
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
File: 4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json)
Hash identifier: 6+nzpT+rZmx0OkVZtz6ZlzMF/CS72uMymCcIus9p2aU=
Subject key identifier: E0:D1:F7:84:09:F0:D1:28:89:8A:C8:9A:C0:9F:C4:72:05:4D:FF:5A
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
Manifest number: 026D
Signing time: Mon 27 Jul 2026 03:33:26 +0000
Manifest this update: Mon 27 Jul 2026 03:33:25 +0000
Manifest next update: Mon 03 Aug 2026 03:33:25 +0000
Files and hashes: 1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: HvAShZvIcccKCIg11xmjWT2tIEMvwLkpJcBeQz0i9+Q=)
2: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=)
3: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=)
4: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=)
5: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Validity
Not Before: Jul 27 03:33:25 2026 GMT
Not After : Aug 3 03:33:25 2026 GMT
Subject: CN=6a66d185-8944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:08:38:21:2b:60:6a:40:bf:e4:e2:0e:80:
00:6b:48:7c:3e:a0:d9:a8:58:6a:23:62:69:ef:57:
45:44:d1:2e:a1:86:11:a1:7f:56:fc:c8:d3:7a:63:
66:65:d9:f5:f6:65:29:98:e7:47:fa:d0:25:4f:5c:
15:a7:3f:f6:40:18:ca:01:d6:66:48:a0:28:ef:5f:
6a:64:88:ae:83:68:ba:dd:91:e5:e3:78:63:fe:36:
28:b7:2f:c8:f9:2d:b0:64:1d:40:27:3b:a4:d6:31:
06:c5:39:83:38:e5:af:ad:78:1a:cb:f4:ea:e0:b4:
26:85:cd:96:5f:fe:b8:a2:c1:99:45:da:3c:de:59:
02:50:de:42:01:f1:54:31:ba:d0:dd:58:15:de:e4:
3d:f5:0b:d0:ae:39:ba:b4:89:0c:48:3a:16:2a:34:
ff:d4:68:d1:d0:f9:1e:8f:f3:69:21:a4:4b:f5:78:
87:8f:45:c4:fd:03:bd:e9:cc:07:85:30:a0:47:7f:
4a:ea:d6:63:f6:70:51:41:5e:3b:9f:cb:df:77:95:
f2:b2:74:07:64:1f:76:94:ff:1b:bc:df:11:9f:3f:
49:2e:04:0c:fa:3a:ef:34:1a:f6:b3:f9:77:99:08:
22:cb:d3:21:6d:39:bc:97:db:62:c1:44:d1:4a:08:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D1:F7:84:09:F0:D1:28:89:8A:C8:9A:C0:9F:C4:72:05:4D:FF:5A
X509v3 Authority Key Identifier:
keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:6f:2b:a5:d6:b9:a6:fe:ed:04:b0:37:a5:6e:86:09:59:
af:d0:e1:09:2c:a8:6b:ec:f7:65:70:3e:a4:9e:16:be:b2:71:
4d:ad:30:10:e9:70:0f:cf:d2:50:95:85:16:ef:53:af:92:19:
ec:ee:02:b5:ed:c2:9e:71:73:48:79:15:1f:cb:fa:e6:f1:ff:
60:19:19:de:47:86:cc:9e:93:4f:0c:e8:5c:88:57:2c:19:72:
dd:6b:06:7e:e8:ef:9d:d0:93:f4:d4:5b:02:9e:9e:0f:be:78:
22:cd:c2:7c:69:d7:3f:d4:07:00:e1:dd:d6:85:2d:66:23:7b:
51:4b:51:9a:99:4b:a1:d1:83:a6:56:73:72:b5:dc:f0:70:1d:
a4:ad:35:2f:e9:88:70:d5:1c:69:9e:20:9e:89:77:b7:41:a8:
64:e8:3f:88:5c:6c:ff:21:be:e6:b4:35:6e:17:44:fd:7d:3e:
47:f6:7a:db:6d:ff:08:30:04:df:96:da:fb:2f:d2:55:85:c8:
c2:df:01:76:24:95:51:2a:a7:9f:18:e6:8d:32:96:d9:9b:ab:
49:c7:4f:62:7a:6b:81:af:94:ca:60:de:b0:a0:76:aa:1b:0b:
dd:d8:7f:a6:8c:15:23:fe:51:94:ff:e9:e3:5c:31:a7:62:30:
14:d6:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:10 2026 by rpki-client