
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json)
Hash identifier: x9UoM7J1oL+s+DTtepxC+lOCJZ7hzAuXhdKqmHjO9Bc=
Subject key identifier: 94:9D:71:8B:EC:D5:18:9C:BB:A8:65:95:70:A2:6C:86:97:99:94:A7
Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F
Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
Manifest number: 47
Signing time: Mon 27 Jul 2026 10:42:51 +0000
Manifest this update: Mon 27 Jul 2026 10:42:51 +0000
Manifest next update: Mon 03 Aug 2026 10:42:51 +0000
Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: h1Gsw0o8G4dPT33QW9DE1IRrQ6spLdQ+oSuMZmAua/A=)
2: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=)
3: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl
rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
Validity
Not Before: Jul 27 10:42:51 2026 GMT
Not After : Aug 3 10:42:51 2026 GMT
Subject: CN=6a67362b-7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:09:d5:1a:a5:69:5c:da:6e:04:fb:b3:02:
41:6d:33:68:22:a5:08:6d:5e:3b:af:c8:88:0d:43:
82:09:15:30:ee:27:75:0a:ac:08:af:ac:31:49:6c:
82:10:f8:79:b7:cf:2d:72:98:47:f5:bf:6b:12:6b:
15:b6:01:a5:b1:63:ae:fb:50:4d:4c:4e:6f:93:00:
cd:e6:45:8f:d9:d5:18:b6:6d:72:98:e1:f1:d0:69:
f4:de:bb:1e:14:bb:28:d9:78:92:99:1c:1c:24:d8:
fc:3c:b2:0e:e0:ff:50:5a:48:78:c7:5c:c4:65:1e:
91:dc:73:6e:59:fa:c4:10:f7:04:b9:1b:ac:c5:f7:
ec:ab:d1:36:18:92:1d:83:6c:84:eb:64:08:06:25:
65:97:17:c0:18:7f:b7:1e:47:d9:d8:d6:b6:b5:f5:
ae:0e:2a:9a:a8:53:7d:7a:66:81:b0:73:9e:8f:8b:
52:4d:ce:67:b2:04:ed:1b:05:fc:04:0e:7c:28:bb:
fa:2b:45:55:e3:38:31:1a:b8:e0:f7:6a:8e:dc:8f:
42:65:de:8d:e3:9d:1a:81:94:29:e1:c9:34:69:17:
e0:64:71:d3:f5:39:f1:eb:f1:52:5c:b2:8b:47:26:
cb:39:42:41:8b:d3:eb:8e:c4:67:af:0a:f5:09:ac:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:71:8B:EC:D5:18:9C:BB:A8:65:95:70:A2:6C:86:97:99:94:A7
X509v3 Authority Key Identifier:
keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:46:b1:41:d9:51:49:3d:be:09:d6:2a:fc:2c:cd:8c:05:
7c:37:97:a0:35:f9:e8:b2:e2:10:58:58:19:33:44:69:c4:17:
f2:0e:75:e8:24:57:55:05:32:6c:5b:b5:ba:f0:47:cb:e0:6e:
b6:60:31:d7:89:e1:6d:8b:7d:69:db:a8:cd:53:fa:39:51:c6:
74:c0:28:9f:d5:fc:1a:f3:eb:60:76:4f:83:d7:d9:06:32:4d:
42:5d:18:0b:0a:44:36:9d:d1:51:18:ff:6b:89:88:47:78:ec:
bb:c2:c4:31:a9:1c:85:aa:46:22:06:68:a7:b3:cd:e0:bc:56:
b9:12:31:d5:4c:29:11:90:a8:22:48:2e:a6:db:1f:c7:97:61:
b2:51:b0:ed:1a:8b:30:54:ad:90:81:82:12:b0:cc:4a:15:13:
d8:e1:ca:2a:56:8c:43:47:6d:43:7d:97:23:64:d9:92:62:5c:
f8:39:dd:3e:23:be:1e:a3:2b:1c:91:c7:44:c7:43:9c:1a:00:
8d:fe:7a:1d:15:ae:56:8f:b5:1c:08:02:e8:e6:d7:6a:8b:73:
05:31:b8:c6:2f:d3:cc:4e:aa:a7:2f:9a:5c:90:49:96:1c:e6:
af:42:a6:d5:e7:2a:2b:6e:ed:54:ab:00:e1:a1:d7:ec:2c:9a:
36:a1:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:29 2026 by rpki-client