
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier: aHSjR9vh6smuEfsd7S0f+KLvLzcf+1LvNfQ1oDXXQOA=
Subject key identifier: B1:7E:F7:DF:D9:64:05:6B:54:10:7B:3D:F9:57:B9:50:8D:70:BB:FF
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial: 0B91
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number: 0B8D
Signing time: Fri 24 Jul 2026 16:44:50 +0000
Manifest this update: Fri 24 Jul 2026 16:44:49 +0000
Manifest next update: Fri 31 Jul 2026 16:44:49 +0000
Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: St1pU0QYZDOcoLiI+rV9GlhkzcrRw6bOwlUxzt7YUkU=)
2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2961 (0xb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Validity
Not Before: Jul 24 16:44:49 2026 GMT
Not After : Jul 31 16:44:49 2026 GMT
Subject: CN=6a639681-add2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:f8:54:80:be:a5:50:f8:ec:61:26:0d:e3:
c0:8c:7e:f7:34:db:ad:18:1c:94:27:fc:34:0a:80:
51:0d:91:53:96:ac:e3:38:d0:0b:7c:be:f0:24:4e:
a7:45:61:8a:8d:ca:b4:2f:7e:43:65:24:9c:9c:a9:
ce:f2:a0:f2:d3:62:9b:96:0e:2d:1d:e1:65:f6:b3:
8c:db:4c:6b:6d:a1:8c:a2:f6:21:bf:ce:70:90:ce:
0a:98:5c:ff:99:33:7f:3f:6b:ea:5e:8a:45:83:d5:
1e:5c:00:a9:52:19:df:c0:5b:0e:a7:96:b1:96:41:
13:38:82:55:ef:a4:d2:59:58:90:97:f7:f0:b5:42:
48:a5:3b:f5:f0:bc:1d:79:5d:14:6a:9f:2c:8f:cd:
62:ba:24:06:16:7f:a9:2e:01:e8:1d:1d:9f:6d:5a:
c9:f1:d8:88:23:5c:ae:ee:b2:16:c5:7e:47:21:d1:
df:d7:e6:d1:34:8a:ca:20:3b:a1:1d:26:4f:84:63:
3b:cf:fa:1a:e1:4d:36:f0:cd:a7:db:6f:bb:7e:66:
18:ff:27:53:25:d0:91:8b:51:ab:e0:35:5b:29:0e:
89:7a:9d:02:d5:72:37:4b:26:6c:e7:e0:fb:2e:17:
37:03:86:c6:92:d9:da:98:aa:68:23:ed:58:f8:2a:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:F7:DF:D9:64:05:6B:54:10:7B:3D:F9:57:B9:50:8D:70:BB:FF
X509v3 Authority Key Identifier:
keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:4f:60:f0:df:1d:df:8a:c8:1e:94:23:f1:a1:43:64:d8:
00:3d:d3:80:0f:3f:82:0d:5e:4b:92:62:87:d2:c4:17:0b:4e:
29:63:e9:22:e0:8e:ec:d7:e4:f0:9d:d8:a9:bd:6d:a1:31:d4:
92:2a:4f:d1:3f:c8:e5:1b:b3:1e:6e:da:ca:8d:c7:9e:82:88:
e1:e1:a5:d9:29:82:27:8c:42:f8:0c:f6:9a:1f:f7:7c:61:0d:
4d:fb:9a:40:38:7d:96:e3:af:42:67:3b:1f:24:26:4d:b2:61:
b9:e5:ed:79:f4:22:fc:d3:df:16:9d:59:75:6a:96:da:10:b1:
4e:f9:61:94:fa:99:e6:37:b3:c6:7c:2f:3b:ac:7d:34:b0:a2:
75:10:1c:8c:d8:29:a6:31:12:ae:7e:cd:4b:7f:e9:88:a8:3e:
2c:5a:7d:3d:d3:e1:69:cf:a6:68:c6:d6:64:b1:45:cd:0e:80:
6a:e1:42:b9:99:e4:19:e7:dd:60:72:fa:73:59:4b:68:71:25:
4f:93:be:e2:99:f6:fe:68:3f:91:0c:14:3e:c8:f9:51:6c:82:
bd:5b:c5:c3:23:21:04:1a:d0:11:b1:fe:2c:32:26:55:bb:1c:
23:1e:8c:0f:20:92:a3:0d:a6:40:c1:13:2f:32:89:7f:2c:04:
a3:4c:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:09:27 2026 by rpki-client