
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: 5LX04+aL/NJpeMWWlz4sm1c8CJPSh5f+T7oBEHjFtAU=
Subject key identifier: 0A:E1:8A:82:F0:81:62:9E:A9:D5:30:B2:7C:4B:15:8F:A4:C2:C3:5E
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0AA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0A9B
Signing time: Tue 28 Jul 2026 19:51:16 +0000
Manifest this update: Tue 28 Jul 2026 19:51:16 +0000
Manifest next update: Tue 04 Aug 2026 19:51:16 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: vrYMIuAYdnWaUE+U/t2I7keyjFrQeXr+xNK/YqZZrR0=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725 (0xaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Jul 28 19:51:16 2026 GMT
Not After : Aug 4 19:51:16 2026 GMT
Subject: CN=6a690834-260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:1e:37:cd:f3:3d:23:65:26:8a:a9:0e:ad:
9c:48:dd:23:db:8c:53:24:ce:fe:87:66:9e:b3:f0:
5c:f0:47:ba:de:13:1b:0f:fa:27:4d:37:08:2b:eb:
8c:24:0e:0e:64:89:11:81:c9:85:2c:fb:95:73:d9:
d8:12:a7:a8:ff:21:e1:28:f6:6d:3c:2a:26:1c:65:
0e:b9:94:8a:0e:41:c4:6d:13:48:d5:e5:43:1e:ff:
7f:85:e9:6e:22:80:31:26:45:7f:6f:d6:c5:a2:0d:
87:3d:d0:3f:3c:a2:db:42:e9:e7:e4:40:7d:e2:a1:
2c:17:18:08:4e:0b:9b:dd:2f:d9:7b:93:c8:ab:fe:
39:e3:5b:33:32:28:1b:0b:e3:cc:48:36:13:4a:ff:
55:c3:92:37:a2:64:84:9a:11:05:b3:21:b3:a4:82:
42:01:da:1a:53:92:ef:34:9c:68:9d:5b:92:3f:4e:
9b:8a:6c:6f:dd:e8:fe:b2:6d:ba:a4:97:a8:88:78:
27:99:ef:56:15:da:59:61:82:eb:5a:ba:9b:6b:29:
0a:cc:50:34:ee:51:6a:1d:3d:10:88:98:40:30:cc:
6b:ff:ea:3f:8d:fd:c1:8b:25:a9:12:66:7f:f5:c1:
ce:40:20:9c:08:a3:8f:96:41:99:12:83:dc:2d:ae:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:8A:82:F0:81:62:9E:A9:D5:30:B2:7C:4B:15:8F:A4:C2:C3:5E
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:81:74:8f:d9:34:76:b3:15:b1:1f:97:c4:15:1c:98:c3:e1:
4b:14:a2:5a:bb:26:9d:41:39:9c:a6:78:03:e2:b9:32:46:ff:
ad:c1:bc:e3:b0:bf:80:ac:a3:a0:36:4f:45:22:e9:4a:1b:49:
d5:ee:7b:6d:07:1e:fd:d3:6b:b6:ce:a0:0d:4f:68:2a:d8:a6:
2b:2a:d8:f5:33:79:44:80:e1:df:96:4d:60:3d:40:65:2f:c3:
5c:52:dd:65:c4:e2:e8:3f:50:38:16:43:fc:24:75:57:51:a1:
f6:67:1a:f1:95:29:40:79:6a:c7:82:f8:80:4e:0a:2f:9a:6a:
f6:5d:73:c5:0a:c9:a7:ad:a3:ba:76:5e:a9:a2:b1:25:38:a8:
83:43:48:31:0c:24:a4:bf:76:31:62:05:b1:4c:7d:78:29:41:
04:96:d4:99:73:64:08:98:f9:2b:50:cf:0f:65:1a:06:98:17:
97:be:c2:a2:5e:85:76:93:fa:a2:d8:cd:c4:42:e9:4d:de:ca:
5e:f7:79:82:a8:3c:05:3b:4b:22:38:ba:74:97:38:94:1f:c7:
95:65:c5:27:ac:1c:f5:c6:90:67:d3:55:79:50:a1:5c:8e:7f:
5d:d0:62:6e:fd:56:a6:16:d9:1f:2c:86:bf:9b:11:3f:7c:5d:
a4:1a:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:58:49 2026 by rpki-client