
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
File: 62HLzdtR6alUgo8dcysrkQCwBE8.mft (raw, json)
Hash identifier: wytc/27OjhDLyu+95xE9cUgTn024L4w+KgLsp0GqdKw=
Subject key identifier: B4:16:BC:90:0B:7D:91:C1:E5:87:78:C6:D0:AF:AB:2F:EB:7F:AE:10
Authority key identifier: EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
Certificate issuer: /CN=A9129F26/serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
Manifest number: 22
Signing time: Sun 27 Sep 2026 09:27:25 +0000
Manifest this update: Sun 27 Sep 2026 09:27:24 +0000
Manifest next update: Sun 04 Oct 2026 09:27:24 +0000
Files and hashes: 1: 62HLzdtR6alUgo8dcysrkQCwBE8.crl (hash: cp9QD4VjJYxSHWlX5ES961wbCgJZOioPRie+6FS6aMs=)
2: 336DF8B28B0811F18D85AED87011F970.roa (hash: JB+3tqFVDLVL+fNG39cW33bCmFkKcUQfmjoHhla0fMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl
rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F26, serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
Validity
Not Before: Sep 27 09:27:24 2026 GMT
Not After : Oct 4 09:27:24 2026 GMT
Subject: CN=6ab8e17c-d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:27:63:39:3d:0d:ba:36:35:5c:d2:e6:97:
2b:33:1a:15:d1:54:8a:81:3a:20:40:5c:9b:ed:3c:
cb:21:7a:3f:b5:5d:6f:58:00:3c:54:e8:93:0b:cc:
ce:80:93:60:d7:e6:cb:38:47:7b:f4:a7:96:c6:b5:
e7:60:88:63:76:9a:66:48:1a:89:2b:04:e5:76:08:
5a:06:51:24:db:bb:29:99:ae:da:79:37:96:13:2d:
c4:ca:f1:d5:e8:b1:eb:37:d3:93:96:6b:d4:42:ee:
91:33:24:89:45:38:07:4f:f4:91:c3:ad:f2:ab:b2:
44:c1:85:a3:da:8c:80:a5:48:81:1c:21:b6:3b:b1:
7e:20:ca:7d:73:5a:ca:96:99:03:3d:e8:88:72:c7:
ce:aa:43:be:ad:a4:b1:cc:e9:e2:dd:d1:a3:69:7a:
1a:21:34:b0:53:fb:ab:3b:92:0f:83:d1:c9:39:07:
36:0b:b0:95:a7:8e:01:69:99:76:d7:67:51:3d:65:
38:87:a0:3a:c2:60:aa:62:96:26:b7:96:58:7f:99:
e6:58:2f:2c:b4:37:f8:70:f2:e8:12:3c:b7:f3:d5:
77:44:3e:2d:3c:5c:6f:cb:c4:55:2e:e1:b2:22:43:
12:1b:ca:c9:77:3f:f6:ee:05:5b:c2:ba:22:8e:6f:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:BC:90:0B:7D:91:C1:E5:87:78:C6:D0:AF:AB:2F:EB:7F:AE:10
X509v3 Authority Key Identifier:
keyid:EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:bc:8d:29:3e:88:1c:23:86:74:07:91:ed:bc:02:8b:df:
d3:5b:67:12:81:cd:ae:78:43:39:83:66:06:03:b1:af:0a:63:
08:2e:35:0b:26:9e:cb:be:5b:9e:49:18:58:dd:66:bf:42:41:
f7:d6:5c:b4:cb:25:04:09:5e:40:54:30:39:62:ec:71:56:f0:
66:48:27:ae:ed:29:cc:44:3e:5c:c0:55:e3:39:5c:4a:9e:0c:
ec:71:40:99:13:68:42:dc:22:ea:2c:cd:c2:5b:ed:98:94:30:
e5:4e:c8:d4:ef:ad:5b:6e:65:3a:df:e5:48:63:15:f6:8b:04:
e3:6a:3b:5c:54:a2:32:b5:99:43:8a:f9:12:96:4a:1e:c7:cf:
6d:e9:12:7c:77:11:7f:63:2d:e8:c6:07:96:2f:a3:d8:1e:04:
ef:69:9a:86:43:20:de:e6:8b:a2:89:df:5e:e8:20:cc:24:78:
e1:09:01:27:42:af:cd:02:b1:eb:35:3b:7e:07:c2:94:6a:19:
58:9c:d5:26:86:37:f2:5a:76:50:c7:da:16:93:9a:15:54:56:
cd:d4:82:25:11:94:3c:8f:a5:ae:24:dd:6c:3f:7d:69:3b:ce:
ed:8f:c8:d3:5e:8a:9a:de:a6:1c:9d:bd:ca:3c:5f:31:f5:73:
1b:36:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:34 2026 by rpki-client