
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier: LqWa4pPULXAAc5E6VflAXT+T/drcjAVRla5rc9hyreA=
Subject key identifier: 2C:99:AF:98:82:94:F3:B2:3F:F6:AD:F4:94:78:16:95:76:9E:58:B0
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 0713
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number: 06EC
Signing time: Tue 12 May 2026 22:19:28 +0000
Manifest this update: Tue 12 May 2026 22:19:27 +0000
Manifest next update: Tue 19 May 2026 22:19:27 +0000
Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: T147CKmY4jJM/JB8h9sRog9LMhY5zQmPEOAoFqHZ068=)
2: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=)
3: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=)
4: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Validity
Not Before: May 12 22:19:27 2026 GMT
Not After : May 19 22:19:27 2026 GMT
Subject: CN=6a03a770-291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:51:55:13:b2:4a:b6:9b:cd:c3:1c:41:6e:
4e:9a:93:76:a7:5f:f1:61:97:ca:c6:e7:9f:37:d6:
d8:1d:d5:40:38:72:28:91:c8:a8:5a:1d:70:10:4c:
8f:8b:49:b2:07:59:fe:dc:8c:a4:c6:bf:44:06:cf:
16:04:87:d2:6e:fc:ca:0e:c7:e1:df:49:85:47:ca:
a0:77:dc:7c:1b:89:3d:b5:c4:bc:90:55:a1:ab:08:
4a:e5:c0:5b:b9:b7:81:f0:cc:25:ba:cd:c7:82:29:
5c:85:4c:de:9d:78:f1:18:28:1d:3b:6a:63:7a:79:
27:f3:47:f7:8f:1a:87:84:d2:ed:55:64:76:52:43:
43:50:5c:d2:c3:71:14:8a:ca:3a:38:b6:3c:fd:7a:
3e:23:ec:8d:51:13:4b:98:25:4e:0a:bc:03:e6:5e:
a2:96:f4:88:e5:a5:76:1d:60:a0:27:b9:ed:94:75:
c4:ad:6c:cb:59:41:30:36:f1:15:80:0e:22:82:df:
06:ab:3e:e1:1d:8b:43:2e:d9:cd:ea:f7:c2:a1:71:
bd:39:5b:89:3b:3a:5e:0d:fa:e7:4d:cb:8b:7f:83:
6e:c2:15:87:a2:e8:8e:50:e6:3b:7c:e0:8d:a4:3d:
ef:fd:f2:c9:91:ab:6d:ce:56:82:74:51:84:a6:be:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:AF:98:82:94:F3:B2:3F:F6:AD:F4:94:78:16:95:76:9E:58:B0
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:95:17:c2:f6:5d:ed:4e:5f:7d:28:39:3c:e9:e0:22:74:f2:
34:c7:52:7b:be:7e:0a:89:38:b1:a6:24:44:40:c0:94:a1:d9:
d1:94:47:2a:15:35:9d:95:dd:94:3f:88:36:f0:1f:8d:35:64:
00:cc:df:c8:48:c4:cf:6e:67:cc:3b:b7:1e:d8:f3:c7:31:ee:
04:cb:8b:94:56:22:88:38:c4:56:37:51:0d:f4:6b:67:90:f9:
5f:7c:44:d5:a0:79:2b:29:85:df:8a:b0:20:8f:fd:19:dc:6a:
26:c0:30:5d:7c:62:8c:80:d1:d2:8b:0f:00:42:c0:a4:3c:30:
39:22:5f:78:a3:1e:75:0a:ac:ee:ee:17:c7:e1:bd:90:70:85:
c5:0e:2b:35:6c:92:ec:40:bb:a1:3a:80:b2:ec:59:4a:3f:50:
c6:09:d5:1d:d6:1a:d9:fc:61:0d:68:c7:d7:a5:a3:c7:77:9d:
06:64:cc:a0:22:e6:b6:cf:f4:4f:76:f7:dd:1c:7d:83:f9:c6:
80:38:dc:9a:94:9e:b1:ab:09:40:88:99:0a:bb:e8:02:16:c5:
0f:db:37:1c:8b:de:14:34:10:7a:d6:0a:db:57:80:7d:ea:b3:
56:0f:45:53:0f:04:ac:df:41:96:81:9f:7b:8e:c9:b7:b1:fe:
69:8a:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:49 2026 by rpki-client