
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier: yB+29auPUDUFFkeYkWUNY/H/dQFDFEcHGt3HEJwLp8k=
Subject key identifier: C5:8A:BF:ED:EA:60:2F:75:F3:5E:D2:00:8C:86:EB:2E:11:A8:4D:21
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number: 0D0F
Signing time: Wed 22 Jul 2026 18:30:53 +0000
Manifest this update: Wed 22 Jul 2026 18:30:52 +0000
Manifest next update: Wed 29 Jul 2026 18:30:52 +0000
Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: nkPe35JDE3fnZhipX0tmg8lwW+6oEboKqBVbS3FQYnY=)
2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Validity
Not Before: Jul 22 18:30:52 2026 GMT
Not After : Jul 29 18:30:52 2026 GMT
Subject: CN=6a610c5d-50cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:73:40:c2:ab:c1:df:03:a6:ba:75:f4:b5:90:
04:ce:9a:5d:26:96:ff:47:08:f1:f1:f1:46:1b:47:
b2:d0:f1:7f:a2:00:55:e9:79:3f:a0:c0:d8:18:a2:
d4:8b:2a:fb:5a:ab:9e:70:3f:8d:3f:9c:ec:41:f6:
22:93:a2:f0:c7:7c:89:f1:2e:e3:cc:55:c3:27:be:
30:71:af:f9:13:4c:fa:21:60:ac:c2:c7:90:b3:53:
6a:67:75:90:b6:bd:7f:f6:9a:c4:af:72:63:de:32:
c1:02:75:70:10:60:54:64:96:9f:cb:db:87:a9:1b:
1c:1e:8d:12:56:a5:7d:f4:11:3d:2b:f5:44:bf:af:
8b:da:f7:b2:ae:9b:2a:91:3d:02:3b:ea:57:b7:2f:
65:f8:eb:e6:8e:83:bb:94:dc:f6:e2:da:fa:c3:98:
80:77:f3:4b:a8:c7:23:72:1a:0d:60:93:7d:74:d3:
f3:44:26:9a:ab:c0:b1:0d:94:55:e5:e7:e1:96:39:
76:db:02:f1:0a:52:73:26:e1:3f:be:57:a2:47:33:
0e:c7:94:46:48:b9:3f:4a:aa:ec:c2:fe:98:76:a3:
77:76:92:ea:55:83:cf:81:79:9f:dd:f0:3a:1e:88:
bb:1b:9f:73:8d:19:aa:7b:10:34:bb:47:3f:7c:d9:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8A:BF:ED:EA:60:2F:75:F3:5E:D2:00:8C:86:EB:2E:11:A8:4D:21
X509v3 Authority Key Identifier:
keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d4:b8:35:2d:b0:9a:c1:d7:18:5b:f9:63:46:90:43:f6:2c:
8d:4e:7e:ea:29:2f:d4:5d:ff:9d:d1:47:c5:ba:07:93:d1:6e:
50:20:3a:54:fd:ec:58:34:8e:4b:b5:95:48:77:dd:d4:35:3c:
09:bf:c5:d6:57:c9:fa:6d:7c:52:5b:8d:22:ee:6a:8a:ed:a2:
ef:52:4b:19:d1:bf:b2:28:41:fb:e1:36:86:a3:be:67:9f:da:
68:26:54:80:b9:52:da:33:4a:4f:21:c6:09:99:d0:6d:49:55:
a6:89:c3:be:dc:2c:57:6b:c9:48:3d:9f:bc:05:f7:ad:a4:20:
56:1f:d5:a7:b4:c1:36:c6:f3:3d:f9:a1:fe:05:3a:a9:97:30:
41:18:07:54:56:b9:7a:67:68:d6:c5:2c:ee:aa:66:79:4b:6b:
d6:c1:93:d9:22:7f:9a:57:7c:54:6b:86:10:51:ea:ec:c1:3d:
ba:7a:37:1b:8a:93:d1:f9:c8:cb:c6:cb:98:07:e6:69:0f:ba:
92:6c:5c:80:ac:a1:c1:de:5a:fb:00:2d:e1:6d:2d:c8:58:5e:
be:00:d3:5c:4e:e3:5a:ec:42:ec:75:90:69:96:69:0a:3f:e3:
d2:2c:fd:e9:d6:6e:a0:c6:28:9f:d7:e8:c8:04:91:4d:41:ac:
19:e7:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:10 2026 by rpki-client