
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json)
Hash identifier: gqkIZpg8LdenoD0ICnAlPNy/CVGS0CDOR+XvkhL1v8s=
Subject key identifier: 70:CB:CA:FE:91:22:09:C1:3C:18:6F:A1:8B:BA:0B:37:2F:87:E4:10
Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
Manifest number: C2
Signing time: Mon 27 Jul 2026 09:03:27 +0000
Manifest this update: Mon 27 Jul 2026 09:03:26 +0000
Manifest next update: Mon 03 Aug 2026 09:03:26 +0000
Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: ed097On8CpbptddRlYzzHsSD+SHeM0bmB48mBT+3kOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Validity
Not Before: Jul 27 09:03:26 2026 GMT
Not After : Aug 3 09:03:26 2026 GMT
Subject: CN=6a671edf-5339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:6d:39:79:9a:e1:61:37:ca:75:82:8c:21:
2a:ef:b8:04:86:10:4e:4b:65:de:db:7e:f4:28:fe:
fe:1d:d9:63:c5:2a:e5:32:c9:d4:45:17:1c:4c:de:
11:ce:15:6d:fa:30:31:a3:71:40:c9:68:bb:c9:19:
ce:55:e4:54:3e:48:e5:8f:4e:e0:d8:3a:79:50:53:
04:e4:8b:14:ca:13:81:bd:45:10:e7:cd:15:28:e8:
05:1a:48:f7:a9:00:f8:e0:e8:bd:b4:1d:49:75:98:
93:4c:22:83:08:aa:00:fb:b0:2d:81:a7:f8:fd:fa:
e6:73:a4:27:84:fe:93:e1:e8:8f:9a:8d:a3:9e:a7:
1b:b7:f2:39:0c:ca:cc:28:e6:bd:65:24:e1:c0:4a:
3e:dd:04:c2:34:64:30:9d:b8:83:94:1e:fa:14:5e:
e1:75:c1:14:7b:a3:70:df:f2:c3:03:9e:5d:f6:bb:
c2:97:58:4d:8d:b8:9b:76:40:4f:13:dc:e8:f3:5f:
9e:21:f5:62:5d:95:5e:59:f9:be:2e:5a:67:5a:8c:
c6:c0:f4:6d:bd:65:10:96:a0:2f:2d:5e:25:65:5d:
8a:fd:fb:67:50:ff:8a:68:ef:16:cb:6e:03:34:34:
5a:1b:bf:8d:cb:2f:c8:9b:49:99:03:42:39:fc:f1:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:CA:FE:91:22:09:C1:3C:18:6F:A1:8B:BA:0B:37:2F:87:E4:10
X509v3 Authority Key Identifier:
keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:7e:36:43:76:e1:ef:4d:26:7a:a5:fd:02:e4:8b:fc:64:
e7:d9:7d:e5:96:8d:37:3b:5c:90:cd:35:a1:14:99:3b:c3:d7:
91:19:05:1d:35:3d:c7:6b:2d:2e:06:17:55:4d:ee:7d:c1:6b:
00:7c:32:dd:25:6e:7d:be:a2:e7:5e:6b:3e:58:a4:7d:a6:95:
54:30:ae:04:e7:aa:c0:42:33:16:fa:f9:b2:b9:ce:33:97:20:
c6:32:e1:ff:84:d7:5c:07:af:5a:04:4b:ad:52:33:2d:03:0d:
a2:44:41:bb:7f:d7:bc:d4:6f:b1:ee:07:3e:3a:df:8e:d3:40:
20:a9:e8:93:36:c5:4b:cb:1b:d1:73:3f:70:e7:aa:8c:c1:16:
9f:a1:91:16:9e:e6:7a:03:1e:a6:a8:65:0b:9a:8d:23:36:b3:
ab:2a:f4:75:10:62:7d:0f:03:9d:f7:cc:cd:01:12:e1:44:06:
0d:fd:21:18:ca:6c:da:03:26:9d:a5:fa:6b:00:ca:10:34:cd:
55:e7:4d:8a:af:6c:19:25:2c:59:a0:75:d6:d0:81:98:c8:be:
39:58:3b:b0:83:fc:41:3c:a8:c4:58:47:72:cb:84:53:dd:a8:
49:16:97:08:c2:e2:3d:40:63:34:88:1a:ca:a6:f0:f2:76:1c:
63:40:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:37 2026 by rpki-client