
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier: gLQtVHv4uqnn1VnvkEAE6tMMjUTX8ho82C3bmtR7psQ=
Subject key identifier: BE:0F:FC:07:E3:4D:90:EC:34:BC:B1:F7:27:47:A7:14:61:A2:C4:A4
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0DA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number: 0D81
Signing time: Tue 28 Jul 2026 18:04:57 +0000
Manifest this update: Tue 28 Jul 2026 18:04:57 +0000
Manifest next update: Tue 04 Aug 2026 18:04:57 +0000
Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: p+GT1DYxcSlIoJHgs3/4J2W2TldreUi5vAomqEsUyf0=)
2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
4: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
5: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3493 (0xda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Validity
Not Before: Jul 28 18:04:57 2026 GMT
Not After : Aug 4 18:04:57 2026 GMT
Subject: CN=6a68ef49-00e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:73:e8:11:9d:d7:7f:ab:84:73:7e:0c:c2:
28:41:e4:6c:d1:35:38:84:68:21:6f:76:9b:4e:5f:
f5:02:76:1f:2c:46:bf:4d:c0:f9:b6:2d:f1:79:f4:
22:dc:0c:99:98:8d:ff:18:65:22:30:6b:8e:dc:60:
a9:23:47:ef:93:61:b2:12:d6:0e:40:5f:b2:06:58:
b8:ba:ec:0b:37:4e:46:4d:38:3c:64:ab:cc:ce:72:
95:a0:47:85:43:60:bf:09:5b:91:61:e2:e5:88:9c:
f7:fe:a9:f3:7a:5c:b5:e8:6c:96:83:3e:07:c3:05:
e7:5f:57:64:02:f4:c5:50:fd:10:77:27:94:79:06:
3f:ed:30:f1:7a:ed:40:c2:64:55:c5:5b:98:63:d2:
87:7a:08:6c:26:1f:21:82:ab:98:8b:a3:66:07:4c:
e7:1b:19:48:c0:5e:a7:b0:37:f9:47:49:3e:12:07:
bd:d5:df:70:32:61:39:46:67:06:1e:1c:a2:9d:f5:
e4:81:63:00:5a:65:87:69:f3:a4:cf:d2:ad:1f:ab:
23:41:70:a9:07:7a:1d:94:25:be:1d:6d:e0:73:9f:
23:d9:09:5b:b3:1b:c2:b0:df:e0:32:83:09:c9:45:
1e:1a:de:af:cb:17:c9:60:c8:a6:57:93:a2:55:fc:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:FC:07:E3:4D:90:EC:34:BC:B1:F7:27:47:A7:14:61:A2:C4:A4
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:8a:29:ff:9d:a9:2e:d3:87:61:83:72:48:b4:61:5b:94:
8f:12:a5:98:bc:e5:0e:73:d1:36:74:6a:dd:34:fb:cd:f0:22:
e6:5e:0b:b2:02:ac:1e:24:d0:c4:cc:2e:b2:1f:58:2b:42:ba:
1b:ac:92:51:9b:80:d8:e2:16:71:48:74:26:dd:75:93:47:5c:
0e:e2:5b:fb:53:15:5c:61:99:9b:02:d6:3e:cf:cf:38:e0:c0:
c8:14:3b:77:25:fc:87:ff:bb:5e:cb:c7:a4:ea:6f:89:c2:00:
86:fb:0e:bf:0a:61:a8:3b:3a:72:a9:4b:f1:1c:78:8e:b3:52:
bf:4b:ba:50:7b:04:70:ce:14:34:f3:40:82:12:23:95:9a:1b:
ba:a7:ca:71:03:45:55:60:a7:ef:08:38:68:13:95:0e:4d:c1:
21:9d:90:3a:49:83:16:3e:f2:3b:e4:a2:aa:1c:a9:ca:fc:4d:
5c:79:a5:16:bb:3e:61:fc:2f:97:f6:54:bb:bf:26:9b:f4:32:
ac:d9:16:1c:81:b6:88:d1:db:62:e8:23:fe:be:9a:07:59:e0:
c7:ed:ad:f3:f1:fc:03:83:84:93:1f:6f:4d:70:7d:5e:ef:ed:
62:7d:01:5c:34:0a:c8:95:71:b3:43:ed:7c:b8:e8:5a:b7:9e:
28:15:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:33:22 2026 by rpki-client