:36:c2:8e:6d:49:0a:d3:16:
d7:de:67:a7:3d:66:8b:b8:f6:6a:3e:d6:c1:d7:82:
5c:5e:a1:5b:88:8e:e2:c5:4f:97:57:14:64:9c:bb:
54:4c:77:4f:5e:a0:0f:de:a1:db:5a:af:59:e5:fd:
2b:88:b1:3f:b6:dd:37:90:dd:88:2c:4f:74:83:b5:
7e:be:49:2d:0f:93:47:0c:5e:98:da:86:3c:36:ca:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:47:18:BF:67:03:69:8B:3C:96:5A:0B:58:FC:1A:83:07:33:11
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:56:3b:cb:fb:ae:18:76:6e:16:9c:42:fe:4b:ec:77:52:
3c:9e:27:41:39:11:31:7a:b0:4f:48:6c:86:ad:1b:c6:17:44:
16:9c:26:1d:87:c0:54:31:f8:db:24:73:38:7c:8c:2f:a4:2d:
a4:64:e8:56:dc:60:12:bb:2d:16:7b:5c:aa:1e:fd:20:90:bf:
d9:be:d6:94:20:cc:bf:40:20:9f:e3:7d:66:95:13:f2:38:4d:
f6:04:af:af:23:57:8e:e5:ad:bf:43:4d:0b:8d:20:a0:47:e0:
30:95:90:b1:6a:a0:b9:3f:37:e5:6e:ab:c5:c6:7b:7c:a8:b7:
d0:bc:f0:e9:3c:9f:fb:d5:27:ff:46:4c:31:57:b9:65:25:6f:
dc:1a:fa:d9:15:e1:1f:b7:73:6a:7f:fd:c7:0d:0a:0c:2b:5c:
4b:02:a1:a7:92:d2:2a:4b:2f:4b:d0:36:47:c9:d0:00:9c:20:
43:5d:53:b6:69:85:18:0e:f4:a9:50:cc:ca:07:23:5a:bd:4b:
7e:18:b1:89:c4:69:59:b0:2a:ba:5f:76:a2:75:22:f5:a0:32:
d4:4e:77:d1:d1:14:a9:80:e1:c9:41:57:da:10:81:1b:d0:29:
82:91:8c:1b:6c:cc:d8:80:82:be:5a:ed:07:6f:60:22:a1:f2:
22:9a:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:00 2026 by rpki-client