
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json)
Hash identifier: 2d+9+4KbFyxIPEoU5ZjerL9R3e7WTGxqsZoYOAbhN1Q=
Subject key identifier: 9D:FF:87:45:DE:5F:B3:AF:45:80:8A:7A:B3:E7:69:F2:86:48:B8:E6
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
Manifest number: 7A
Signing time: Mon 27 Jul 2026 08:19:57 +0000
Manifest this update: Mon 27 Jul 2026 08:19:57 +0000
Manifest next update: Mon 03 Aug 2026 08:19:57 +0000
Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: 3iksONixtDT5JNyavU8rO6z4+HfpSM1FrY7igqj2SbM=)
2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=)
3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Jul 27 08:19:57 2026 GMT
Not After : Aug 3 08:19:57 2026 GMT
Subject: CN=6a6714ad-165e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:27:8d:ad:f9:0b:74:2e:33:d0:09:5d:2e:
24:ce:ef:56:ff:2c:b9:8b:48:76:f6:d6:30:3d:93:
33:dd:76:48:f6:d8:67:34:ab:f6:9b:40:34:30:b6:
4d:ed:81:52:0a:22:4d:fd:0b:2e:dd:a9:a8:84:79:
79:1a:99:16:b6:72:52:dd:ad:be:76:d3:2e:a9:0e:
b4:84:1f:7a:f4:8e:b6:cf:4c:be:c2:ed:cc:06:fa:
dc:3e:7e:ec:30:22:01:6c:11:39:bb:75:04:79:8e:
ba:e9:b0:ae:8d:09:4e:bd:77:d1:1b:7d:04:9f:30:
7e:d6:e2:e2:85:c9:41:15:4a:4f:ee:9b:f6:67:45:
53:0c:09:8b:5c:06:99:f1:b2:b7:cc:96:8a:1f:09:
15:fc:9c:f2:68:85:0d:11:6a:00:ae:76:d7:a5:d2:
17:dc:21:66:bd:1d:3c:b1:12:22:d8:79:c5:64:2d:
4d:18:65:0d:81:f8:83:95:6f:0d:df:5c:60:a1:f2:
e5:e8:81:eb:0b:5d:1c:ee:9a:61:f4:bd:85:03:39:
c7:dd:34:8e:7d:1a:22:8a:ba:12:d1:dd:ba:e0:9c:
82:22:e8:f6:20:df:e2:df:ae:d4:b5:10:0f:76:d6:
84:56:46:0f:cc:39:42:0f:a0:1d:72:42:49:be:b0:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:87:45:DE:5F:B3:AF:45:80:8A:7A:B3:E7:69:F2:86:48:B8:E6
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2e:09:a0:1f:6b:3e:a2:5c:18:94:40:d9:85:1e:da:56:87:
97:11:34:5b:bc:2a:eb:0c:12:dc:4b:1d:3d:da:c4:f3:33:63:
e0:9a:e9:2b:8e:d7:5c:94:e6:ce:1d:bf:10:9d:5b:c5:f7:66:
ab:fc:36:80:9e:7d:70:91:ae:8e:a0:24:54:6a:71:f3:aa:8e:
73:41:b6:06:4c:97:91:4e:9b:c4:23:e2:a5:97:89:02:b1:90:
74:af:75:a4:a8:57:c4:ff:0d:a6:76:21:f1:4a:8c:bc:e9:59:
0c:ee:e5:b0:c7:7b:1e:80:23:e6:86:7f:36:29:92:9a:62:57:
73:44:d9:74:78:ea:9d:9d:75:73:ff:ae:62:fc:40:d3:99:b1:
86:e3:3f:0b:d1:0e:3f:a2:16:1f:0d:d1:ea:af:d1:13:68:be:
61:e1:3a:12:8a:49:43:bb:27:64:55:65:e1:3d:b1:d2:38:2b:
9f:b2:2b:74:34:38:16:ce:a9:36:1e:c3:ca:4e:7c:3b:c3:4c:
e0:58:8c:82:9d:80:f2:a2:42:3d:83:26:26:3e:d9:ae:04:25:
83:d6:78:1a:47:6d:f7:17:e4:2b:c7:dc:7e:41:a2:62:ba:46:
b7:43:4a:7b:d7:07:01:92:45:ab:19:c1:55:e5:9f:7f:ff:46:
7d:99:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:59 2026 by rpki-client