
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json)
Hash identifier: 1s4FuVoXzF+1WgvtRlwJ7ragCeniMM0P7tg918ByLsA=
Subject key identifier: CB:9D:4E:40:E8:20:C5:9B:7A:9D:28:2B:4D:91:5F:14:B3:C7:C4:C3
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
Manifest number: 0521
Signing time: Tue 22 Sep 2026 23:15:49 +0000
Manifest this update: Tue 22 Sep 2026 23:15:48 +0000
Manifest next update: Tue 29 Sep 2026 23:15:48 +0000
Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: yUoseOOKM2is2p4XilN8iuaGUpYqz43T+rGSf27oP10=)
2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: 0nH+hJmdQg+dXDI9GR9IsbqvDX01ufb4T3K76L+VbGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Validity
Not Before: Sep 22 23:15:48 2026 GMT
Not After : Sep 29 23:15:48 2026 GMT
Subject: CN=6ab30c25-f715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:8c:5f:fe:e1:7a:a7:d9:32:97:5f:49:10:
0c:6f:2a:07:97:e4:60:4b:27:a7:39:01:e7:b5:0c:
e0:4b:8d:e0:15:0f:e2:22:12:30:5c:e9:8c:6b:d7:
44:77:d5:0b:30:b6:4d:b1:67:63:4b:b1:63:5d:05:
d1:6f:7c:51:99:b4:2b:bd:6e:0e:b1:46:5e:1e:a5:
4a:54:a3:c1:83:43:b4:b4:af:5c:26:f8:e0:e5:34:
4f:8b:61:4b:4b:44:a6:a7:40:69:e4:85:cf:2f:88:
98:3b:10:89:ad:27:5b:a0:e0:0b:6c:73:f7:b5:8b:
05:f3:08:dd:d8:63:20:4f:5c:28:e5:39:99:19:f2:
0b:70:70:10:ab:fe:77:37:65:3f:35:e9:16:c2:95:
51:06:1d:9a:07:c3:86:37:04:18:86:81:18:9a:80:
48:9b:69:ac:b3:bf:96:d0:5c:4a:9d:a5:15:89:a5:
e1:93:9e:58:90:0d:68:98:e3:b8:ac:21:3a:7c:fa:
8b:2e:23:92:df:57:a5:2b:a2:c5:d4:71:e0:8a:fa:
46:fc:0a:ed:f8:cb:bd:d0:42:e2:bb:3f:f2:a2:b0:
2b:92:01:19:80:fc:5e:85:32:c2:78:74:61:85:01:
a8:67:b7:91:e7:0e:5f:bd:38:4b:29:75:9b:8f:53:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:4E:40:E8:20:C5:9B:7A:9D:28:2B:4D:91:5F:14:B3:C7:C4:C3
X509v3 Authority Key Identifier:
keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:49:9a:0b:ae:e8:1d:7f:31:68:04:ff:01:18:33:07:bf:3a:
42:32:6c:e4:4c:bc:b6:22:83:37:17:20:6d:3b:29:4c:fc:5f:
22:b7:b1:d8:cd:03:36:4b:75:a7:cf:73:19:e7:e6:8e:e6:5c:
1c:99:a3:c0:e8:60:82:06:5e:9d:65:87:52:96:15:86:5e:44:
53:f0:7c:9b:32:a5:5e:84:d4:3d:a3:ea:a7:b9:b5:b8:29:59:
7e:7e:f9:15:1a:eb:8c:68:68:23:8a:96:a5:a1:32:3b:c9:5d:
f6:af:e8:28:b8:15:b4:65:77:08:eb:f2:c6:09:81:1b:d8:1b:
28:a4:6e:da:f1:e8:57:25:a1:0f:ae:7f:3f:e0:78:07:5f:32:
60:05:ee:b3:a0:97:87:87:66:06:4d:42:8a:b0:95:8b:65:b7:
b6:47:ca:4c:92:03:c7:0b:aa:68:8e:1f:b3:b1:91:b7:a8:0f:
8e:8d:1b:36:56:ec:a3:4f:31:36:b6:e8:25:f6:44:00:b7:c9:
de:12:b1:6a:ef:c2:55:0e:ca:c2:8d:0d:de:ce:0b:79:6b:2c:
82:32:64:41:d4:a7:06:c1:01:c3:b7:a1:87:28:ee:e3:ae:a9:
e3:2f:27:14:20:ef:88:ea:db:7a:e5:c6:08:e6:d5:ae:b7:e9:
bf:9f:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:05 2026 by rpki-client