
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
File: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft (raw, json)
Hash identifier: +5HQ+uZ9j5EZh0+N3hteUQfPIkWZohppffqOxzo0xqI=
Subject key identifier: A9:29:EA:1C:03:E2:36:A5:2F:E8:25:14:97:3B:51:43:0E:75:0F:56
Authority key identifier: F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
Certificate issuer: /CN=A9131667/serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
Manifest number: 30
Signing time: Mon 27 Jul 2026 11:03:00 +0000
Manifest this update: Mon 27 Jul 2026 11:02:59 +0000
Manifest next update: Mon 03 Aug 2026 11:02:59 +0000
Files and hashes: 1: 9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl (hash: BIe4hwt6NA+M87d5uYNupnDnCEpKMakPfBt3hn9a7EE=)
2: AE9C9EAC42AC11F1AC02065EBB833773.roa (hash: mM/NCo6m1Teegi+0GRkuaDLw0QJco4DLwfYN12WL/V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=F4486B2EC1DC330F77BA82F53D1AF3926279F827
Validity
Not Before: Jul 27 11:02:59 2026 GMT
Not After : Aug 3 11:02:59 2026 GMT
Subject: CN=6a673ae3-c669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:43:7a:fd:f0:60:dd:70:72:54:54:69:42:
1d:1d:02:bf:50:b9:bd:d6:93:ce:6f:8e:7b:7e:8b:
e6:dd:b7:87:68:75:de:54:af:3f:50:e5:49:fe:c2:
f0:da:4b:cc:17:28:d2:68:34:5a:67:d7:44:d6:3c:
72:4f:82:1f:bb:fc:3b:e0:82:a1:45:ac:34:21:f6:
58:a8:eb:e7:64:39:4d:80:f0:ca:6a:88:e6:c5:ac:
4a:33:75:a8:e2:b2:62:d2:80:2f:32:7c:70:88:20:
49:c6:b6:47:00:e6:1c:3b:03:70:57:e5:7b:47:4b:
94:ac:4b:fc:ce:8b:9c:2e:30:3e:4e:b3:88:62:88:
ec:d2:4b:c4:3c:be:a2:f3:23:05:89:2c:c8:0d:39:
e9:ca:82:a1:25:ba:fb:1f:da:d9:50:4a:6e:ad:0c:
d3:26:2c:34:ff:9c:19:8f:b4:a9:87:c4:92:47:7c:
29:7f:e3:a6:89:12:83:ba:14:ff:2c:f1:2f:bc:e6:
2d:3a:86:7f:ea:76:10:9d:d9:a3:d5:6b:ae:8a:63:
8f:89:1f:56:ee:d0:19:ee:04:46:00:44:d9:4a:e2:
ca:57:91:f7:76:68:d9:12:bc:a3:ae:1d:5e:13:fe:
63:b3:37:2f:b2:10:8c:06:07:5e:4e:a9:8c:0c:b2:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:EA:1C:03:E2:36:A5:2F:E8:25:14:97:3B:51:43:0E:75:0F:56
X509v3 Authority Key Identifier:
keyid:F4:48:6B:2E:C1:DC:33:0F:77:BA:82:F5:3D:1A:F3:92:62:79:F8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/E1590FC2429A11F1AEFC9085B5833773/9EhrLsHcMw93uoL1PRrzkmJ5-Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e9:52:10:89:97:ff:4c:b3:e3:8e:0d:97:8b:4a:a1:ff:dd:
d9:2e:c7:74:03:32:c9:5f:f8:f4:0d:7d:1f:22:6b:33:c2:9b:
c3:8f:9f:8c:1c:cd:cc:9d:5f:b4:3e:27:73:f7:62:bf:df:66:
79:52:17:be:ac:05:d9:99:7a:0a:ad:d1:23:bc:dc:00:4d:3c:
4f:33:01:68:67:f4:bb:7f:00:01:ab:d1:68:69:4a:23:e7:b2:
66:7e:2a:ec:9f:80:e7:f1:e9:ea:d1:00:c4:97:26:0f:59:b8:
33:26:6e:2c:fa:3a:04:16:90:6d:84:58:c7:11:c1:0a:15:42:
b0:b5:3d:d1:1c:8a:a8:21:ce:49:76:62:07:64:55:28:3a:e4:
f6:fb:36:bf:82:84:30:74:29:1e:b6:22:51:b7:eb:95:8b:f9:
f8:43:7b:d8:0b:c6:27:31:af:17:0f:73:68:e0:fc:6f:f8:2d:
1b:d5:46:5f:97:07:a0:72:43:89:39:e4:3b:ab:53:8a:50:98:
0f:b4:03:f6:00:87:ac:b2:92:04:a0:11:c0:25:9f:c3:70:37:
7f:97:67:27:25:a1:1a:15:72:46:ad:76:8d:34:c7:55:e7:86:
b4:f3:82:6b:13:2e:e2:a7:9e:7e:3a:f6:1d:aa:59:f2:07:47:
4e:7d:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:03 2026 by rpki-client