
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier: K3ltBZ78zLQfhTA41K4oFWeXkCzqHQe/b4qUNylb7R0=
Subject key identifier: 15:B2:26:96:AE:21:4D:38:F6:72:DB:B9:FA:FE:CE:23:CA:8B:2A:B9
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number: 5B
Signing time: Mon 27 Jul 2026 10:29:08 +0000
Manifest this update: Mon 27 Jul 2026 10:29:07 +0000
Manifest next update: Mon 03 Aug 2026 10:29:07 +0000
Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: b2Ep9RJQXd8pKZisCKVCyvi5yC5VlaAxsVXjPm13yqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Validity
Not Before: Jul 27 10:29:07 2026 GMT
Not After : Aug 3 10:29:07 2026 GMT
Subject: CN=6a6732f4-721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:57:ad:8c:31:ad:70:95:34:a6:5e:15:37:
e5:e3:25:74:42:bb:5b:7f:80:5b:5b:15:47:1d:1d:
c9:a5:a7:9d:40:45:68:25:ec:8c:b8:52:1c:09:31:
ae:0c:39:cd:db:b1:c5:c8:56:48:1a:23:2e:eb:c4:
8c:28:11:61:3d:4a:cc:36:83:85:2b:90:e4:4f:27:
c4:24:3d:b6:40:90:bd:3a:b3:93:bc:a8:e4:65:84:
32:8e:d6:bd:85:96:05:cf:27:ac:e7:e8:17:d6:4c:
86:25:f0:1d:b9:80:54:29:22:62:eb:d5:33:7d:b5:
b4:04:96:bc:4c:2c:ee:1a:24:30:f7:28:51:ed:4c:
9d:cf:c6:73:22:18:37:0d:14:a0:1a:6a:ca:eb:ac:
63:bc:ae:af:6c:f5:76:0f:0d:2c:7a:38:e0:d4:9e:
78:80:cf:bb:fe:7e:e6:d6:51:bd:53:a2:7a:da:7e:
e7:7e:c7:19:12:08:3d:d1:c4:76:18:d8:a9:f4:8f:
7e:06:9b:54:30:8a:b9:a9:f4:50:d4:39:db:d0:43:
5c:b4:f9:21:d7:fe:a6:5f:56:c7:5e:6d:f7:61:7a:
86:06:bf:77:9e:b6:c3:c2:a6:47:2b:c1:f5:21:42:
70:d3:e9:19:e9:29:15:09:ec:f6:7d:26:74:58:65:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:26:96:AE:21:4D:38:F6:72:DB:B9:FA:FE:CE:23:CA:8B:2A:B9
X509v3 Authority Key Identifier:
keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7a:84:ed:67:ff:ca:9c:7e:ca:3f:4f:3a:70:d9:4b:22:d1:
e2:72:b5:82:93:aa:b1:1e:52:a8:04:c7:7a:e2:5b:0c:73:b5:
1c:02:ef:c4:cd:a7:1a:7c:cd:de:67:bd:b6:d1:a8:e5:63:1c:
33:e9:ef:85:fd:d4:c7:1b:87:1a:4a:09:dd:dd:17:f4:e4:1c:
82:32:99:3e:81:91:29:aa:8e:eb:3f:12:66:a0:bf:40:12:10:
ad:b4:14:f4:50:33:7c:c7:f2:a1:4e:78:3b:ee:78:9d:0a:97:
9f:8e:60:11:4d:78:85:ab:bd:c4:ed:f7:fe:1d:86:ff:d6:49:
c2:3f:4a:5a:44:97:16:49:c1:45:44:eb:e8:12:60:86:28:37:
75:3c:06:44:d8:e4:5c:48:71:31:d7:34:40:37:db:37:b8:87:
4b:4a:37:f1:dc:62:80:fd:5d:b2:de:e9:3d:25:58:16:d1:40:
d9:02:fc:8a:20:e2:b8:62:05:18:c1:ee:50:28:c8:ad:89:3e:
b1:55:38:d1:54:6e:07:28:a0:8a:2f:45:32:09:62:d3:6a:fe:
3f:31:14:21:40:64:1b:18:f5:5b:3b:12:48:e7:aa:56:de:e5:
ba:97:10:b8:4a:21:c9:a1:46:c8:93:c7:1c:3e:df:42:00:d9:
4e:dc:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:08 2026 by rpki-client