
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json)
Hash identifier: 7Un3ocavIG4r2jCuNZlgluw17L/3pkXgxvY4L5+Z/kQ=
Subject key identifier: 27:CC:49:CF:90:75:BE:3B:01:39:95:D9:07:B0:6D:AB:4A:F9:A3:94
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 11FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
Manifest number: 11D6
Signing time: Tue 28 Jul 2026 17:16:14 +0000
Manifest this update: Tue 28 Jul 2026 17:16:14 +0000
Manifest next update: Tue 04 Aug 2026 17:16:14 +0000
Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: KVQUhOLv/GnqKlJnfn3GVLdPN7FqP9MeqM1LtCA1QeM=)
2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=)
3: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=)
4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=)
5: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4603 (0x11fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Jul 28 17:16:14 2026 GMT
Not After : Aug 4 17:16:14 2026 GMT
Subject: CN=6a68e3de-5df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:eb:ba:3b:75:60:3f:90:aa:f8:6e:07:30:
77:f8:84:7f:31:e9:74:cf:b2:ce:e6:4d:79:50:0c:
e3:65:8a:1c:34:b5:1c:9c:a1:3f:c2:32:43:35:fa:
17:be:c7:1c:f6:fa:b0:d0:eb:3b:0c:aa:1e:39:96:
80:95:cd:68:12:bf:e1:45:2a:f1:a4:e7:4a:5b:f9:
0c:b7:d8:53:da:ff:1e:27:0f:14:59:e0:b3:d8:14:
98:1d:cc:2d:41:11:25:70:27:82:82:6a:a4:bf:ad:
48:b2:18:30:97:61:9b:56:49:b6:1e:2d:fc:3a:60:
f3:45:b3:87:f5:02:c7:3b:f5:e4:21:ee:a8:d3:60:
bd:c2:60:f1:be:89:f7:d6:6e:bf:b9:99:ac:76:e2:
3a:3d:0a:d5:ff:e8:81:75:cc:47:ec:4d:aa:cc:4c:
f8:fd:a1:9d:64:3d:46:ae:4f:d5:d9:4b:b5:79:77:
eb:d6:84:cc:cc:f8:6f:f7:c4:b8:c8:cf:d3:c2:05:
fe:be:2f:91:ea:2c:54:14:91:ad:5e:79:9b:3f:66:
13:fe:f9:1a:2e:6c:42:84:88:39:7e:4e:3b:9d:be:
d8:67:aa:4e:43:4f:8b:07:da:d9:30:57:de:e5:96:
d8:d7:4d:84:1a:5a:e5:4f:f8:cb:19:bd:5d:c8:2d:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:49:CF:90:75:BE:3B:01:39:95:D9:07:B0:6D:AB:4A:F9:A3:94
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ed:01:2d:89:b6:52:b6:b2:25:8f:d6:b8:19:04:9d:a2:04:
ec:d8:4a:4f:ad:a9:65:28:1a:b2:43:28:16:1a:bb:2c:da:53:
f7:dd:cb:0f:05:bb:ef:c0:c8:67:df:ee:85:7e:c3:b5:2e:5a:
d7:eb:32:92:1a:06:29:fc:74:e7:f8:84:d2:b7:b0:56:90:48:
99:cb:9b:fa:1b:93:07:28:9a:5e:ab:46:48:18:8f:25:2c:7c:
6c:63:bc:df:2a:23:a1:66:9e:3a:05:3b:fe:f5:6e:e2:c7:62:
19:e6:87:bc:8c:4a:4a:89:f6:26:31:06:e4:92:58:7f:43:75:
d5:a4:44:9d:f5:70:a8:bb:be:02:f7:8b:e4:95:25:ae:dd:04:
7a:71:3b:f0:63:34:37:e6:00:4d:f4:ee:08:02:f3:90:1c:5b:
82:1c:8b:6d:28:a7:21:65:fc:20:79:ec:0c:af:4a:99:09:9e:
be:45:12:0e:94:00:93:73:aa:26:b8:a6:32:fd:68:94:a5:b2:
ea:aa:8e:b8:2c:42:97:80:13:ab:86:a7:7a:fd:59:41:31:60:
24:c5:1e:b3:52:ef:c7:71:c3:7a:1b:45:df:ca:62:94:93:f2:
d7:32:18:45:bc:b7:d3:d3:54:d7:db:db:a6:ab:6b:7a:9f:51:
9a:8b:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:33 2026 by rpki-client