
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: i/irQpQrPLtPWwIF9bo0Riu1+Pm4AGKRB5eFYWEH1iU=
Subject key identifier: 0A:86:85:B4:23:32:08:8E:EB:01:E7:4A:F6:24:AB:CE:6E:57:1D:EB
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BC0
Signing time: Tue 28 Jul 2026 15:37:45 +0000
Manifest this update: Tue 28 Jul 2026 15:37:45 +0000
Manifest next update: Tue 04 Aug 2026 15:37:45 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: D6J+fL9C+NWhcnh/J5mTQ5EH3DRcbqEbXtwKwzSx+M4=)
2: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
3: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
5: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11286 (0x2c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Jul 28 15:37:45 2026 GMT
Not After : Aug 4 15:37:45 2026 GMT
Subject: CN=6a68ccc9-ed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:67:03:02:db:35:a9:85:e3:23:86:f6:a7:
23:0a:3a:a6:a0:17:2c:28:4d:a2:f6:9b:88:8e:a9:
b6:f8:33:54:b9:e9:5d:98:b0:7a:c5:bc:ec:6a:1b:
ec:c4:78:a3:00:26:2b:fa:6f:1d:75:ba:95:09:cf:
a9:07:d1:b7:d3:cd:05:ef:a0:34:11:bf:3c:ae:9b:
a9:c0:cc:36:7a:67:43:a6:3f:e2:e0:35:f2:0b:60:
77:6f:21:6a:68:60:66:97:c0:c5:a9:bf:89:00:0e:
35:cf:27:49:e5:9c:d9:24:5d:7b:74:f8:e4:60:f9:
d9:bc:3e:48:8e:73:4f:42:c8:69:fa:c0:f9:cd:95:
d4:05:aa:3a:d4:b5:63:f2:07:02:07:86:eb:5c:89:
46:1b:af:73:d0:75:b3:25:66:8b:53:40:f6:1a:e2:
fc:06:73:93:27:86:9b:85:06:e5:92:ae:be:9f:b3:
06:8b:13:0e:ae:ef:07:1d:f8:1b:d4:29:df:65:0b:
d9:1e:51:98:97:1e:7b:b0:83:be:df:d4:4a:bf:5f:
24:1e:6b:7a:d9:80:7d:a3:60:48:5f:fe:15:31:96:
97:78:24:7e:10:71:fd:91:60:c4:41:b2:8c:4e:10:
64:f4:b5:53:70:e6:62:ae:9f:73:22:db:a0:80:f9:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:85:B4:23:32:08:8E:EB:01:E7:4A:F6:24:AB:CE:6E:57:1D:EB
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b3:b8:4d:2b:6b:d2:83:b3:8d:95:13:c7:76:57:62:68:dc:
ac:ee:c2:0b:c3:d3:db:b4:27:5b:71:ec:5d:ff:9b:d8:2e:e3:
1b:d5:0c:6d:1a:2c:af:b0:26:68:ab:3d:9b:54:15:ca:9c:e5:
af:8f:78:37:f5:e7:c0:9e:56:39:63:e4:b5:71:3c:d2:0b:47:
cb:c9:eb:e1:0c:4f:7c:5c:67:10:9a:d0:6c:dd:8c:e0:1e:d4:
d6:72:a6:7a:b4:e7:e8:2b:b5:ea:e6:95:65:32:ff:08:fa:3b:
17:99:a1:f8:4c:b6:41:08:a8:bf:9a:98:43:d7:23:90:58:ce:
2e:93:d2:4b:ff:a2:49:4f:53:44:38:52:55:93:92:18:41:da:
67:aa:b5:b9:1c:fb:de:67:fd:22:25:a3:21:05:91:f2:1e:06:
33:3f:ef:1b:0a:27:88:5e:63:9e:4d:99:fd:65:bb:1a:0c:16:
9d:cd:94:93:bf:51:8d:64:f3:95:06:30:ef:a9:95:45:75:e0:
52:fc:1c:69:23:fa:61:97:74:ae:63:a9:84:48:9f:dd:14:42:
83:ce:b8:68:cc:04:7b:ca:c4:9b:82:bd:f3:02:ce:15:30:94:
11:60:d9:29:3c:c9:ab:4c:a5:8a:3a:16:2f:88:3c:c7:d9:0c:
d5:90:aa:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3
MkNCRUEwRTIwHhcNMjYwNzI4MTUzNzQ1WhcNMjYwODA0MTUzNzQ1WjAYMRYwFAYD
VQQDEw02YTY4Y2NjOS1lZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAziZnAwLbNamF4yOG9qcjCjqmoBcsKE2i9puIjqm2+DNUueldmLB6xbzsahvs
xHijACYr+m8ddbqVCc+pB9G3080F76A0Eb88rpupwMw2emdDpj/i4DXyC2B3byFq
aGBml8DFqb+JAA41zydJ5ZzZJF17dPjkYPnZvD5IjnNPQshp+sD5zZXUBao61LVj
8gcCB4brXIlGG69z0HWzJWaLU0D2GuL8BnOTJ4abhQblkq6+n7MGixMOru8HHfgb
1CnfZQvZHlGYlx57sIO+39RKv18kHmt62YB9o2BIX/4VMZaXeCR+EHH9kWDEQbKM
ThBk9LVTcOZirp9zItuggPkw5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqGhbQj
MgiO6wHnSvYkq85uVx3rMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF
NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK
bDFYeENLdEROUGR5eS1vT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUrO4TStr0oOzjZUTx3ZXYmjcrO7CC8PT27QnW3HsXf+b2C7jG9UMbRosr7Am
aKs9m1QVypzlr494N/XnwJ5WOWPktXE80gtHy8nr4QxPfFxnEJrQbN2M4B7U1nKm
erTn6Cu16uaVZTL/CPo7F5mh+Ey2QQiov5qYQ9cjkFjOLpPSS/+iSU9TRDhSVZOS
GEHaZ6q1uRz73mf9IiWjIQWR8h4GMz/vGwoniF5jnk2Z/WW7GgwWnc2Uk79RjWTz
lQYw76mVRXXgUvwcaSP6YZd0rmOphEif3RRCg864aMwEe8rEm4K98wLOFTCUEWDZ
KTzJq0ylijoWL4g8x9kM1ZCq/g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:13 2026 by rpki-client