
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier: 2oP1BPVfA5efLNR4C0VPL8HY39S/hSC0TYsajHIOFd4=
Subject key identifier: 72:84:86:BB:D5:D5:01:09:16:FF:2D:03:D4:B3:24:98:84:89:06:E8
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number: 04F2
Signing time: Tue 22 Sep 2026 23:20:12 +0000
Manifest this update: Tue 22 Sep 2026 23:20:11 +0000
Manifest next update: Tue 29 Sep 2026 23:20:11 +0000
Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: zksO1EALFp27lRmfIareGVRTtiu44CI1JGUdLHA+Yl0=)
2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: wNCrjn2erftwz/bIA2AQkyoUF1YD/PXyJopCVrCD0lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Validity
Not Before: Sep 22 23:20:11 2026 GMT
Not After : Sep 29 23:20:11 2026 GMT
Subject: CN=6ab30d2b-b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:8e:36:01:09:bb:5c:84:1c:26:ec:8e:9d:
7f:87:d6:40:cd:23:84:bb:14:ef:8c:06:61:c0:9e:
47:10:45:75:cb:ae:b3:d7:cc:a1:40:d2:4d:ac:b1:
d5:a5:77:03:88:50:8b:60:8a:b7:d6:63:f9:43:fd:
a6:be:62:d8:7e:c4:d3:06:4a:0a:2d:50:fd:89:4f:
9b:62:77:85:1b:8b:04:f9:ad:ff:6c:3c:bb:ef:e5:
79:23:17:91:70:92:91:a8:9e:15:4b:70:68:41:0d:
40:6f:14:64:18:80:37:9b:89:1d:1a:4b:51:28:62:
54:fb:ae:9a:1a:48:36:5a:60:5b:09:54:a4:1e:00:
e2:18:de:eb:16:a0:0d:b2:2d:c8:49:94:f9:f8:d7:
09:16:6a:83:eb:ec:b8:2f:bc:52:10:84:eb:09:d2:
ba:c1:87:e7:bf:bf:88:e7:33:1d:84:58:9e:4e:4f:
ea:9b:2c:72:92:55:de:61:b5:a1:bd:26:da:57:1d:
f0:e1:bc:13:6e:13:21:25:69:f8:4e:e4:32:17:b1:
02:a7:50:2f:a5:f0:75:35:5c:82:74:d5:5b:d9:63:
d5:e9:44:7a:b3:e7:b3:00:c2:db:1b:e1:c8:f4:8e:
c0:f4:ce:42:c2:9e:b0:dc:dd:2c:3d:8b:51:c8:72:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:86:BB:D5:D5:01:09:16:FF:2D:03:D4:B3:24:98:84:89:06:E8
X509v3 Authority Key Identifier:
keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:6c:aa:67:81:a0:ed:80:3a:52:99:25:37:3e:dd:78:0d:
8e:e5:3c:33:68:8a:d8:83:ee:94:57:ac:ee:a6:08:15:86:36:
be:f8:3a:ed:f2:95:e2:0d:23:89:5a:da:ce:c4:9a:a3:be:fe:
07:25:b7:8a:5f:f9:11:31:ab:f7:c0:89:09:be:a8:32:91:e6:
97:c5:f7:14:5c:01:cd:7c:d5:55:58:f8:8a:aa:b8:69:77:2f:
37:d1:71:fa:f4:1f:c8:67:b0:71:7b:b0:fd:84:3f:ce:13:4c:
5c:e4:ea:a3:eb:e5:69:7c:01:80:54:51:15:34:7e:c3:a8:23:
0b:0e:f5:80:d0:22:be:85:e5:f9:5d:f9:0c:80:46:5b:bd:c4:
f6:97:9d:99:c8:d6:4b:b6:38:90:05:34:e9:4f:c2:9c:bd:d5:
cd:c5:7e:97:cd:c1:2c:8d:e5:6b:cb:22:5d:e9:7c:57:e0:5f:
37:48:15:b2:1a:90:6a:85:9e:c3:47:ab:bf:6b:29:5c:a8:56:
fa:53:3e:f4:67:be:a8:1b:ac:f8:3d:24:47:3d:90:68:aa:b7:
85:e9:10:34:31:3b:eb:f1:78:ef:e2:aa:a4:b8:95:8f:71:ec:
39:6a:dd:b7:37:94:6a:50:9f:4c:cc:0c:ab:11:77:8d:2e:e3:
47:0d:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:48 2026 by rpki-client