
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json)
Hash identifier: 5ppgVyySyqF88snxz5+HV7gqtXMflrpbUiRUaM/6D3g=
Subject key identifier: 4C:23:04:FA:EC:23:62:57:BB:C9:50:05:54:44:10:00:0F:28:0D:55
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
Manifest number: 01B4
Signing time: Thu 23 Jul 2026 05:34:42 +0000
Manifest this update: Thu 23 Jul 2026 05:34:42 +0000
Manifest next update: Thu 30 Jul 2026 05:34:42 +0000
Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: DtqA7xgvs95b7QapIdSB7vb/dK6V9bYsNQEuB2uptIo=)
2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: 5vYLI/5h54DHiQvaNO6Px4T+Fes1GIODe0Co3IFIXFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Validity
Not Before: Jul 23 05:34:42 2026 GMT
Not After : Jul 30 05:34:42 2026 GMT
Subject: CN=6a61a7f2-a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:cf:c8:cd:2f:ae:e0:7d:4a:58:1e:53:24:
a3:71:d9:c1:d1:be:33:18:b0:f4:8c:0b:21:66:b5:
8a:ac:55:8d:4b:a9:f3:66:2c:20:d8:7e:67:91:83:
b0:78:40:16:8f:e0:65:20:01:40:bd:57:d3:96:82:
b0:b9:0c:df:da:16:05:59:05:75:fe:c3:21:bd:91:
81:d6:cb:53:3b:3e:9a:1a:5b:48:ef:f8:0c:de:77:
cc:d8:98:9b:62:03:e1:b1:15:ac:4c:ee:03:55:9b:
cd:d8:50:f6:59:4d:50:be:0b:22:50:73:c6:7a:13:
6c:bf:b3:20:86:53:b5:dd:62:02:24:c8:32:95:23:
d2:0c:5a:9d:89:d9:6c:c6:b4:49:bb:fe:a3:63:bc:
6e:0c:16:d2:9c:41:80:1b:70:56:6b:6c:49:bb:98:
b5:27:13:ea:10:db:1f:dd:18:b0:1c:28:47:04:31:
b8:f4:db:a2:bd:ce:4b:ed:ed:a8:5a:d9:c0:da:a8:
ec:63:91:dc:f8:9f:71:96:d5:12:1f:02:14:b2:f3:
3f:6f:93:05:c4:da:a8:25:37:d2:69:fe:54:b5:a5:
84:e2:72:fc:3b:25:ed:09:3f:ec:61:7d:21:09:89:
0b:80:30:8f:70:d5:ec:ca:94:16:2a:f8:ad:47:0e:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:04:FA:EC:23:62:57:BB:C9:50:05:54:44:10:00:0F:28:0D:55
X509v3 Authority Key Identifier:
keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:58:3b:bd:d5:74:7b:2a:9e:57:8a:eb:6d:d0:67:de:cb:
f2:23:f7:66:c8:93:64:18:fc:b1:1a:8e:51:93:ad:8d:b6:e5:
08:4f:61:2d:68:fc:47:11:b6:65:f8:44:26:d7:1c:d2:6c:3d:
ba:2a:e7:bc:5a:05:21:84:ff:56:c4:9d:94:2a:ec:b4:d4:1f:
ab:dd:e4:58:73:c3:f6:a3:5d:99:92:08:5c:0a:10:70:77:73:
68:52:0b:56:f8:1b:dc:65:ed:bd:e6:e1:97:64:23:e1:ff:13:
e7:40:42:8d:24:c9:d9:04:d0:3d:58:ed:1d:52:a6:c6:49:59:
f0:e0:a7:27:eb:0e:1a:5e:4a:54:5f:3d:14:11:57:93:f0:89:
1a:31:3b:85:51:c9:8d:a9:2e:12:73:ce:d7:4e:91:85:0f:a9:
55:9c:85:46:54:63:c1:ae:e3:d8:b3:be:3a:da:40:b5:7e:ce:
87:9a:bd:08:fd:62:6a:d8:e5:47:6c:69:26:5b:e2:f7:c2:4c:
f4:7b:d4:31:07:ad:03:27:aa:35:4a:11:a2:eb:e8:a7:e7:ad:
29:d5:fe:31:04:72:04:a4:7d:6b:95:57:bc:e7:ce:77:36:e1:
10:be:9b:38:1a:d7:3f:ac:c4:f4:9c:d0:21:51:e9:8f:bb:cb:
ac:ea:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:54 2026 by rpki-client