
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
File: RnF4Q-fTSLOez3uSSVUB_jVQujw.mft (raw, json)
Hash identifier: ac3OT258PbxBi1eIo8S29EfE2zyEkSrYEtOh6FhCxAo=
Subject key identifier: 82:FD:FE:48:6C:90:EF:E7:18:FE:22:CE:6C:2C:1E:92:12:7A:C2:EB
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Certificate issuer: /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
Manifest number: 1E
Signing time: Mon 27 Jul 2026 11:16:57 +0000
Manifest this update: Mon 27 Jul 2026 11:16:56 +0000
Manifest next update: Mon 03 Aug 2026 11:16:56 +0000
Files and hashes: 1: RnF4Q-fTSLOez3uSSVUB_jVQujw.crl (hash: 8L4UPjs5ifM1o3MYGEINYCtDGdnjsI0dNQ7Xv8TXlMU=)
2: 0B73271E6BAB11F1817F09047447A888.roa (hash: xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=)
3: 27B6241C6EC111F198F60F1C67A30FBC.roa (hash: 1vqnDMCOkfAA0RhjR6F0sutamrJDfPdesHktqXu9g8s=)
4: 83C1CE04704D11F1AE17E0CA6AA30FBC.roa (hash: +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=)
5: g8XYHoulscOdIzPLr2d3D2E_Iq4.asa (hash: xRoqthOZmfDfJDQzpKsFdbAkLfGrB9YrhCDM68yWLys=)
6: 270496C06EC111F198F60F1C67A30FBC.roa (hash: JtKOBE4F8rwYsWTEwFLdbKDrbkNvr+908F7G3Dfu+ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Validity
Not Before: Jul 27 11:16:56 2026 GMT
Not After : Aug 3 11:16:56 2026 GMT
Subject: CN=6a673e28-4fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:50:b8:26:d4:5c:f8:c1:41:29:bc:4e:a0:
0f:02:e1:40:ae:df:e2:03:6a:2d:e7:13:9f:7a:9e:
66:d8:62:fc:f1:be:38:05:01:86:51:34:f5:8a:21:
c0:4c:91:90:f0:46:2b:d2:f3:5b:b2:85:39:0c:83:
fa:93:04:5e:ff:f1:c8:c2:76:1f:98:6e:7e:d2:44:
54:26:6b:d1:06:1c:1f:a9:f4:6d:c7:2e:06:a8:8b:
f2:94:83:7b:cd:74:a4:d6:69:f1:83:36:ba:c2:7c:
eb:a5:20:d3:b5:21:c8:c6:35:03:51:56:a0:a5:a4:
da:09:2e:cf:df:76:85:66:99:ed:1c:3b:16:1a:5b:
da:e6:f3:56:1b:fd:d0:5f:62:4e:f4:21:c8:25:5a:
6b:c1:6b:29:bf:bd:3a:0d:7b:4b:a4:1e:c5:ad:f5:
54:e2:a4:5b:7b:bc:8e:ad:e6:b7:4c:8f:d9:84:80:
54:16:3f:09:26:00:27:35:d6:1f:a4:c4:69:c0:2c:
6a:ee:a8:f4:17:31:8a:59:18:97:87:a8:e1:31:38:
d3:29:02:f0:e6:21:81:8e:7b:fa:ab:2b:36:5d:14:
6a:7a:60:80:57:88:4c:66:2d:a9:ef:c6:7b:2b:79:
07:86:09:16:39:a7:74:08:35:7f:ff:5e:ae:a6:87:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:FE:48:6C:90:EF:E7:18:FE:22:CE:6C:2C:1E:92:12:7A:C2:EB
X509v3 Authority Key Identifier:
keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:37:36:42:53:a7:99:70:37:3e:36:dc:8f:af:7f:c2:19:b6:
40:26:96:e1:0c:70:7c:2d:44:8b:f6:e4:4d:05:da:50:e0:46:
a6:54:63:89:83:51:96:8f:fa:b8:3e:43:22:a2:23:53:4f:49:
96:ac:ac:1a:a4:9b:a3:b9:9b:90:6f:dd:a5:1a:55:02:71:8e:
a7:92:79:5c:96:84:e0:e7:ef:6b:37:aa:06:36:64:d3:a5:fb:
ca:3e:7d:c4:22:5b:a8:d8:33:54:29:c6:87:5c:48:9f:02:ae:
4b:91:ec:7f:97:c3:3a:79:14:26:34:d2:2e:2b:36:e0:91:83:
02:51:24:19:09:79:c4:1e:4a:57:a8:cc:b6:1d:6d:d0:b3:5d:
8a:cf:71:5e:a9:17:db:84:30:6a:45:49:37:06:a8:34:55:f4:
16:0b:aa:b0:04:05:a1:58:d1:37:ec:16:af:89:26:d3:c7:bc:
50:71:38:ad:9d:fb:13:b5:e1:7b:43:bc:65:9a:94:69:91:16:
82:57:f9:6e:bc:0b:db:da:c8:c6:28:96:82:eb:f8:c5:36:d0:
1e:a7:be:74:62:36:cd:f4:39:b6:9a:9b:45:e3:60:d2:5a:25:
32:60:d1:40:bd:ad:09:02:52:c3:29:36:e1:11:24:99:03:96:
cb:d4:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:46 2026 by rpki-client