
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json)
Hash identifier: HI2m3nx46a3snXQrN5Cbysn/+ABG7n/zZczE+bNUuQE=
Subject key identifier: A7:E3:23:0A:89:23:3D:DD:BD:6D:2C:A5:42:07:9B:AA:04:0C:45:30
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial: 0FAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
Manifest number: 0F92
Signing time: Tue 28 Jul 2026 17:38:21 +0000
Manifest this update: Tue 28 Jul 2026 17:38:21 +0000
Manifest next update: Tue 04 Aug 2026 17:38:21 +0000
Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: Ue+0iQbwE1HADw/KtRJ54OFmYWcSZMeS5YcASf7lsZk=)
2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4012 (0xfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Validity
Not Before: Jul 28 17:38:21 2026 GMT
Not After : Aug 4 17:38:21 2026 GMT
Subject: CN=6a68e90d-69ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:9e:1d:69:1f:81:47:cf:d7:1b:8f:a4:2c:
a0:b1:2d:da:18:87:ac:d9:1d:83:25:e6:c2:fd:7a:
d6:78:46:3c:00:aa:5d:0a:9a:66:e7:0b:7d:f6:2c:
62:05:80:70:c2:99:6a:ae:15:a7:24:aa:19:ef:06:
2a:e4:42:8d:26:2a:de:65:cc:a5:b4:21:73:7b:c5:
31:46:74:44:be:86:e5:24:87:99:24:3e:04:c4:5f:
84:c3:99:b4:28:68:e5:20:53:bd:da:99:3d:91:86:
90:80:4b:b9:d3:d1:34:69:43:d6:9c:38:7a:83:b6:
9f:9b:eb:b2:34:1d:7b:66:db:f8:e7:ba:cd:71:7d:
cc:3b:10:8f:d6:83:09:89:07:9b:74:44:01:46:f4:
a6:65:4e:d5:63:10:73:28:cc:69:06:71:29:fe:ff:
1d:2c:e9:f4:98:5d:f5:29:65:af:0d:d6:43:7e:36:
f6:15:bd:de:0c:04:1a:c7:d2:07:3f:e6:40:17:4b:
18:fe:7f:02:32:3b:12:7d:e4:e8:82:85:91:d0:4b:
be:32:8d:aa:1e:c8:5a:f0:bc:a5:0f:28:8b:2d:8f:
40:a6:e6:5a:6a:63:f3:45:b1:80:21:07:b3:71:5c:
c5:9e:ae:80:6a:6d:b4:53:6b:a5:e3:3e:f4:25:3c:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:23:0A:89:23:3D:DD:BD:6D:2C:A5:42:07:9B:AA:04:0C:45:30
X509v3 Authority Key Identifier:
keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:bc:de:39:72:a6:a1:5d:95:f4:7f:01:b9:4a:dd:fa:6c:ae:
d0:25:1c:36:a3:ef:0b:3c:e5:7e:74:c6:c9:29:6a:e4:40:73:
4c:5c:9f:73:40:42:26:cb:7b:34:62:ff:a3:32:64:2c:88:48:
91:7e:ad:a1:59:bf:b6:7b:4c:bc:3e:eb:ba:09:22:57:67:9e:
91:3e:8c:d9:f0:0c:7d:65:38:3c:ff:7c:8b:55:77:ba:4e:7e:
f7:f7:d0:10:d0:28:07:82:a1:6f:2c:3a:9e:bc:77:31:9f:ef:
60:11:4c:bb:c3:a2:5b:9a:14:d2:d2:77:4b:fb:f1:88:7c:84:
49:f6:e6:9a:b5:be:f9:2c:f1:3f:39:1b:8f:08:22:4f:10:73:
91:76:6e:0f:c6:93:5b:c4:20:e0:b6:c3:93:e2:2c:06:94:d0:
d9:18:0f:8e:78:51:35:42:bc:ab:4e:1f:30:21:a4:e8:d6:d3:
c6:3e:dd:a7:52:95:eb:a7:1e:34:27:ff:27:83:b3:38:2b:39:
92:80:38:01:25:bb:84:82:01:a9:74:d0:dc:94:e4:d7:2f:2a:
91:1a:98:67:7c:b8:3e:25:4a:b6:b7:71:3b:67:95:53:13:ec:
c2:f0:1b:8e:5e:00:32:19:46:fb:4f:a0:dd:a6:b4:7b:11:f9:
e4:1a:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:10 2026 by rpki-client