
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: /XMDFj1pcQ7cNrGHkjy86hezplLsGpv8pv3MGD53oWM=
Subject key identifier: 7B:16:59:C3:E7:4D:86:74:0C:6B:9C:CD:FB:0F:88:2A:A9:FF:7B:68
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1DE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D91
Signing time: Tue 28 Jul 2026 16:12:32 +0000
Manifest this update: Tue 28 Jul 2026 16:12:32 +0000
Manifest next update: Tue 04 Aug 2026 16:12:32 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: g6lQ0KZB9JC3XoxZz7AopP3K7cogZMuVVXqdVCTqd/o=)
2: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
3: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
4: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7649 (0x1de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Jul 28 16:12:32 2026 GMT
Not After : Aug 4 16:12:32 2026 GMT
Subject: CN=6a68d4f0-bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:14:54:0f:28:38:c3:23:16:16:05:c1:e8:
cc:a6:ce:b2:e9:19:b6:15:46:05:59:04:4a:f4:6a:
cf:cd:89:dd:c2:cf:6b:4e:0b:32:55:29:fc:a3:55:
e2:59:d7:0e:53:85:11:13:68:72:69:0e:0f:04:b2:
50:85:1b:de:80:87:7e:f6:73:1b:39:2b:f7:30:62:
18:b3:88:cc:8c:4f:69:6b:4b:6f:d7:9e:50:50:3b:
c4:2b:97:26:16:a3:ef:09:9a:73:13:b1:77:83:0a:
1a:5b:c3:b6:81:61:f6:31:4d:ad:61:98:32:82:e3:
ff:60:e1:31:0f:b4:1a:a1:92:be:e5:fd:f9:cd:3c:
0b:f5:58:6d:44:8b:13:18:22:30:c5:0f:6c:5f:4e:
99:42:90:41:0c:ec:6c:c2:db:b2:6b:d6:f4:eb:97:
67:4b:f5:8f:ce:65:e4:4e:2c:0b:57:c3:66:84:cb:
51:ca:27:86:32:13:07:ce:f3:1b:fc:50:b2:b3:f9:
e5:04:c0:30:8e:96:7d:89:65:dd:a3:83:cb:59:1c:
e3:ea:52:63:8c:6c:83:0c:13:58:e7:02:01:36:68:
95:46:81:10:ef:e4:ce:19:9c:ab:b0:ad:c0:e6:20:
72:2b:a7:94:26:41:a6:d9:50:86:e0:45:70:11:62:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:59:C3:E7:4D:86:74:0C:6B:9C:CD:FB:0F:88:2A:A9:FF:7B:68
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:81:27:9d:e5:b7:7f:4b:6d:a8:0d:78:3c:98:c8:d2:02:6f:
5c:78:b3:33:c8:42:52:4a:42:df:ce:0e:b6:60:98:0e:00:41:
d5:c1:af:1b:7d:34:b8:e8:3e:4a:45:a0:fd:6c:db:df:b8:d7:
e6:0c:0e:6d:63:9a:d5:f5:84:b3:8b:48:50:30:89:cf:ab:f4:
8e:d8:06:28:f7:f9:61:50:34:58:6d:45:e9:1e:c0:c7:09:b8:
ec:72:8f:8f:4a:21:2f:43:b2:10:74:34:ff:5f:2e:a5:a2:e3:
15:ad:58:6d:40:15:14:c8:52:b7:a9:30:3d:78:cf:e7:a3:b5:
7c:19:29:05:19:df:25:f7:30:09:aa:e0:04:55:a2:5a:16:b0:
64:89:00:10:3c:14:52:e9:01:6b:d1:a1:c0:37:35:c8:70:cf:
08:dc:3b:19:74:52:79:9e:47:69:87:0e:75:f7:08:68:da:e2:
da:10:ae:9a:20:c6:27:85:b8:96:81:f6:f0:18:b2:b5:73:ab:
25:a5:4f:79:f6:4a:42:65:83:d1:57:33:64:3a:69:c0:ec:3d:
b0:e9:68:17:45:f1:47:82:c2:5e:8a:58:e5:59:d1:34:0e:d1:
b6:67:dd:36:6b:29:00:da:0d:e6:b2:29:04:5e:85:9c:27:39:
a0:3e:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:45 2026 by rpki-client