
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier: 9G7LODXk1hYLzMG3t4Hnhp09+5L1Av19RBzz3n2rA6w=
Subject key identifier: C9:FF:5B:E9:12:1B:9A:F5:3C:97:E2:0F:D0:5E:59:92:C5:0C:C0:4C
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number: 014C
Signing time: Mon 27 Jul 2026 07:10:19 +0000
Manifest this update: Mon 27 Jul 2026 07:10:19 +0000
Manifest next update: Mon 03 Aug 2026 07:10:19 +0000
Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: TX6CYpofGCNFDTCzC+Sbi/2OOfgJhaxJiJdDJ3YHdto=)
2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: GWxvbbNMDfEq6GjtAEuqf8igE/KKZ5xAZH6r5owzQZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Validity
Not Before: Jul 27 07:10:19 2026 GMT
Not After : Aug 3 07:10:19 2026 GMT
Subject: CN=6a67045b-5cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:f1:fe:4b:9e:e9:8b:95:58:9d:9e:d5:45:
9d:a5:06:9e:40:81:fd:85:cf:a3:6a:99:9f:50:63:
47:f0:46:8d:1f:bd:26:ca:f9:91:0e:1e:b3:50:08:
be:c3:06:ec:2f:b5:a8:63:90:12:aa:ea:9a:52:d3:
c7:ec:0c:3c:3e:6a:bf:2d:67:27:c1:43:64:1a:df:
ad:d0:2b:fa:9a:c5:f1:e6:7a:5b:5d:2e:a6:f5:f6:
3d:b5:75:f7:0c:7f:0f:cd:a6:bf:c5:d7:6e:ef:a8:
df:96:51:e1:8d:b5:d9:41:bd:b2:4f:c6:f2:65:33:
30:b2:d1:ff:c9:1b:02:c1:ab:dc:b8:e3:23:bd:d0:
98:15:26:60:7b:54:09:89:97:62:ce:81:95:54:70:
d1:91:5e:5a:b4:77:53:d7:56:1b:fa:5b:3f:04:2d:
be:d9:1c:5a:7e:10:d6:b0:1c:9b:dd:12:a0:02:d8:
22:54:5e:61:a9:bc:dc:01:79:f2:63:b4:2d:28:7a:
05:55:a7:c0:28:79:f9:06:f1:24:41:76:96:c6:59:
90:1a:8a:25:a9:01:60:c0:35:90:0b:69:2b:f8:bb:
76:00:f5:8c:bd:ff:fc:75:b9:26:95:c6:a5:81:80:
d8:5e:2f:31:e6:7c:b4:ed:07:03:52:d4:57:53:05:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:5B:E9:12:1B:9A:F5:3C:97:E2:0F:D0:5E:59:92:C5:0C:C0:4C
X509v3 Authority Key Identifier:
keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:52:b8:a1:1e:d7:de:45:58:20:9e:41:eb:d2:0e:8d:e7:
e0:b4:4e:dc:a2:7e:94:45:28:0d:4d:94:ef:f5:15:9e:b5:ec:
c3:26:6d:28:b9:59:3d:40:8c:a5:c5:8e:c6:c6:9e:95:09:0b:
48:ab:7d:60:96:df:fa:29:f5:da:a4:32:31:fd:c7:36:5b:e0:
3d:72:8d:e7:12:d1:16:49:cd:e4:d0:25:e7:07:b7:45:f3:eb:
72:eb:15:fa:ca:08:4b:b2:a2:03:8a:74:96:6c:f0:1b:97:ea:
3d:8d:24:85:59:6f:db:5b:22:5f:1c:6a:21:6f:37:89:ac:cd:
76:d3:5d:2b:eb:88:61:44:a7:99:23:9f:e7:12:14:98:00:b8:
ad:9f:9e:78:ad:87:3d:2b:0f:64:50:fc:47:f7:ac:0d:4d:24:
fd:b5:7a:6e:a0:97:97:9b:7c:fd:70:38:13:3a:18:ec:e0:c3:
83:c6:e6:23:79:53:d7:38:94:e8:2e:31:24:eb:f7:62:19:01:
ba:9d:81:84:89:76:75:47:45:f2:13:33:7a:6e:3c:13:4a:38:
22:88:d1:01:3e:09:54:07:52:c8:a3:2b:99:b8:7b:26:06:a2:
51:28:6f:f1:d0:ec:fe:67:6c:58:70:16:f8:40:41:9e:8f:5a:
3c:ce:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:11 2026 by rpki-client