
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier: LyhHc6z9Cr7lWhXQA7Y5dxn8beggFQ0ubH52Wu2t1Gg=
Subject key identifier: AC:F1:CF:17:DF:85:9E:F0:3A:7B:CA:97:46:2D:36:DE:8D:3A:F4:91
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number: 01CE
Signing time: Mon 27 Jul 2026 05:25:56 +0000
Manifest this update: Mon 27 Jul 2026 05:25:55 +0000
Manifest next update: Mon 03 Aug 2026 05:25:55 +0000
Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 37Y2TZW5GRPOu8tuCh3K08HUVjtxE2JG5+mcyP0lr0s=)
2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Validity
Not Before: Jul 27 05:25:55 2026 GMT
Not After : Aug 3 05:25:55 2026 GMT
Subject: CN=6a66ebe4-3387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:1f:30:44:07:b8:f0:6c:1b:02:59:77:58:
55:d1:cf:a7:de:a5:06:60:ee:de:bb:f1:d6:cd:58:
ed:9c:e7:32:2f:80:0a:bc:f0:9c:a3:bb:92:97:07:
79:7f:0a:9c:27:01:15:2a:dd:6e:7e:06:3e:62:44:
07:08:f9:04:f3:93:52:eb:36:ba:18:6d:2e:85:65:
14:7e:84:97:ef:c3:13:8c:08:54:ae:39:37:79:ac:
25:ab:c4:c5:35:26:b2:ba:4a:1d:90:da:06:3f:ce:
14:f0:ce:29:eb:16:a2:c5:6f:5a:de:73:fe:49:f9:
ef:3b:4f:a1:a2:f2:63:72:49:82:53:b4:fb:e9:42:
c8:75:97:bf:56:56:6c:0c:79:48:6b:b0:d0:43:aa:
4b:ef:f9:e7:ae:a9:c8:98:5b:be:4d:45:69:54:84:
77:6b:65:97:21:c8:19:74:72:a8:b0:7e:47:d6:c2:
a5:52:f3:25:4b:c7:e6:d0:c8:a9:a4:d4:3f:2d:98:
1d:d4:08:88:da:cf:fb:fb:eb:81:1c:12:ea:4e:d7:
95:72:2a:24:70:8f:22:56:20:d4:1e:6e:6c:03:80:
09:11:06:e4:82:6e:c5:cc:a0:36:5d:38:b2:43:39:
de:0d:fb:35:dd:a6:b5:0e:3a:d8:30:21:22:fa:b6:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:CF:17:DF:85:9E:F0:3A:7B:CA:97:46:2D:36:DE:8D:3A:F4:91
X509v3 Authority Key Identifier:
keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:5a:35:6d:f1:80:d0:c6:0a:c4:8a:3a:ba:82:99:5d:61:9e:
ae:b7:ad:d0:ac:1c:2b:b3:ec:f7:bf:7b:0c:d7:5b:e1:53:60:
c0:a6:db:f4:b3:b7:a4:3f:57:4c:03:10:f8:88:da:a3:e7:03:
9c:02:45:f1:b8:47:21:90:85:4c:b0:3a:4b:a5:c8:7f:62:ed:
d0:6b:16:35:c6:81:5b:7e:f9:7e:a0:5a:64:5d:a9:a6:85:ae:
4e:52:99:6e:2b:d6:99:b7:61:f5:cb:c0:86:37:89:6b:66:c1:
ee:3f:16:60:dc:e7:72:a8:94:05:99:74:c8:bd:59:ce:7f:b0:
70:05:83:26:84:33:9f:dd:cd:00:1e:2a:e6:8e:2b:fd:56:b2:
8d:38:c8:04:49:54:27:97:10:60:be:25:c9:8b:94:dd:dd:c7:
89:97:be:1e:9c:d1:1b:fd:34:49:b7:88:59:ed:cd:fd:d9:c9:
4e:07:41:d5:50:45:74:e6:8f:85:95:3d:9e:62:1e:40:28:f2:
57:f3:b8:50:87:01:74:87:0c:bf:fa:c7:a5:ff:70:f3:df:8d:
5f:ad:98:72:72:c3:ff:e4:0b:0c:d6:22:c9:39:ce:9c:e8:a1:
dd:54:58:91:66:14:33:80:53:59:f7:94:68:ca:d1:f2:2d:9e:
85:70:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:04 2026 by rpki-client