
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: n2GsuDnZoGCs9FIGMKkfQuGPun6uD+WXqwyhMVK+//o=
Subject key identifier: 6F:F0:0F:20:1D:A3:86:9E:9F:15:FB:DD:41:AF:C3:8A:26:72:55:1A
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0AA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0A98
Signing time: Wed 22 Jul 2026 19:56:24 +0000
Manifest this update: Wed 22 Jul 2026 19:56:24 +0000
Manifest next update: Wed 29 Jul 2026 19:56:24 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: Gn1XyxCI7GgSbuTg0DvhaHcX5qgIuibmxo/ZoINEvrs=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Jul 22 19:56:24 2026 GMT
Not After : Jul 29 19:56:24 2026 GMT
Subject: CN=6a612068-5e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:10:e8:1f:c6:b4:27:be:7d:2f:98:77:ca:
1f:fe:3d:3e:60:43:2a:d6:2d:d7:73:fe:4f:0d:6a:
95:6c:42:fc:36:23:0a:e3:06:61:56:c7:3e:7d:22:
dc:04:5b:3d:54:f3:01:fe:23:a0:4e:09:ef:49:8c:
8f:b4:5f:47:80:bb:60:62:d7:7c:d0:42:a6:70:4d:
b2:fd:88:bb:71:59:dc:18:8f:c4:1a:52:46:c6:5e:
5b:38:02:d3:c9:33:21:d7:5c:a0:d0:ee:dd:14:06:
06:5d:fe:8a:a3:50:14:15:9b:52:64:41:39:c9:ae:
f0:5d:ea:1d:c4:c1:40:a4:d3:d3:b8:5a:2a:5f:b4:
03:1b:f0:3f:56:37:8e:30:55:cd:82:2c:28:d6:f9:
ac:93:2f:af:41:d3:a4:ed:10:0b:15:f2:e8:dc:cf:
d6:f7:7f:82:77:39:03:fe:3b:3e:05:9e:37:22:72:
06:c7:7a:39:a8:2f:79:10:0b:ac:d1:6e:38:aa:3c:
d5:d8:b8:b1:04:59:a6:98:a5:16:bb:d4:68:a4:ab:
aa:4b:f3:be:e9:4d:14:6a:bc:9a:d3:1e:33:53:f3:
56:48:64:8a:16:fa:33:ba:8b:7d:1c:90:cc:42:ab:
82:f9:c5:1d:4a:61:89:88:bf:77:8f:9f:ac:02:c6:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:0F:20:1D:A3:86:9E:9F:15:FB:DD:41:AF:C3:8A:26:72:55:1A
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:b8:ca:1c:2f:d0:80:1a:81:6a:e6:e0:12:2c:8b:c2:20:
15:cf:c7:da:53:65:33:ed:02:56:6b:84:fa:d3:dd:df:43:98:
59:da:f6:bb:0e:0c:92:11:23:02:f8:cd:b3:9c:21:65:cd:ce:
de:25:e4:fd:4c:fd:f8:31:00:50:0f:92:f4:aa:a9:24:30:c7:
21:49:49:e4:22:3c:58:77:14:5d:13:2b:6d:ed:41:ab:fe:47:
4f:de:cc:68:cd:e4:95:a2:c5:0d:6c:3f:bd:20:d4:d2:87:01:
6c:5c:14:12:5f:ed:7a:35:44:04:3a:c5:ab:90:1c:b6:89:3d:
87:f7:8c:fd:94:37:02:69:83:5d:26:38:1b:6d:fd:58:aa:c2:
3c:1a:bd:7a:c0:7f:db:ae:e2:33:63:db:b7:4d:52:1f:53:fd:
0b:cf:13:69:73:c3:50:fb:e7:07:a6:41:ac:39:0d:e4:b3:ff:
3f:03:77:5b:10:84:1f:24:0f:2e:8b:bf:0b:49:74:9b:0d:c1:
0b:2a:52:d7:8d:ce:76:3d:0f:60:e5:56:9f:d1:ca:9f:01:05:
ee:25:06:ac:27:c2:03:22:74:8a:17:fd:83:9f:39:c6:ed:44:
81:b2:79:86:ba:65:01:b2:da:63:0c:a9:0a:af:bd:e3:6f:ac:
5e:aa:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:20 2026 by rpki-client