
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier: lRB9q97UjBl5x5iqPHjVuJz3O1ml2RL6ywxRbAGiPyw=
Subject key identifier: C6:49:42:46:9C:55:36:94:80:D5:ED:6E:0B:61:F0:76:95:74:66:BD
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number: D6
Signing time: Mon 27 Jul 2026 08:45:55 +0000
Manifest this update: Mon 27 Jul 2026 08:45:54 +0000
Manifest next update: Mon 03 Aug 2026 08:45:54 +0000
Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: atuUpLLEZfhWrLUo4GzcGUlgDusce7ibm1UcdZZGuWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Validity
Not Before: Jul 27 08:45:54 2026 GMT
Not After : Aug 3 08:45:54 2026 GMT
Subject: CN=6a671ac3-8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:4e:bc:94:05:11:98:a7:d6:dc:b2:10:28:
83:03:45:a9:c4:a6:16:10:ff:18:20:49:ec:27:bf:
26:7b:5b:e2:39:0a:5d:a1:29:b2:03:0d:53:4d:1a:
39:46:b1:ec:be:35:e3:33:67:ab:fb:ac:46:27:8c:
4d:65:58:ae:ac:69:4b:e0:64:4b:7e:d9:e0:9d:f6:
28:b8:87:bd:19:26:15:5f:32:1d:f3:97:44:6f:2a:
54:70:bd:e6:c6:d7:76:7c:13:4b:fc:50:a4:5a:2b:
15:71:eb:11:44:5e:21:49:c6:05:8c:dc:00:3a:f2:
22:f2:92:c6:b4:45:a2:bb:10:bb:7c:42:1a:ce:75:
ab:2e:e5:e5:c4:9f:6d:99:b0:c5:1d:88:42:a9:a9:
c1:f2:62:ec:7d:2d:11:37:3d:36:70:25:f1:63:7c:
c0:6b:fe:b9:d5:c9:57:31:5c:63:95:33:89:52:af:
33:5d:f8:d0:b6:9a:ca:38:30:e7:c7:72:0b:14:9f:
ef:00:8c:1a:d8:b9:13:6e:0b:79:7a:6a:07:51:87:
74:d5:1b:85:87:fc:03:6c:1d:2e:f9:9c:e1:f6:8f:
71:13:27:57:87:8c:49:20:ea:fa:c5:84:38:97:e3:
44:a1:5e:30:3d:be:33:1e:97:bc:b3:19:d0:08:c8:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:42:46:9C:55:36:94:80:D5:ED:6E:0B:61:F0:76:95:74:66:BD
X509v3 Authority Key Identifier:
keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:f6:ec:ed:ff:2d:f4:42:51:9b:27:14:c2:ab:28:37:aa:
27:64:0a:cd:ea:94:dd:f6:24:2a:0a:77:b0:08:e7:ff:1b:e4:
af:5f:a3:35:b7:4f:07:4a:ed:db:d2:b6:fe:6c:cb:47:63:f6:
fe:87:dc:69:af:f7:da:e7:0a:6f:3a:25:1b:7f:9a:c1:e6:99:
18:3c:a0:e1:72:e5:a9:03:30:83:f3:58:7d:eb:5d:3d:4a:42:
94:c3:3d:60:3b:10:02:93:4c:fd:61:6d:4f:f2:1c:3e:e6:6a:
d3:4f:72:7d:4b:40:90:67:e5:d3:52:d3:6c:58:9d:c0:5e:68:
65:81:68:a9:d0:95:62:4d:2d:26:08:e8:ed:7a:f5:16:1b:c2:
d8:be:24:34:77:0a:56:4c:b8:97:00:98:a4:0f:db:dc:c7:28:
ab:20:fa:44:fe:e3:ab:4f:d3:9e:b1:2c:77:8c:d2:72:90:5a:
9c:b0:07:ac:6c:2a:76:1f:53:a8:fc:67:2b:0e:e4:74:17:09:
16:14:5e:1e:b9:d0:6f:d3:c5:93:06:78:12:ac:83:c5:b1:74:
d8:12:95:6a:6d:2f:cb:da:80:1a:4d:be:8a:91:e2:f1:17:87:
f4:a2:40:b9:b6:12:5c:8c:26:8d:0a:19:a4:d5:de:70:a4:a0:
b4:a5:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:42 2026 by rpki-client