
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier: R9ah+zW1GPVy9/jJOKIGxwkWYiZhHRHbAf3PcIVOTXU=
Subject key identifier: 53:6B:5F:83:FB:F5:47:6F:1E:35:97:95:1B:26:47:67:59:2A:B2:51
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number: 72
Signing time: Mon 11 May 2026 07:57:13 +0000
Manifest this update: Mon 11 May 2026 07:57:12 +0000
Manifest next update: Mon 18 May 2026 07:57:12 +0000
Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: dBMwmipgG3ZBf0f5HWvbrXX5d0T7KluOMQXV8Jqw+E8=)
2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Validity
Not Before: May 11 07:57:12 2026 GMT
Not After : May 18 07:57:12 2026 GMT
Subject: CN=6a018bd9-f699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:8f:77:6d:87:18:9e:85:93:32:26:c5:56:
90:39:37:19:d4:dc:95:8a:42:a5:31:95:6f:08:61:
56:90:63:b0:43:b9:59:21:31:69:60:ca:d9:39:a4:
5b:d9:d8:43:a8:bd:10:90:80:8b:5b:30:55:67:8d:
5b:d5:15:96:63:f9:e7:0f:35:98:06:d3:e8:76:37:
17:fc:b4:03:8c:fc:3b:2d:3b:a4:14:b4:70:fd:09:
b9:90:88:42:93:99:f1:ad:3a:57:90:a7:af:44:a6:
f2:30:6e:c9:89:22:ca:c7:42:c3:0e:b8:59:46:32:
d5:4d:e8:3a:c5:75:1c:22:03:5b:8b:89:cb:30:ff:
a7:19:ef:20:5f:66:8f:4f:b6:c3:f8:b5:86:14:6f:
1f:af:41:e1:4f:7d:b8:c9:f7:33:bb:b3:3f:21:14:
de:0d:1d:6f:c0:27:f4:d1:61:5e:53:e7:2f:4a:e5:
91:e5:48:b1:e3:e7:72:32:dd:dd:24:d2:e3:e1:10:
77:b5:c3:ad:f4:6f:ce:70:33:43:97:22:19:08:ff:
d1:f9:dc:b9:1c:7b:0b:01:9c:12:3a:45:73:8c:ce:
4b:e4:b2:6f:ad:1b:a4:57:79:55:fe:88:ec:33:2c:
f6:5c:b6:64:66:2b:21:44:2e:e9:77:ad:76:76:d8:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:5F:83:FB:F5:47:6F:1E:35:97:95:1B:26:47:67:59:2A:B2:51
X509v3 Authority Key Identifier:
keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:66:7e:c0:2b:20:be:87:f2:fc:af:0e:4a:dc:25:3f:91:94:
f5:07:34:18:4a:a0:10:6f:06:76:2e:14:f9:fc:d0:2d:8a:39:
15:bf:58:64:8d:b5:a9:c3:3d:23:79:c0:c4:9b:d6:27:17:6e:
6f:b0:76:9a:15:6f:62:b1:b5:4f:0a:5d:27:e5:6b:f0:2c:70:
20:70:79:e5:c6:0c:3b:59:5d:c4:38:e6:3c:4c:de:1c:5c:2a:
ae:dc:57:6a:17:93:9a:34:9c:74:bc:b5:a2:fe:55:d9:7a:a7:
91:54:c0:56:07:83:5f:af:86:a6:90:7f:df:f6:ae:5c:c0:ce:
50:c0:19:ff:5f:ce:7b:54:a6:5d:c7:f5:da:04:df:9c:48:a3:
d7:aa:57:73:7d:35:55:23:43:93:c4:6f:3a:06:dc:ab:2d:58:
26:15:f8:70:72:5e:1c:98:32:98:b6:d1:ff:c2:35:26:03:4f:
91:80:53:1d:4d:2f:2e:51:88:8d:df:15:08:c4:19:c1:c0:8c:
78:a3:e6:14:73:ab:dc:ed:38:bc:60:ff:45:dd:6c:75:83:63:
fb:76:b9:e6:99:0f:c8:2c:30:67:68:1d:49:7c:95:3c:2a:0a:
e7:7a:16:fa:dd:56:e5:ef:73:1d:fe:9d:2c:2e:0c:bc:91:74:
82:49:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:28 2026 by rpki-client