
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier: LdHiGnUtnBrhqa340x8UesNe/EBW0p9mjRgRiYzyd4M=
Subject key identifier: 28:7B:45:1C:6F:09:AD:F0:20:21:7E:25:8B:9B:A3:81:1A:75:58:BF
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 04:28:11 +0000
Manifest this update: Thu 23 Jul 2026 04:28:10 +0000
Manifest next update: Thu 30 Jul 2026 04:28:10 +0000
Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: fKB4SpoIqAqyuSN9qdSnhpjxIsjy/315rXLivyScqPg=)
2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Validity
Not Before: Jul 23 04:28:10 2026 GMT
Not After : Jul 30 04:28:10 2026 GMT
Subject: CN=6a61985a-f7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:af:94:06:97:a2:83:c5:7d:2f:e6:e7:c5:
b7:e8:55:a2:50:5b:9e:f8:3d:50:bd:7d:40:d6:eb:
07:06:e9:c3:36:ee:52:9f:1f:3a:59:0d:f1:92:bf:
a4:eb:7b:83:2a:76:da:f9:57:53:9a:34:3a:e7:3b:
55:98:93:55:2d:5c:4f:7c:70:27:33:03:dd:8c:21:
d4:9b:50:f4:10:2d:08:a8:0e:06:fa:89:ce:fe:d6:
ba:6a:e2:3f:5c:37:73:21:e3:2e:e5:5a:95:76:96:
5c:8b:81:ba:fc:5d:b3:39:5d:4b:02:3d:cd:74:92:
15:a2:23:01:b6:bb:b9:74:5f:5b:21:23:e8:fb:04:
fe:5b:0f:3d:df:9f:44:ad:0c:8e:17:f6:ce:95:75:
b8:ce:e2:b8:c7:bb:e1:8c:29:02:ef:72:1f:fc:2f:
af:91:42:9e:a4:cf:4b:c9:6a:0a:95:46:ca:36:76:
c2:a2:f1:39:cf:f3:01:41:26:16:19:e3:c0:10:06:
37:97:a1:02:e2:3f:8e:fa:b2:eb:40:61:68:1f:5d:
12:c8:5d:41:3e:aa:13:14:1a:e9:cf:da:07:d0:40:
e5:8a:47:a2:e8:bb:15:4e:1b:48:a3:f4:c1:9f:bf:
e0:cb:37:cd:aa:db:32:15:4b:b9:b9:8a:d3:36:7d:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:45:1C:6F:09:AD:F0:20:21:7E:25:8B:9B:A3:81:1A:75:58:BF
X509v3 Authority Key Identifier:
keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:40:de:9f:44:3b:d5:3c:33:ea:1f:9d:e6:9e:a2:5e:27:dd:
4b:46:42:d8:c2:59:96:a9:bc:e0:9e:16:f6:f5:4c:a5:4f:8d:
7c:ae:3d:79:75:c6:8c:e0:ef:db:87:c2:6a:80:52:4f:14:d2:
6f:2b:30:93:04:66:db:73:ec:bc:e5:62:cc:ea:61:01:42:1d:
93:72:4b:81:f3:c0:b8:3b:08:c9:aa:23:dd:47:1f:6f:ee:f7:
fc:2d:e3:77:a1:13:1f:2b:2d:34:44:bb:b3:6f:45:92:de:57:
a3:dd:5c:55:12:ea:1d:03:c7:31:36:38:4c:82:2e:c0:6a:3d:
6b:9f:64:96:e8:18:d4:e4:ee:7a:62:60:45:de:78:ca:07:ec:
8b:ca:07:fe:5b:2d:aa:25:37:df:d2:8e:d7:83:64:83:a0:f3:
3e:aa:49:04:74:2d:87:9c:90:63:64:17:b5:22:b3:93:c2:5c:
a8:81:82:ef:81:96:7c:a3:dc:92:c1:0b:1e:b8:d5:78:6f:43:
a3:e6:0e:5a:78:19:87:6e:56:06:20:fb:d2:8d:60:bf:f6:b4:
b6:5e:1f:9a:2d:ee:0e:2d:75:89:1b:af:b2:43:13:46:e1:57:
69:14:1f:bb:8c:19:9f:45:30:ad:46:3c:85:2d:d6:54:ef:c1:
53:77:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:57 2026 by rpki-client