
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File: 9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier: NXgfsZguNjzPXY4En54wM7gjqKSbxNyMrf+B4dhO/5s=
Subject key identifier: A9:22:30:74:6A:D2:ED:BE:53:D0:26:68:2F:45:FC:BB:B2:DF:6D:69
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer: /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 17:01:39 +0000
Manifest this update: Tue 28 Jul 2026 17:01:38 +0000
Manifest next update: Tue 04 Aug 2026 17:01:38 +0000
Files and hashes: 1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: O1gtO8pjExnQxF007iPPVa3cxnaO9FaXQQC+SSa2Ims=)
2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Validity
Not Before: Jul 28 17:01:38 2026 GMT
Not After : Aug 4 17:01:38 2026 GMT
Subject: CN=6a68e073-a68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:32:24:76:d0:8c:6b:0d:4f:62:0d:75:d5:
11:04:1d:23:0d:5a:51:ea:79:cb:64:48:52:c6:e0:
ab:d0:2a:c9:2a:28:5a:7b:bc:6e:37:66:05:25:c0:
4e:27:d7:5c:b8:be:44:21:12:e8:51:5f:d7:c9:f5:
e1:1e:49:e6:80:4b:d7:07:02:24:d5:9e:fa:59:d8:
6a:4e:a2:96:6a:72:e7:34:51:a1:fa:a6:50:d1:b6:
65:12:97:65:54:d8:de:84:15:49:6b:1c:f0:ce:70:
50:3c:fa:5e:52:70:9a:15:f1:1b:78:c7:19:fa:c2:
7c:65:f4:c7:ec:7f:1d:44:ec:82:37:82:dd:58:59:
62:7e:09:28:5b:a0:88:b6:7b:c3:b4:cc:8a:a6:99:
01:d2:f0:fb:f1:ae:81:9a:6a:0c:67:95:30:6b:aa:
ff:4a:e5:1c:79:a4:e3:a3:25:a6:f5:f1:4b:ed:b1:
c7:4f:12:ed:3a:b0:8b:0e:45:e1:c3:c9:f5:1a:fc:
22:fd:a7:06:3a:0d:f7:31:2e:fa:52:b0:b0:ca:14:
a3:81:1e:3b:73:18:83:3b:0c:13:c8:5a:10:2d:17:
75:e3:20:f9:09:69:6c:87:1a:ea:4a:1c:0a:18:f7:
cd:76:2b:46:43:dc:f8:86:08:4d:fe:f2:55:30:04:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:30:74:6A:D2:ED:BE:53:D0:26:68:2F:45:FC:BB:B2:DF:6D:69
X509v3 Authority Key Identifier:
keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c6:ff:5b:21:f3:33:c0:13:ac:64:65:71:3d:cf:f4:82:cb:
3a:27:a1:b1:fc:d2:97:61:98:5b:dd:94:83:5f:d6:66:7b:db:
f6:4b:4c:48:28:2a:57:e3:f2:0a:51:e9:88:da:70:1b:be:8d:
a2:a6:d6:66:33:ff:b9:fe:94:6b:1c:40:b3:49:ac:77:11:2c:
97:11:88:cb:36:98:54:93:6e:ef:4b:64:48:4c:5f:19:17:8b:
04:a4:8f:5d:6f:d0:41:88:f8:af:50:bf:b3:6d:85:90:42:8c:
cc:89:f4:1b:24:9f:1e:59:79:db:44:16:a7:6b:15:ba:0e:5e:
2c:3b:cf:ef:83:70:18:e1:77:da:ea:a9:ab:53:51:c3:62:96:
0f:8e:9a:45:08:b8:d0:d3:71:82:e5:64:e8:67:bf:1a:b4:23:
0e:36:2b:e1:51:a7:59:1d:13:61:49:6b:7d:a9:c0:18:ed:b7:
26:49:79:52:77:db:70:c0:24:10:a0:42:ac:18:96:cc:09:ba:
02:81:90:ae:20:79:4a:f8:86:01:5d:39:bf:13:01:2a:4c:42:
e7:2a:7c:0e:63:ee:3d:5a:31:f8:71:74:93:2b:d4:08:90:54:
4a:f7:d5:42:e0:cd:75:48:c8:99:8a:22:c3:2b:a8:1d:fa:d1:
e0:e1:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:44 2026 by rpki-client