
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File: sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier: bo+hpXeI0bKkAZZY5Z1o+iLOjpwNlV4ZCCVBYVqQrNc=
Subject key identifier: BC:3C:33:CC:26:10:14:0F:83:55:FE:65:8C:6B:28:4E:29:9D:5D:B0
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer: /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number: 77
Signing time: Mon 27 Jul 2026 10:01:58 +0000
Manifest this update: Mon 27 Jul 2026 10:01:57 +0000
Manifest next update: Mon 03 Aug 2026 10:01:57 +0000
Files and hashes: 1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: JTaJHQm1RQ9hxnuIkh4rWg/RQEFfieoB7Zk10PmASes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Validity
Not Before: Jul 27 10:01:57 2026 GMT
Not After : Aug 3 10:01:57 2026 GMT
Subject: CN=6a672c95-b920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:97:b2:25:e3:04:9c:97:00:1c:d9:c3:77:
f9:e5:ea:72:13:31:ed:21:07:2a:3e:a5:5d:75:ad:
14:fe:34:07:81:d8:6c:67:83:95:61:aa:ec:0e:b0:
c6:50:e6:3c:f5:98:7f:47:72:aa:d5:ca:a9:a0:c0:
33:11:87:20:97:15:fc:c2:7e:9d:32:4a:4f:79:49:
a7:fe:41:ba:b0:9b:6d:0d:90:1b:11:95:d0:e3:81:
b3:46:59:be:3d:88:4c:55:11:de:92:ca:67:f4:50:
79:0b:0d:09:c1:a4:71:93:c8:a6:d8:0c:9b:b1:20:
30:46:01:20:3f:d2:39:ee:22:58:11:6d:e6:75:b5:
40:de:eb:ae:cd:6e:02:78:17:cb:85:d6:bd:88:40:
27:6f:99:5f:07:88:c4:a4:d2:48:4d:63:7f:71:3a:
56:d7:f0:08:22:7f:f9:6f:cb:28:05:7a:d5:92:53:
b8:a6:2e:d2:20:3a:77:5a:8b:00:52:c7:d7:4c:1a:
e0:33:2d:87:47:69:f2:a4:0f:1a:13:c2:f5:60:53:
c8:0d:d2:a5:a9:9d:94:a7:4a:68:f2:5d:19:84:3b:
a0:e6:5b:4a:37:f0:a0:67:6b:6f:a5:55:3d:e3:29:
1c:45:07:be:f8:cd:a9:89:e7:1e:79:51:63:22:b3:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:33:CC:26:10:14:0F:83:55:FE:65:8C:6B:28:4E:29:9D:5D:B0
X509v3 Authority Key Identifier:
keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e4:47:72:09:81:93:08:19:cd:50:eb:39:4d:17:35:30:8e:
56:08:78:5c:ce:02:b5:a1:8f:03:4b:d3:0b:3c:ef:c3:a6:05:
82:db:b6:53:34:39:e8:a6:cc:76:6d:69:ef:8d:d5:2a:46:a7:
15:cb:78:8d:aa:e9:01:cd:b6:d0:11:6a:d8:fd:61:0b:33:1f:
1b:2f:04:ee:0d:ab:a1:9c:be:64:72:bd:29:87:a3:ae:82:62:
ab:31:fe:95:0a:c6:b6:8a:75:0a:ee:60:d9:02:70:71:5f:4b:
cb:4c:9d:74:97:71:33:73:87:31:c5:b7:3b:41:33:80:c7:c6:
f6:0a:21:9b:ff:99:da:92:09:9c:42:90:b5:32:5f:11:88:7c:
94:bf:e8:9f:db:54:89:52:88:a0:4a:8e:5c:a4:b6:25:35:43:
7c:9a:cf:db:7d:55:73:8f:8f:f2:8a:d8:bf:69:1f:37:5d:9d:
71:47:de:34:8a:9b:13:2d:05:a5:a9:2e:cc:f9:71:35:58:f0:
02:85:b8:43:3e:20:03:d8:fe:0c:76:cb:1f:33:34:6b:2c:1a:
14:b6:f8:68:9f:d7:92:c0:ba:dc:0e:c0:5c:3e:7d:87:1d:2f:
4e:8d:44:8c:10:86:bc:25:ae:7f:fb:2c:45:a6:a0:4e:c1:bc:
d3:ec:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:54 2026 by rpki-client