
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json)
Hash identifier: aiJTE9a6FIN0sEaDDu5UwsamSPsZvK3IgYyuxD51v8Q=
Subject key identifier: 4E:6C:9D:78:F4:93:BF:01:B3:5F:BF:A9:66:E2:1D:63:A7:80:1F:29
Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67
Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
Manifest number: 0181
Signing time: Mon 27 Jul 2026 06:23:34 +0000
Manifest this update: Mon 27 Jul 2026 06:23:33 +0000
Manifest next update: Mon 03 Aug 2026 06:23:33 +0000
Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: Pnkse/zv6BDS1ejbw9wvWThylyBB0C8ovQ4iLAbzXa0=)
2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: cNAcurCYy0P+QSl+0YriT9aaRG0S6RhW4FrfjPuaqQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl
rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
Validity
Not Before: Jul 27 06:23:33 2026 GMT
Not After : Aug 3 06:23:33 2026 GMT
Subject: CN=6a66f966-1529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:a5:96:e7:1d:9b:b1:c4:82:f1:1d:1d:a1:
9e:54:53:e5:5b:53:84:27:37:95:0d:20:04:0b:70:
3c:43:66:64:b9:84:3c:77:d2:34:75:95:b6:6a:ca:
f2:7c:1c:f8:78:cf:6e:16:e5:89:6f:72:d1:ae:ec:
f0:38:72:22:17:83:61:bb:5d:fa:9e:55:0c:f8:6f:
65:b4:4e:63:5f:0d:0c:a2:63:98:e0:a1:39:2c:14:
57:d9:b1:60:d8:70:8f:93:da:4d:cf:dc:1f:8b:33:
43:6f:91:21:81:06:bf:ac:01:42:83:60:33:0b:d6:
72:a2:52:c9:f7:9b:a2:84:72:4f:e1:7b:d5:ab:10:
28:6a:c3:99:7f:4e:b7:62:67:2e:a2:58:20:2f:6d:
97:d0:8d:81:19:07:6f:5e:a6:95:8e:e3:c2:3d:a1:
92:76:00:91:a1:a8:be:d5:48:bb:a9:d8:49:40:25:
51:a8:61:31:21:2b:a7:c6:38:59:4e:3b:ee:7f:52:
15:a7:d4:39:47:a8:8d:b5:92:ed:a1:ff:da:07:72:
0f:37:94:06:df:9b:f7:ad:fb:4a:a6:a1:b7:a7:e0:
cb:60:9a:39:f5:f9:f1:c6:29:f0:fd:cf:d8:a7:3d:
99:81:8d:fb:94:a9:5b:11:5e:85:99:ee:21:09:b8:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:9D:78:F4:93:BF:01:B3:5F:BF:A9:66:E2:1D:63:A7:80:1F:29
X509v3 Authority Key Identifier:
keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:b5:34:4c:0b:0e:f7:8e:09:95:06:0d:27:68:03:7b:bc:
79:e0:5f:13:a2:97:a1:c5:5d:a9:b2:d5:25:c3:32:47:2f:04:
1a:94:9f:5b:7b:8b:6d:e2:c2:39:88:71:fb:19:c1:e8:7f:10:
a9:73:40:b9:1b:72:7e:86:b3:bb:fc:7a:44:71:e7:0f:b8:de:
83:19:c0:bd:d9:27:fe:7a:d8:22:e9:f9:e8:b3:db:d1:7c:fc:
1b:ac:b1:77:3d:4c:02:ad:48:bf:cb:5b:be:62:62:c6:7e:a4:
a2:7b:2a:42:38:e5:e2:22:d2:87:39:d0:60:1f:9c:1d:0f:34:
83:be:b3:5d:2e:4f:cd:f2:a0:3b:e7:89:52:10:af:fe:43:2d:
2a:c8:73:3f:9e:8a:5f:c9:02:e2:bc:29:e7:c5:ee:d4:6e:5e:
62:17:89:e6:34:d7:47:79:df:bc:ce:a8:63:25:52:cb:56:1c:
75:5c:fd:87:69:20:da:95:d5:6a:92:00:63:34:c5:7c:cb:2b:
0c:7c:42:20:a2:ee:09:71:aa:46:da:67:96:35:5d:59:45:09:
fa:99:75:18:94:51:c0:2d:e2:19:3b:2c:4a:c6:a8:0c:63:ad:
4a:80:69:f8:7f:0f:1a:a9:10:68:09:18:e6:2a:fe:12:f1:55:
e1:53:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:44 2026 by rpki-client