
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json)
Hash identifier: 99w0a7XgdDdGKmp1vXK+FwPptdIorWriAnteAhfmp4Q=
Subject key identifier: 9C:E1:7A:54:10:3E:C6:99:57:68:BF:26:C5:0B:DB:13:7F:9E:FA:90
Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
Manifest number: 02A7
Signing time: Mon 27 Jul 2026 02:52:16 +0000
Manifest this update: Mon 27 Jul 2026 02:52:15 +0000
Manifest next update: Mon 03 Aug 2026 02:52:15 +0000
Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: 6qJIU5UIOZSoai5fcffru4aVFN2Vu00LOnf4hQk9PCw=)
2: CA181F42791211ED9D926781C4F9AE02.roa (hash: yfzx4N8e3wjfsr320pF+EFitreK6BjvCPZ0wmG/4y/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl
rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Validity
Not Before: Jul 27 02:52:15 2026 GMT
Not After : Aug 3 02:52:15 2026 GMT
Subject: CN=6a66c7e0-4afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:83:03:d8:20:9b:f3:b2:14:9b:93:be:c9:
22:55:31:b0:11:8e:bf:6c:f7:ad:9b:83:91:ec:ce:
1d:44:6d:1b:06:e2:39:47:0d:81:f1:ad:16:15:13:
a3:29:1e:13:71:2d:27:4f:4a:04:16:a1:d9:fe:5c:
1f:00:19:5a:ab:66:0a:60:59:f0:5c:f0:4d:0a:e0:
fc:fb:7e:eb:70:f2:d7:cf:96:bd:a5:21:e6:cb:38:
14:a6:04:f3:e0:8d:16:13:a7:7e:b5:ab:4d:84:9d:
f9:7b:02:90:76:c9:59:77:a3:71:ed:11:24:42:0f:
ad:c5:b2:f8:47:66:ab:69:0d:c8:8d:fc:9b:a8:6d:
8e:e7:ba:fb:9d:01:2f:08:44:1f:eb:ca:3c:1e:7b:
22:6f:37:41:18:df:37:61:21:80:6a:3d:37:25:ab:
85:fc:df:3e:05:45:f7:d3:68:ea:6e:af:b3:9d:28:
b2:e8:bd:a5:dc:87:4e:57:36:ab:28:34:35:a0:c0:
e6:9c:25:c8:42:5d:ae:2d:75:b2:3d:28:6b:c5:4a:
e1:31:e9:ab:68:cd:84:1f:d9:db:ab:95:df:21:be:
6e:43:d2:fb:42:b4:f7:67:ad:e7:40:1a:57:cc:9b:
1a:22:36:c0:7a:2e:6a:4f:14:9c:99:4c:30:95:86:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:7A:54:10:3E:C6:99:57:68:BF:26:C5:0B:DB:13:7F:9E:FA:90
X509v3 Authority Key Identifier:
keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:8e:42:21:d5:75:4a:65:ea:be:e4:28:7f:47:0e:c3:52:
95:4f:57:ea:88:fe:24:89:42:48:c6:6c:b5:0d:06:bf:6a:7d:
3d:62:62:7a:ba:e5:76:1b:12:40:11:0d:ed:ad:a9:c6:87:28:
fa:52:c7:fb:28:8d:2f:d2:59:fe:9c:e7:a8:ed:83:82:19:02:
28:98:99:20:3f:98:6e:8b:61:d7:ba:cd:f7:41:ec:ea:6c:c4:
f3:8f:1b:b6:59:f8:28:07:79:49:93:81:ee:ba:c2:2b:e5:b1:
e0:ee:41:91:a5:c7:22:20:c5:f0:fb:79:f4:b6:75:bc:02:50:
8b:7b:02:0b:86:5e:47:26:51:ff:0d:e7:d4:94:23:3e:6e:f3:
c0:90:64:e9:51:3d:b5:98:1b:15:72:fc:73:76:bd:2b:45:07:
b5:35:c1:57:06:83:43:08:d8:8b:6f:2c:40:65:72:61:51:e0:
76:94:78:da:4c:0d:32:08:ca:0a:c1:18:9b:19:12:09:f0:50:
9e:e9:44:40:f2:7a:39:3c:c0:af:00:82:75:cd:38:1f:33:c1:
d7:83:9f:33:28:dd:44:53:40:91:ad:36:86:ac:f6:f9:ce:2f:
87:f6:47:f8:1a:86:c2:fa:8e:54:4b:f6:20:83:f0:4f:c4:73:
b6:0b:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:16 2026 by rpki-client