
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier: SYgoNxwPl1NF6uX6CUqNe/ajWu3rDzz1tB/o0MJjEcc=
Subject key identifier: 52:06:97:2A:AF:11:DD:5E:52:9D:21:20:11:13:37:D0:F3:42:81:2F
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial: 09ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number: 09E3
Signing time: Tue 28 Jul 2026 20:10:39 +0000
Manifest this update: Tue 28 Jul 2026 20:10:39 +0000
Manifest next update: Tue 04 Aug 2026 20:10:39 +0000
Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: 7UDJ4b/V+sWa86enU0eifW3LlNOPtDjERUmq19FJK0E=)
2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: TBAaKtqT6P0ZL94ya5hEsalq4rRbeHQQPW8oTHhvKeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2541 (0x9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Validity
Not Before: Jul 28 20:10:39 2026 GMT
Not After : Aug 4 20:10:39 2026 GMT
Subject: CN=6a690cbf-cf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:91:9e:73:b8:91:6d:64:9c:c6:2f:b0:01:
74:f9:a5:be:be:9d:ef:81:97:2e:1f:92:04:4e:7f:
8d:73:f5:0b:1e:a6:da:4e:c0:ba:e1:53:b1:8d:52:
4a:3f:f5:d8:9d:85:72:9a:b7:5f:6c:59:f4:7b:90:
b8:41:1f:8f:63:9d:53:11:2d:49:c2:62:13:96:9e:
2d:73:c1:cf:c1:01:cd:cc:2a:f3:4d:85:20:d0:4c:
9e:cb:0b:9a:58:e0:05:b9:b4:3d:33:3e:4d:01:5c:
df:24:36:30:35:34:a3:45:c3:4d:65:a8:d0:88:db:
1f:a9:56:eb:3d:55:d9:07:f9:13:22:ff:e2:55:3e:
15:be:6d:41:ed:da:05:37:1e:42:ec:19:aa:74:df:
34:bf:be:8a:c8:ef:90:65:5f:e6:f0:ac:c9:fc:03:
b2:29:5c:07:01:e3:57:a3:40:9d:eb:c7:9c:e0:f8:
a6:30:21:19:65:c8:f4:f4:aa:94:11:e4:5d:fd:e2:
04:3d:36:40:b9:a1:e5:d0:d3:98:ec:6c:32:2b:06:
54:16:6b:0a:a1:1e:bd:2f:bb:67:15:d1:2c:75:b7:
58:f6:7e:22:ec:7c:90:03:ea:cb:64:62:02:7c:11:
b7:ce:8c:1b:99:5c:52:48:5e:73:7c:b9:91:93:0d:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:97:2A:AF:11:DD:5E:52:9D:21:20:11:13:37:D0:F3:42:81:2F
X509v3 Authority Key Identifier:
keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:94:02:ab:8e:de:ca:c0:53:e5:d0:db:dc:e9:fe:9c:4a:b7:
b8:e4:54:e5:8c:c3:3f:83:d7:5c:96:e2:8e:e6:e2:52:31:65:
e9:e9:86:28:be:04:51:e9:d4:b5:39:87:48:31:b9:91:33:77:
c7:87:de:f6:e9:84:bc:50:a0:2c:0e:86:8a:e4:51:94:3a:85:
b2:34:33:bd:25:bf:84:1e:c6:d8:1f:df:d3:6f:ef:b5:3a:a7:
eb:f1:fc:37:a9:a0:3b:e9:c7:fd:04:47:87:e1:7b:c7:4a:f5:
7a:80:3b:0c:58:37:3c:2f:c0:2f:e3:cd:37:88:fb:31:63:f0:
20:c5:04:67:7e:04:01:15:c1:fe:92:69:1e:f8:57:8e:38:ed:
03:bb:8e:00:95:b7:a6:ad:6c:3d:5a:a9:3e:46:e5:df:3d:ee:
8b:78:46:8a:81:3a:a1:90:30:46:26:16:3e:59:0d:b7:89:a0:
f7:25:05:d8:8d:1c:67:d5:dd:ea:66:6f:dc:f2:01:60:11:4a:
f0:d6:0c:40:c4:7c:ce:20:67:fd:0e:da:5d:6c:b8:ea:45:61:
2f:87:8f:29:15:0a:d8:8f:f1:bf:b4:7c:1b:77:cb:ac:e5:ff:
10:11:e0:0f:34:7b:85:f9:a6:b5:ce:9f:17:35:ee:69:83:cc:
7b:3a:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:53 2026 by rpki-client