
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: Lig+75WU2bRPDnrrYbWjIUifQwpar2h36vznWqB1fkI=
Subject key identifier: B9:FA:0C:35:97:30:CF:78:86:07:9F:4C:54:19:9C:C3:B0:2E:9C:79
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: E4
Signing time: Thu 23 Jul 2026 08:19:54 +0000
Manifest this update: Thu 23 Jul 2026 08:19:53 +0000
Manifest next update: Thu 30 Jul 2026 08:19:53 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: betBaXTqfjFx1inByjSjXLrujMbdO4MFPuyWF4p2H9A=)
2: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: jjrrlGj2vws5FjbyiAObAcIkHb9zzPLpvEiKO7QygM8=)
3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: dQ05E6d0ZKkbsdzwglFucEgCK8PC9KMabloxf5330uY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Jul 23 08:19:53 2026 GMT
Not After : Jul 30 08:19:53 2026 GMT
Subject: CN=6a61ceaa-8d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cb:a6:7c:62:33:6e:f1:60:62:cc:ba:7e:ca:
89:48:17:00:0b:1c:c7:12:11:87:20:48:1b:a3:f5:
08:ba:a3:e6:9b:87:3b:3f:83:99:71:d2:14:82:03:
e6:b7:b4:45:c6:8e:40:11:f3:d2:bd:94:7c:62:5e:
8e:43:73:4e:38:a4:c9:65:ee:3f:e6:42:36:62:b2:
87:91:e3:38:98:84:3d:1c:b4:18:39:3c:30:7d:76:
97:8c:56:c8:f6:ee:e2:15:e5:a0:0b:d7:f3:c0:7d:
ea:45:b0:dd:8f:e9:96:ad:d9:48:0c:2e:5a:e3:8e:
bc:04:a8:73:be:7f:d5:47:84:ae:d7:4f:03:ef:85:
e3:4d:07:48:25:32:cc:56:30:6c:14:4a:72:87:d0:
3e:63:59:44:5d:10:7f:e4:07:1b:78:73:68:15:cb:
e9:a6:7d:8e:a6:ff:11:64:27:31:d0:c4:1c:66:c6:
5d:5e:bf:c0:dc:1b:8e:3b:54:cc:cd:58:db:60:71:
2e:1f:1b:b3:af:d3:e8:9b:eb:56:ff:a1:05:27:66:
69:31:24:9b:c3:34:14:d1:f2:99:c6:33:20:62:64:
56:43:5f:16:c6:8a:24:a7:6a:cd:3d:b8:0a:fe:4a:
0c:0f:c1:43:2c:ba:0d:22:22:9c:a5:ea:b9:f6:bc:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:0C:35:97:30:CF:78:86:07:9F:4C:54:19:9C:C3:B0:2E:9C:79
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:2a:98:44:62:0a:9a:f9:f7:20:52:51:68:e9:d3:f4:84:
35:69:d7:f2:b2:df:2a:77:44:6c:6f:8a:22:e5:4a:89:02:c5:
b2:6b:dd:00:29:29:14:7a:33:d2:0e:bc:b5:cc:25:ac:02:f8:
20:35:ae:54:47:12:f7:43:7d:c5:dd:55:31:79:ef:5f:17:72:
5f:63:82:c6:54:6e:35:02:c8:9d:42:6f:e2:fe:7a:b1:e1:89:
c1:93:5d:09:c4:7e:22:57:10:02:5c:72:62:1c:39:84:a3:6d:
07:fd:fd:a9:44:32:66:7c:67:fd:82:ae:6a:8d:b9:cf:b5:43:
02:1c:2f:24:fb:b2:d7:c6:f7:06:a6:3f:d4:36:ad:35:90:21:
ba:af:1f:30:fa:b1:cc:fa:46:63:43:28:05:79:76:f2:2e:e7:
25:ab:29:d1:6e:4b:b6:0a:47:0e:ae:6c:f1:b5:20:63:ca:a8:
e4:76:0e:6d:42:11:ec:6b:b9:b0:d3:21:c3:1f:69:81:7a:03:
f5:96:dc:3d:e5:79:44:86:1c:91:c3:fe:4b:6e:46:43:25:34:
f8:90:73:fa:ff:09:2b:64:3e:36:89:5f:28:fc:04:da:d3:22:
54:93:15:78:77:e0:2f:c5:5c:c4:2d:18:23:d5:2a:63:e1:1d:
1e:d6:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:23 2026 by rpki-client