
$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier: +UZsj7IspmaqEi0EzaRUihOAXt7qn6vMjMze9I1PmLg=
Subject key identifier: E6:22:28:C3:A4:6E:9E:15:1E:43:C0:81:D6:5A:2F:72:A2:4C:7E:FC
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0F9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number: 0F89
Signing time: Tue 28 Jul 2026 17:37:31 +0000
Manifest this update: Tue 28 Jul 2026 17:37:30 +0000
Manifest next update: Tue 04 Aug 2026 17:37:30 +0000
Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: hhsALGhXr++qF0PwIDp7w2L0HFKMOmd8xStQSJUMg88=)
2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3997 (0xf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Jul 28 17:37:30 2026 GMT
Not After : Aug 4 17:37:30 2026 GMT
Subject: CN=6a68e8db-07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:76:a4:20:23:05:be:41:8a:d8:2f:8b:de:
a1:42:e5:73:6b:75:7b:9d:4b:49:8f:ab:5d:db:13:
d0:ee:69:82:3e:bc:09:45:1a:f1:08:79:98:52:d0:
45:aa:6a:74:67:86:e3:d1:79:58:e0:b1:b0:d4:d3:
8c:c1:bc:ec:4b:3a:bd:7e:3a:17:77:b2:6a:36:ee:
fb:29:ee:3b:c3:14:72:73:b9:a6:06:96:75:28:02:
d5:5d:b2:62:cd:ee:c8:f4:34:1e:68:6f:70:1f:bd:
79:f1:b1:74:4a:87:a1:0f:6c:41:ef:41:e3:0d:dd:
41:e1:d4:4c:ea:f3:38:03:e5:73:09:fb:c7:cc:d0:
6d:9e:2e:6b:84:04:44:79:23:50:c5:be:0e:9b:48:
51:c6:4e:f8:c3:c0:cc:73:9d:8d:9a:60:36:4f:b4:
52:18:88:da:43:07:e8:2c:2e:2c:74:a9:0d:2d:27:
c4:c4:ff:28:6e:27:4b:3e:cb:83:19:e8:0e:98:7a:
32:b8:30:77:f2:bc:4f:3e:e0:0c:f7:26:93:4a:c6:
bc:0e:73:82:25:36:27:b1:96:ca:ee:c0:d7:51:dc:
b9:79:2c:77:28:ba:be:74:8e:47:67:4e:18:49:d9:
3e:a7:55:66:21:28:e7:36:6b:6b:90:0e:4c:c3:0b:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:22:28:C3:A4:6E:9E:15:1E:43:C0:81:D6:5A:2F:72:A2:4C:7E:FC
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:8e:20:35:4b:f4:eb:38:6f:0c:19:9a:e4:4a:fb:c1:50:
98:32:58:1e:f6:f4:40:96:76:91:ed:01:26:a7:97:28:2b:c0:
bd:7b:9c:de:7f:b5:93:3a:33:f3:3d:18:dd:33:c9:1a:e5:36:
bc:a5:f6:de:62:bf:dc:ca:6a:2e:60:c7:77:d0:0b:d0:b7:04:
a3:68:23:81:0b:15:d1:fd:d8:51:3d:72:d5:cf:7f:b8:55:ec:
a9:e8:67:a8:43:ac:3c:1c:e7:92:ed:fe:31:d4:77:ee:01:22:
cf:72:14:7e:a9:19:45:39:16:50:70:ba:f3:a5:f9:87:a7:aa:
4a:d3:51:1c:85:5b:b4:a7:e0:9a:5a:7d:54:8b:ca:02:bd:e1:
4c:f3:fc:78:41:d5:77:15:2b:23:f8:9e:19:21:c9:ce:2a:ca:
65:87:7a:d5:37:d1:be:f2:7f:ae:e9:4f:c7:59:13:cc:1d:c0:
0e:68:42:4c:67:b5:e1:85:cf:d8:38:e0:a0:66:b3:72:81:8e:
03:eb:b4:24:ed:2d:95:b0:4b:2b:37:bd:dc:0c:fc:5a:f7:c0:
2c:a4:7c:a1:c3:75:a3:a7:f4:dc:41:c9:8f:79:16:c8:46:2b:
33:8a:49:7a:75:c2:ac:2d:0a:e4:91:d7:9a:cc:3b:d3:96:b8:
b6:a7:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:16 2026 by rpki-client