
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier: EWItH4vjAp2ozQFmc+23jeeQfy8dKNA9zU5G42dm8xw=
Subject key identifier: 7C:78:D0:4D:6F:00:71:B5:B5:82:E8:CD:25:8C:96:34:D0:CB:C8:77
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number: 02A6
Signing time: Wed 29 Jul 2026 02:34:58 +0000
Manifest this update: Wed 29 Jul 2026 02:34:57 +0000
Manifest next update: Wed 05 Aug 2026 02:34:57 +0000
Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: gAesFwMWJUW2HCSeMMRGC1ShRoXp2JZvMLLcdXd15Qc=)
2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: 9AQPocMd2J6g2hv7Dkr/AUm1nWYER+gsBq8heFcxqIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Validity
Not Before: Jul 29 02:34:57 2026 GMT
Not After : Aug 5 02:34:57 2026 GMT
Subject: CN=6a6966d1-3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:6e:6b:4b:3d:17:0e:2e:37:68:e7:1e:47:
b4:0d:55:b2:f8:88:b0:4c:01:3b:33:f8:5a:f3:e6:
85:9f:2c:74:92:cf:ff:4f:b2:e6:f9:97:d9:6a:ad:
5e:7f:43:2f:91:fe:3e:b2:9d:ab:de:24:c9:4b:0e:
75:67:35:9e:1f:6c:3d:a5:3c:53:70:e2:6f:f2:8d:
6d:21:00:b0:a2:80:cb:83:99:28:d3:b2:a8:3a:ee:
36:52:53:69:27:d3:b2:5d:9f:cf:d2:e7:e6:6d:40:
62:5c:3f:bd:f8:53:03:d3:4a:70:09:84:53:93:fa:
2d:f9:15:84:5d:b2:2b:40:e7:59:02:aa:15:7b:43:
44:d0:11:4d:79:2f:69:d5:9d:23:8a:fa:2e:98:07:
d7:fa:4e:82:f1:df:f4:fc:a2:90:f0:97:de:4b:38:
70:ab:9e:13:ae:24:97:19:12:0f:31:b1:d1:f7:cd:
21:98:74:22:cb:c4:3a:2a:8a:f0:37:0b:de:57:d1:
b9:6a:82:ba:fa:f6:2d:dc:53:ae:0c:78:d0:ff:83:
7a:98:13:8e:26:b7:68:4b:20:c7:35:75:08:dd:e3:
e2:06:c7:79:75:4f:b4:c8:e4:51:99:81:6d:ee:11:
e7:3c:24:b0:81:75:f4:9f:2a:86:97:a8:05:07:67:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:D0:4D:6F:00:71:B5:B5:82:E8:CD:25:8C:96:34:D0:CB:C8:77
X509v3 Authority Key Identifier:
keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d2:55:9b:6e:3f:59:5e:1c:9f:d1:64:e5:e9:e3:56:35:d5:
85:50:91:d5:fb:7c:74:5c:85:5d:79:8f:7c:ff:5a:46:6c:aa:
dc:eb:b1:4d:fb:ce:c1:b7:52:9f:7f:be:bc:ca:e2:70:77:c9:
84:1e:13:71:a1:91:55:78:18:b5:60:76:84:0b:46:87:30:01:
f8:86:c2:88:5e:34:28:66:ac:3c:bc:51:3e:d0:0b:39:63:b4:
3b:37:a2:16:69:a4:7f:c7:b6:0f:40:cd:5b:93:85:56:84:30:
cb:11:8b:2b:6e:e6:3d:83:6c:f1:e5:9a:41:d7:dc:84:24:27:
d2:45:ec:ab:8d:c7:07:a8:88:b8:13:3b:19:af:49:d7:41:d4:
2a:c8:fc:47:3c:70:72:9d:e4:11:36:91:63:28:c2:9d:e8:16:
e9:24:61:22:c6:a2:c2:22:e4:6c:ff:5f:d2:d6:03:99:ae:f3:
47:23:19:4d:2d:74:39:e9:1a:4c:b6:bc:a1:39:7e:f8:f8:6c:
28:51:8b:5b:1e:8d:19:8d:9a:e1:87:0a:bc:71:c7:70:b7:7d:
f3:68:8d:e4:41:4d:ee:bd:42:7a:d4:6b:d1:78:b4:0b:a1:9d:
af:66:79:dd:7f:0b:35:92:c1:30:84:d6:3f:ae:7a:30:3c:56:
8f:42:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:21 2026 by rpki-client