
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: VfxXc+6XbH/NtD4GfOiS9CJr7awW1MTXF2tgC0BGHOI=
Subject key identifier: 6C:29:0D:44:65:BB:B1:35:AE:72:7A:93:03:68:A3:AD:7A:67:81:F8
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 0802
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 07F2
Signing time: Sun 26 Jul 2026 22:03:15 +0000
Manifest this update: Sun 26 Jul 2026 22:03:15 +0000
Manifest next update: Sun 02 Aug 2026 22:03:15 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: c3vkpzLLvH5L1VYFuVSN5kqGdrmaXszYyzMCY6IsMUQ=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: hcKRdUWFaZGYBF8VFWUbhmuLm8Ets1IhBYKNdVYBLqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: Jul 26 22:03:15 2026 GMT
Not After : Aug 2 22:03:15 2026 GMT
Subject: CN=6a668423-3b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c7:70:49:c1:20:5a:98:a7:f8:51:ec:e7:0d:
7d:95:0b:f2:a3:58:35:fe:c5:43:80:12:a8:58:28:
a7:d8:36:f9:8a:db:ef:d9:88:c9:ac:b6:69:50:64:
6f:18:cf:26:92:eb:30:fe:30:71:ad:97:43:06:06:
8d:4a:e5:3b:32:db:cd:a5:f1:c6:ac:9f:eb:9a:ae:
2e:cb:3c:34:36:54:b7:cf:4a:94:81:94:68:27:4d:
bc:ad:2d:7d:d2:51:a8:15:11:b4:e4:6d:a8:e2:12:
6e:f7:33:f3:1e:c1:bf:36:65:38:d6:5c:1e:18:c3:
10:11:f8:03:ba:6f:f6:e5:4a:bf:ca:ad:eb:e3:41:
31:25:d8:4f:72:35:a7:f2:1c:43:99:66:8b:73:e4:
01:1f:5c:2f:eb:0b:36:b2:a6:56:26:e9:5f:f0:3b:
f0:82:4f:ae:d3:69:d1:08:c3:b7:f9:58:5d:9b:e9:
84:9a:2b:1a:83:c7:ce:9f:3c:4c:31:f5:d3:74:0f:
d9:44:d9:84:ee:10:19:17:29:59:9d:1a:bb:6a:1a:
4c:24:eb:5b:af:24:c9:e2:9c:ef:9a:4d:ce:93:53:
d3:a6:34:82:5f:b1:e0:9f:14:3c:9d:29:46:b1:f7:
1c:4e:60:a7:0c:54:61:85:b7:5b:95:d7:a7:c9:35:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:29:0D:44:65:BB:B1:35:AE:72:7A:93:03:68:A3:AD:7A:67:81:F8
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c8:36:47:dc:81:7f:2d:3d:22:13:87:d5:e9:ce:8e:b6:2f:
bc:67:9d:d2:0e:63:65:4d:ec:7e:28:f7:71:d1:49:d9:40:1d:
fc:38:90:0e:99:04:41:a7:f6:80:71:00:b9:9c:a1:5b:b0:bc:
de:9a:ac:0e:ee:8b:68:47:73:26:44:5d:fe:8f:74:26:93:b4:
c8:43:1f:11:0b:fa:d9:a7:bd:1f:2d:6a:2e:cc:27:78:77:c2:
7b:c4:e0:b9:44:0f:92:a5:68:da:6b:a3:d5:11:d1:7f:01:2b:
a0:34:13:36:58:c7:2d:a3:ca:b0:97:94:0e:58:d6:26:bd:b0:
4e:21:86:e3:45:b7:83:30:22:26:a2:39:cf:6b:13:79:b6:ae:
94:e1:13:7e:84:90:80:96:08:d1:60:ed:ca:d9:1c:3e:37:b4:
7d:d4:02:4e:a1:03:b8:6a:75:c3:cd:21:05:41:3f:1a:31:a2:
96:ca:3f:7d:08:2d:7a:8a:23:a9:e3:76:05:ad:c3:02:b6:c3:
d0:09:cb:af:55:92:81:16:59:a2:0e:71:2c:18:c8:5b:07:af:
c5:39:e1:59:5d:09:47:5a:ce:4c:2f:40:4f:6d:ea:33:13:dd:
b4:bc:7c:50:8f:f6:01:75:43:5f:03:ba:4f:a9:d1:4b:e9:8a:
2d:74:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:46 2026 by rpki-client