
$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier: NsLN6Z37J6xve4XO4po/juTR1yPvETAbaEsENHc8qoA=
Subject key identifier: 43:39:B0:F0:6A:68:18:5E:10:FD:7D:ED:D5:5B:7F:A8:F8:85:6F:CE
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial: 0930
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number: 0930
Signing time: Sun 26 Jul 2026 20:45:17 +0000
Manifest this update: Sun 26 Jul 2026 20:45:16 +0000
Manifest next update: Sun 02 Aug 2026 20:45:16 +0000
Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: njwfFIsyZL1O5THYt4E9WPi88dX3lz9TwP6ks5HE4oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2352 (0x930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Validity
Not Before: Jul 26 20:45:16 2026 GMT
Not After : Aug 2 20:45:16 2026 GMT
Subject: CN=6a6671dd-22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:ab:53:0f:17:05:d5:0e:ee:fa:d9:7f:39:
17:06:04:21:8d:22:c3:08:2a:1c:dd:69:73:21:55:
36:1f:2e:b3:3a:58:60:73:33:f5:e2:f4:97:11:e7:
e7:11:90:63:f5:74:25:bb:18:8a:59:25:3f:e9:5f:
8a:52:ac:b6:ca:5d:ba:a2:b6:59:82:ad:c7:63:0e:
73:1e:85:b1:f6:ed:0b:b6:cb:05:e9:00:f9:4f:ea:
75:ad:0b:72:72:11:f7:4e:55:9c:e9:56:1b:eb:cf:
4d:4e:ec:9b:68:e3:a7:61:ab:f5:4c:9d:1b:08:39:
6b:dd:55:89:24:56:12:fd:86:29:60:c1:62:cc:76:
d6:a2:0b:f3:78:7d:c9:8e:fa:8f:fa:f1:35:85:16:
91:e1:88:52:ec:36:1b:45:21:84:dc:72:59:35:22:
b1:8f:73:b1:b7:8d:91:d2:e7:8f:5e:3d:01:43:b6:
50:95:8b:95:f9:e2:13:eb:ad:a9:6a:ca:6b:e3:13:
1a:ca:a7:76:74:9d:b9:11:ac:15:74:c3:fd:e6:90:
81:c3:a4:72:12:5f:ec:50:7d:14:11:65:40:d7:ff:
da:cd:d1:77:de:67:bb:92:97:bf:c6:25:51:cf:c9:
6c:03:15:a8:b6:dc:25:3b:de:0a:e9:a3:d9:88:42:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:39:B0:F0:6A:68:18:5E:10:FD:7D:ED:D5:5B:7F:A8:F8:85:6F:CE
X509v3 Authority Key Identifier:
keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e0:be:43:67:e0:7c:03:f2:e5:63:cb:7a:b7:99:b5:79:1d:
ba:8d:33:1d:65:d9:17:31:8c:7e:ea:8d:25:4b:48:7a:fe:ed:
ce:01:a8:52:67:79:17:4a:c7:90:ea:a6:26:4f:ba:17:5d:ee:
fe:df:85:45:15:24:bd:dd:39:35:80:a4:1d:d5:68:6f:28:5f:
9f:da:36:1c:71:d4:91:a9:65:31:3f:c6:66:32:91:0c:0a:56:
9b:a6:73:33:a4:10:c0:bf:ed:84:96:e2:80:cd:71:2e:bd:0f:
2b:46:15:a6:b9:e2:08:96:12:3c:62:4c:a1:51:02:46:d7:d7:
b1:b1:bc:f9:0c:97:7d:09:df:b2:5e:8e:90:9a:f8:f9:8e:af:
72:98:ab:9f:e3:95:3a:14:28:d8:c1:1c:48:c5:60:c7:7f:aa:
e7:73:ab:b0:47:82:04:33:17:20:95:f6:5f:da:7a:fe:93:ce:
f2:7c:c3:cb:4a:e6:2d:61:68:f9:d9:04:a6:67:d0:96:25:87:
95:1b:be:97:ee:ed:8f:74:0a:26:d6:dc:db:71:37:8c:97:f0:
36:0a:d4:ba:d7:55:a1:b9:c4:2e:75:26:46:c7:07:cb:0b:43:
23:69:b0:28:06:3f:34:52:12:3a:89:0c:77:94:7b:3d:3d:7b:
ee:9a:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:55 2026 by rpki-client