
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: ze0nkjWGFYc2WGqObGaQ1bhgrgtk3vvjvO6tfpIkHrI=
Subject key identifier: BE:93:C6:FB:CC:25:82:A8:38:6D:34:39:B2:BB:5F:7C:EB:26:81:09
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 0527
Signing time: Mon 27 Jul 2026 00:32:12 +0000
Manifest this update: Mon 27 Jul 2026 00:32:12 +0000
Manifest next update: Mon 03 Aug 2026 00:32:12 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: ke9uQHxXBXmsYOojPsb+5IdsYtrEoPOdFzoU4aCEQIw=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Jul 27 00:32:12 2026 GMT
Not After : Aug 3 00:32:12 2026 GMT
Subject: CN=6a66a70c-491b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:09:34:c0:80:7c:c9:04:a8:1b:16:d7:0e:
3c:50:07:84:9c:6a:77:5f:ba:ce:96:69:02:41:88:
45:e2:cf:aa:af:ee:eb:b2:17:43:c4:1b:8c:86:23:
ae:dc:9d:fe:68:0a:d4:e7:70:61:b5:46:4a:29:18:
cd:d4:98:f0:fd:db:a2:6a:60:5b:33:d7:b4:3d:0f:
cc:83:07:06:6b:e0:01:6d:e2:6c:bb:88:b4:7d:f2:
96:84:df:a8:4b:db:4b:2c:79:10:2c:0f:1f:1b:43:
3e:0d:fc:64:13:8b:03:0a:ec:98:59:9c:ac:18:42:
63:33:59:53:bc:14:ee:f1:a0:5e:35:ba:e5:de:1d:
52:f3:26:3a:53:14:8a:3f:7e:21:51:fc:cc:30:32:
50:92:b2:0b:2a:8d:1c:5e:58:8a:1e:4c:00:d6:ec:
1b:fc:18:fe:88:4b:51:1b:f2:93:fe:36:dc:60:62:
37:fa:5e:32:77:8c:4a:d0:80:62:af:61:02:af:dc:
7e:bc:0c:19:36:d9:b9:a7:af:a0:60:cd:ea:f5:f1:
26:bd:52:27:62:d2:bd:83:ec:05:b8:e8:14:8a:64:
4a:21:f0:3d:4a:bd:82:bd:d6:c0:af:a8:d7:f2:01:
dc:c5:be:cf:67:7b:57:61:bb:47:45:bc:46:72:37:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:C6:FB:CC:25:82:A8:38:6D:34:39:B2:BB:5F:7C:EB:26:81:09
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:f4:95:64:ef:1e:01:fc:32:0b:c9:61:69:b2:5d:0b:60:
3d:e3:c9:b8:d3:ef:29:33:24:b7:22:c0:ba:23:94:e9:74:03:
6c:8a:c1:8c:27:41:9c:ec:ed:f2:6b:7c:07:71:02:8a:75:8b:
a2:8e:e3:f3:c6:d8:c8:3e:4e:a7:a6:af:1a:d2:39:90:44:15:
28:8b:f1:66:d9:fb:39:a2:a7:14:10:b6:5b:cc:90:4b:ac:2b:
b0:1f:b5:e8:5d:88:ef:1f:37:e6:f1:54:cf:d8:bb:ad:52:9c:
c0:08:2b:37:b5:e0:86:03:e5:aa:e3:49:e6:61:30:1d:b9:69:
71:fb:a2:d5:51:d8:28:e7:67:6d:0f:a2:74:61:12:07:bb:c4:
6d:a6:07:8f:45:78:be:2a:fa:c4:bd:15:32:a5:56:5a:de:c6:
3a:61:5e:2c:95:4e:2c:d4:b7:48:ef:51:bb:c3:9d:d4:95:76:
82:72:d7:3a:61:52:1b:28:c5:21:e3:39:cc:57:37:4d:49:48:
18:e1:65:e3:eb:c3:86:f6:1b:74:64:f2:28:c3:87:00:df:e8:
76:64:d2:99:91:e3:35:5c:64:42:d2:ce:22:44:3c:77:61:7d:
84:a4:d6:d3:7c:89:9e:9a:4e:98:42:f8:7e:f5:03:54:a8:ea:
06:30:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:50 2026 by rpki-client