
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File: RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier: 94Q9NuaPfgmUsclE0ttVFakDwVZd+i5IWB6j044GYMs=
Subject key identifier: 66:C6:05:97:C7:8C:F4:08:6B:5A:80:FA:0D:69:BB:74:44:7E:E9:B7
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer: /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number: 9E
Signing time: Mon 27 Jul 2026 09:27:24 +0000
Manifest this update: Mon 27 Jul 2026 09:27:24 +0000
Manifest next update: Mon 03 Aug 2026 09:27:24 +0000
Files and hashes: 1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: xQdFD9ikUzM4SrNVa6L9Cn2hP5GiRSKX6a+6x0iMoI8=)
2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
3: QKlY2qk3wyq97mdii7HAvqN6ae4.asa (hash: wPAhVkEsZHfP0Gam9zd2C5xJRpIz9eYqo9PqvM2pW2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Validity
Not Before: Jul 27 09:27:24 2026 GMT
Not After : Aug 3 09:27:24 2026 GMT
Subject: CN=6a67247c-1193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:09:fc:6e:db:e0:01:81:62:0c:9d:1f:37:
5e:60:97:f7:b7:ce:c1:4d:4c:e1:0a:29:e2:b8:e6:
c0:0b:c7:6d:25:dd:a3:fb:65:b4:27:1e:4d:5f:8d:
51:90:38:6e:ab:03:fb:2f:32:a2:f3:c6:23:06:8d:
19:23:28:67:ae:be:80:00:75:76:72:30:bc:0b:44:
dc:c9:4c:37:36:9c:c2:09:8d:26:c0:3f:6c:d4:5b:
dc:04:12:2d:24:a7:27:6b:fd:66:9e:22:6f:6d:ae:
87:97:0d:78:a1:e2:45:12:89:5b:09:0c:25:3e:e2:
c6:f1:6a:2c:b7:92:39:b1:88:3e:3d:06:4f:fe:46:
52:dd:91:80:07:2e:e2:48:88:9e:5c:41:a8:a3:d9:
32:d7:3f:77:a1:d7:1b:9e:dd:6c:a2:2e:70:8f:e9:
41:53:44:5a:5f:3d:e3:97:7e:b5:c0:a3:f8:45:ee:
ac:5d:dc:dd:c3:bb:b2:ac:72:8e:3e:26:46:7d:ab:
88:02:47:ee:1d:9a:38:e8:1e:b4:69:bb:c3:f1:82:
01:6d:74:f4:dd:00:6b:0b:22:3a:25:3d:0a:12:23:
75:d2:bd:04:83:5f:b2:d2:25:98:3a:be:e4:d0:85:
90:76:19:66:56:9b:4f:90:58:9a:38:31:d5:aa:04:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:05:97:C7:8C:F4:08:6B:5A:80:FA:0D:69:BB:74:44:7E:E9:B7
X509v3 Authority Key Identifier:
keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:66:c0:51:00:26:ae:36:18:c8:c2:39:c2:3f:bb:74:6d:
6d:fa:94:13:96:a7:69:42:31:e3:c2:04:c0:9d:7a:4f:5d:e0:
41:f7:1c:91:7b:67:85:3f:e1:0f:bf:08:b6:bc:a0:be:85:be:
8f:46:cd:4a:b9:7e:2e:0d:db:33:7e:b8:48:e8:84:4d:76:28:
8a:1e:c7:57:fc:0e:b9:e5:32:21:1a:20:b1:25:48:ee:42:63:
01:c7:e1:c3:c9:cb:2e:b5:e2:d5:d3:31:59:cd:bb:04:2d:af:
e7:d7:01:5f:cb:97:93:d3:d9:87:54:60:ca:6a:0e:94:af:62:
a1:9b:00:3a:33:a1:6a:77:b0:41:57:09:dd:75:e6:72:be:1e:
b6:8b:2e:0d:40:e9:1a:f8:40:5d:9e:6a:74:fa:84:da:bb:96:
c0:01:32:e0:34:15:96:7c:74:f4:4d:8b:56:fa:aa:01:7e:09:
59:63:95:38:4e:69:69:7f:34:63:d0:ed:03:c4:0a:ec:9a:ee:
1e:e6:0c:2e:2b:24:95:45:b2:e8:4a:69:9f:2a:40:82:7c:b4:
f8:be:c8:9f:17:4d:71:38:f3:e7:f7:45:93:67:2e:cb:5e:ee:
89:41:63:cb:76:84:aa:29:e0:6e:f2:81:70:3a:74:70:69:6d:
90:c3:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:10 2026 by rpki-client