
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json)
Hash identifier: XjSE4r3gYPGL/j3EV9r3tRiej6wZLlVjjhN8U+1SrSI=
Subject key identifier: 02:03:4E:DE:40:C5:EE:96:09:F9:12:1E:0E:EF:E2:D2:A7:12:0E:3A
Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
Manifest number: 0237
Signing time: Mon 27 Jul 2026 04:05:25 +0000
Manifest this update: Mon 27 Jul 2026 04:05:25 +0000
Manifest next update: Mon 03 Aug 2026 04:05:25 +0000
Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: AfqCOuk+OQViZJVtTQLgsI4STrFt7x/AwJC5AhsGj9Y=)
2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: bopl7UbV+kveTfFUss6QZfXwjAk3OnM3ua/GuA1yHJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Validity
Not Before: Jul 27 04:05:25 2026 GMT
Not After : Aug 3 04:05:25 2026 GMT
Subject: CN=6a66d905-b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:26:9c:d1:5c:4c:5b:80:88:22:51:e1:38:
2b:03:95:af:a9:55:c3:ea:be:4a:5d:30:fc:3a:6f:
31:9e:2e:12:04:b0:df:89:20:d7:7a:f7:5b:b5:57:
cf:2d:dc:2a:e1:8a:57:bf:57:95:8f:74:06:3f:f9:
85:bb:c7:a8:96:e2:36:5d:00:76:68:f2:f9:24:53:
aa:13:6c:cf:68:e2:42:d5:ac:38:69:0e:1f:0f:dc:
a2:dc:5d:8e:b7:49:6d:11:b7:1b:86:04:5b:05:96:
ae:7e:c7:4a:8b:b1:af:4c:2c:16:1c:dc:fa:bf:f8:
9c:d5:2b:37:18:3a:19:c4:ed:49:81:d9:68:eb:b1:
99:13:f9:09:47:cd:ce:17:fb:89:4b:c4:f5:b0:1d:
28:f0:47:f7:d2:58:12:35:c6:1c:f4:ef:02:0c:39:
6d:76:8c:6a:b9:cd:3a:cc:35:eb:9c:0b:b4:b9:32:
4d:fc:70:1d:b4:16:37:ab:db:55:c7:1d:73:fc:6b:
54:2c:f1:07:e7:7e:00:54:81:1f:69:07:2e:6d:2e:
10:81:e7:95:bf:7d:82:ad:b2:63:8f:70:5f:67:e5:
e3:f8:36:9c:a2:c7:e6:7c:37:49:00:76:92:4f:1f:
98:10:e4:af:e5:e9:d9:58:97:ca:37:4c:a2:ae:f9:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:4E:DE:40:C5:EE:96:09:F9:12:1E:0E:EF:E2:D2:A7:12:0E:3A
X509v3 Authority Key Identifier:
keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:7c:4f:71:e5:9a:ba:c2:0c:16:45:d3:7e:ab:50:d8:1a:
5d:22:57:f8:a7:49:13:c2:b4:13:6c:51:26:76:14:a3:45:b5:
9d:40:13:64:62:1c:06:b7:e7:be:61:6e:ee:9b:bd:82:49:64:
79:9a:41:83:99:2c:24:3b:31:37:36:a3:f3:d4:cf:c5:92:f2:
5d:ff:c0:11:0a:2f:0a:84:67:25:3a:ee:d7:42:ef:e0:43:5e:
e8:5e:69:64:ea:82:53:64:18:3f:9f:8b:1d:a1:19:ae:37:b3:
6d:79:7e:1f:79:38:1b:0b:49:56:98:71:ad:2a:ec:dd:6f:82:
16:1c:18:6d:48:96:b2:f6:48:9c:2e:74:96:36:54:ab:7b:5e:
d8:c4:87:e4:b9:1e:36:88:9d:d9:dc:e5:85:8a:48:59:7d:c0:
35:72:9d:96:66:90:0e:18:63:16:f5:f4:5a:f7:db:79:0b:5f:
f3:10:6a:6f:c8:7e:1d:fb:5b:24:3d:20:67:f6:b9:15:e4:91:
fb:20:b8:15:58:ca:c3:20:ae:e1:1e:a6:6b:66:a0:3c:5a:c0:
23:01:a3:39:0f:ca:90:59:75:0d:47:f2:f5:47:f2:32:d0:9d:
50:a0:23:37:40:5b:70:f6:70:99:28:9d:e8:3f:54:0f:dd:57:
83:52:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:27:01 2026 by rpki-client