
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File: b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier: rNRfyJ+cY9pxClObHnSkzoGRvvGR7tsrBYuksUnrSjc=
Subject key identifier: 1E:61:3C:88:0D:42:4D:F7:F0:EC:9E:76:BF:F2:8E:54:0A:10:1E:EF
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial: 0D59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number: 0D39
Signing time: Tue 28 Jul 2026 18:22:39 +0000
Manifest this update: Tue 28 Jul 2026 18:22:39 +0000
Manifest next update: Tue 04 Aug 2026 18:22:39 +0000
Files and hashes: 1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: qmZrYNTnSAkC8zsLZqcyjL/OYsNwAH9xYpVLgHkWP0w=)
2: 199C4122356411F199EC77DFBA833773.roa (hash: jLm/t28O9sTMUghv6g0V6EwX1BiyfqhzThDCVYjStnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Validity
Not Before: Jul 28 18:22:39 2026 GMT
Not After : Aug 4 18:22:39 2026 GMT
Subject: CN=6a68f36f-7615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:68:47:47:65:35:a1:c2:f1:33:3a:87:f1:
87:60:9c:df:9c:12:f6:01:d3:d8:46:85:9d:d9:d9:
6b:7c:e8:e1:89:74:e2:fe:4d:d4:89:dd:6f:5f:52:
01:1c:10:ae:8c:dc:21:85:82:d1:8a:ed:22:a2:63:
d0:fd:d6:c6:3e:a5:6e:01:7a:a9:a2:60:22:fd:5f:
15:ee:13:58:bb:45:20:16:3d:45:e7:2e:93:96:16:
44:5b:12:9f:4b:a0:3c:03:7a:94:eb:5b:5a:ca:d5:
1b:bf:77:ef:3d:36:f2:3e:fe:82:aa:b5:04:16:97:
f1:e7:26:92:51:17:2c:ce:d5:99:dd:1b:82:aa:5c:
4a:dc:a5:5b:28:fc:de:ad:a5:f6:75:fd:e2:4d:f4:
94:77:59:76:a2:1e:50:9e:18:3d:d9:a3:7e:50:05:
c5:bc:c4:ca:dd:a9:85:aa:42:67:be:44:85:22:07:
35:61:df:bc:66:b2:8d:f5:f8:99:6e:7a:ba:42:71:
4a:7d:59:07:cc:fb:dd:39:f5:36:a6:3b:76:cb:48:
6a:79:75:a7:90:03:46:51:69:15:53:9e:69:d5:c8:
2d:60:4f:7f:c3:94:75:cd:a4:42:52:ec:55:34:5d:
62:8a:4d:b1:f5:6a:11:58:59:dc:5f:04:39:cf:43:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:3C:88:0D:42:4D:F7:F0:EC:9E:76:BF:F2:8E:54:0A:10:1E:EF
X509v3 Authority Key Identifier:
keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:40:f2:39:c8:1f:09:2e:da:7a:04:52:f9:c6:79:c5:30:32:
4e:f5:57:c7:ff:7e:11:67:b4:44:26:d8:fd:09:74:74:56:bc:
56:c2:8d:f0:a0:0f:f2:6b:92:ba:2d:05:ee:29:95:49:55:80:
c7:8b:24:39:a9:57:02:bb:6e:dd:14:83:c1:ba:10:c3:39:6e:
ae:6a:b3:2e:1c:bf:c5:6d:1e:c3:05:ee:d3:60:3e:81:3f:1d:
87:53:c0:09:f1:e5:4f:9f:1f:4c:aa:7c:4a:16:65:bc:c4:01:
99:f9:f4:3e:fb:a3:10:79:6f:f9:a4:f1:18:b1:1f:67:40:30:
0c:64:c4:b7:cf:69:e4:0b:0a:72:d2:60:78:da:90:f8:0e:9e:
7c:6e:15:3a:7b:8d:a4:32:2e:bf:93:e2:e9:ad:3a:79:5d:71:
2e:aa:3d:21:38:7c:c3:05:7a:9c:22:a6:0e:b9:c3:e0:32:23:
22:5f:84:3c:7e:38:63:9e:a5:9e:a1:27:0b:4b:ec:39:67:db:
cf:f3:79:0e:5c:5f:fb:1b:17:a2:5d:a3:40:09:73:cc:ed:19:
14:88:01:ff:cb:ab:a3:f1:69:77:85:45:ff:f3:27:4a:41:1f:
a3:1f:ec:80:55:ad:3e:69:9e:50:a9:c8:71:f8:b9:64:79:4d:
d1:3b:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:46 2026 by rpki-client