
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier: g6itHaSIzXPh66UeOG84IfiqjBiKAeuvikxGqwhdg08=
Subject key identifier: 9E:8A:44:A2:5D:29:87:A7:87:6C:B8:09:D3:4E:92:A5:1B:D4:2B:8B
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial: 3571
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number: 3564
Signing time: Wed 22 Jul 2026 15:11:54 +0000
Manifest this update: Wed 22 Jul 2026 15:11:53 +0000
Manifest next update: Wed 29 Jul 2026 15:11:53 +0000
Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: AJTpDowQqceB/DAbdC/kmRBjWCdwUujcs6ktPYOGyxQ=)
2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: qfvcgZVUflsdf2vdMxE8qxvPQTjGmtT1vRqCh+Z14oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13681 (0x3571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Validity
Not Before: Jul 22 15:11:53 2026 GMT
Not After : Jul 29 15:11:53 2026 GMT
Subject: CN=6a60ddb9-ad52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:32:3c:d4:1c:c8:cd:ff:3f:8b:9f:75:64:
41:e3:0b:8a:00:5b:74:07:b9:e5:1a:96:b1:57:7a:
df:d7:a3:2d:4e:73:3b:97:6c:91:20:b8:3e:98:a2:
a4:88:04:e7:22:c0:4d:d3:58:9a:a5:e3:4c:00:53:
cd:e5:55:9c:de:ba:b2:e9:cb:ea:6e:81:a6:62:5f:
7f:4a:7a:05:d6:19:5b:3b:4d:8e:1f:ba:9e:d6:c5:
7f:09:e3:fc:1f:b1:7a:7c:71:3b:ee:98:33:b0:88:
eb:ea:d6:67:3e:a9:8c:f6:1d:61:d5:8d:2d:38:fb:
11:9d:bc:63:4d:39:cc:88:95:06:ab:36:c0:9e:af:
8f:21:a9:f1:e8:38:be:02:39:15:00:94:cf:3f:11:
35:ba:c7:dc:d5:f5:6f:67:fc:c0:f6:34:54:5b:f5:
b9:3f:db:b3:65:d8:9f:cf:0a:8a:2f:9d:b1:f1:68:
c0:3c:01:f5:23:d4:50:1a:6a:59:c4:57:5c:50:7b:
6c:cc:08:05:19:d4:c0:6e:d9:29:04:5c:5a:ad:4b:
ab:af:ea:52:02:dc:08:11:8b:8c:3a:f1:f1:36:8b:
a1:ef:02:8f:d6:f2:c1:e3:42:82:4f:ba:40:72:a5:
c2:3e:4c:d7:1d:19:34:6d:41:46:7a:e4:52:d6:2d:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:44:A2:5D:29:87:A7:87:6C:B8:09:D3:4E:92:A5:1B:D4:2B:8B
X509v3 Authority Key Identifier:
keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:fa:1d:ad:6f:64:d2:32:ed:8f:d8:0c:3d:10:52:02:bf:
3b:9f:9e:87:59:a5:d7:d0:a8:57:27:d5:76:30:7e:79:f6:c2:
bf:f7:99:7d:18:4d:e2:28:9b:93:a0:12:89:6d:a0:97:90:02:
99:2c:8f:b5:c7:91:08:82:57:b4:82:6b:d5:bb:47:ae:99:ff:
93:27:60:c0:94:5d:a7:83:69:83:a0:49:77:34:4c:5c:75:7c:
81:dc:42:c9:61:de:33:ac:1b:fb:b1:dd:8a:d0:80:b6:c3:24:
01:c9:74:7e:91:09:70:d6:99:84:fe:5c:1c:b2:f5:af:26:17:
e4:f5:7c:02:26:05:7a:02:94:3f:e8:c1:a5:2d:1c:04:b2:06:
29:0e:8a:16:6d:0d:59:81:95:b2:b3:b2:9d:b7:11:1e:82:29:
9f:75:bf:b2:24:d3:66:17:1a:1b:44:99:91:b0:63:d4:a9:14:
b6:3d:43:af:8f:8b:b7:78:38:48:15:78:58:ab:3c:93:46:d1:
1c:8d:5a:49:9f:0a:1b:1a:00:54:84:3a:97:cd:e5:7b:1b:cc:
2e:86:ce:ee:9e:07:8b:61:8f:4f:9f:15:33:d8:7e:fa:e3:cf:
f5:d3:0b:5c:06:a0:75:58:c6:6e:0a:e3:ec:08:17:25:72:4b:
44:28:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:42 2026 by rpki-client