
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json)
Hash identifier: 2iMkNX9j0NeaCnTbfRxQ7LTGHQOVjNXRee8fmTisRns=
Subject key identifier: 41:37:BA:5B:43:25:F5:A2:A0:35:DB:C7:45:03:DF:B6:94:F2:59:4C
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
Manifest number: 02C0
Signing time: Mon 27 Jul 2026 02:44:45 +0000
Manifest this update: Mon 27 Jul 2026 02:44:45 +0000
Manifest next update: Mon 03 Aug 2026 02:44:45 +0000
Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: CeSfNE6dSzoMT3xu1Y2Z2EjtITh8UauQxTsH2BwMK0Y=)
2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=)
3: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=)
4: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
Validity
Not Before: Jul 27 02:44:45 2026 GMT
Not After : Aug 3 02:44:45 2026 GMT
Subject: CN=6a66c61d-c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:47:10:86:c6:01:b3:4e:bc:a2:2f:39:cf:
4e:b2:7c:39:30:de:00:97:57:f6:54:48:54:80:f4:
10:1a:98:fa:bd:d6:fd:2a:3b:98:48:db:7f:92:a7:
be:7e:ff:91:a7:ba:6a:b6:57:81:17:77:21:39:9c:
a8:7d:c1:d1:3d:8e:79:aa:63:41:2a:41:f5:36:1e:
ea:dc:9e:29:97:1b:88:b5:13:cf:ab:fe:ed:08:29:
ff:e9:b2:16:f1:18:fc:1f:e1:62:ad:c1:ff:38:72:
4c:7a:e6:26:02:b2:1f:62:f6:60:8b:b3:a8:0a:7f:
37:f0:0f:5b:15:49:c1:89:a7:78:23:c6:fe:8d:19:
02:b6:1f:2d:a5:40:e5:54:a8:2b:37:d6:10:5b:61:
db:55:5b:5a:2b:eb:b6:0f:7b:19:bf:60:9d:ca:4d:
1e:ee:a4:30:0a:28:bc:cc:b6:70:a9:5f:5e:f6:65:
1d:ed:60:4b:b4:24:b6:a2:0c:ad:ac:3c:40:39:a1:
d6:5e:0c:76:13:95:af:be:f7:41:bb:7c:50:d2:89:
f0:2b:d6:46:30:e8:ca:2c:43:a4:3e:b7:b9:03:5b:
72:52:71:cf:17:4c:22:fb:f7:06:11:3b:6f:0a:c8:
d9:aa:f5:54:24:8b:bc:61:4e:08:2a:44:21:75:f0:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:BA:5B:43:25:F5:A2:A0:35:DB:C7:45:03:DF:B6:94:F2:59:4C
X509v3 Authority Key Identifier:
keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:cb:de:cb:6c:bf:6b:0b:0e:19:06:48:eb:cc:3b:fb:6d:
0f:64:ba:08:02:ec:7a:bc:08:df:40:4b:11:53:d1:6d:e3:f3:
ae:34:fb:11:1c:ff:4f:24:01:a9:fe:bf:c5:bc:6b:ed:54:fd:
b2:e5:fc:89:f1:9a:f3:5e:84:96:4f:dc:e6:a5:e0:2d:d7:a3:
ce:07:04:ee:6d:0b:a8:16:af:a1:08:8b:cd:bc:9f:34:52:ec:
3c:e7:b6:79:55:43:f1:de:d8:f6:e4:d7:eb:46:b0:fd:0f:9c:
47:60:c4:30:91:cf:cf:47:94:d6:4e:0b:db:b9:8e:37:5f:a8:
08:0f:78:10:e2:8a:4e:89:b2:75:c8:19:57:cf:f0:75:8b:11:
4b:67:9a:ec:d4:bc:e8:f2:4a:35:f4:ab:90:86:67:b9:7e:cc:
06:1a:07:c9:3c:8a:62:17:bd:b5:eb:18:5f:8b:44:7a:29:46:
57:35:70:63:99:d0:b9:f2:6b:8f:68:9a:33:fc:28:95:fe:df:
43:f2:28:b1:c5:d8:2d:27:be:6e:6c:7e:56:b6:af:de:99:26:
86:ee:23:42:d7:77:8e:4a:3d:87:61:dc:b9:97:3b:56:74:1e:
f2:fe:90:e4:e2:90:af:ae:d4:a3:ac:a9:f9:4c:59:59:ac:b3:
40:f3:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:36 2026 by rpki-client