
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File: sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier: Xoth+IviTPn45l5cZDkvlrlS2mkWdSCBY3DALgW3zJY=
Subject key identifier: 2A:68:C5:59:D5:78:49:ED:50:CE:37:B9:F7:05:F0:05:93:02:35:D1
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer: /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number: 75
Signing time: Thu 23 Jul 2026 09:44:38 +0000
Manifest this update: Thu 23 Jul 2026 09:44:38 +0000
Manifest next update: Thu 30 Jul 2026 09:44:38 +0000
Files and hashes: 1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: uIEAyYOWCqTbTghSgNFJ7RFio+mPOun4QOa8z5V6By0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Validity
Not Before: Jul 23 09:44:38 2026 GMT
Not After : Jul 30 09:44:38 2026 GMT
Subject: CN=6a61e286-2297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:4f:79:0b:cd:ea:6c:ba:79:a3:c4:5c:91:
eb:58:56:73:9e:d5:e2:1f:b9:78:ce:98:84:af:ad:
b1:7f:68:a8:15:fa:31:52:a9:c9:c4:17:ad:9d:1a:
4d:cb:fe:6a:fd:ac:6a:1c:62:9e:ca:5d:ea:26:5d:
bb:8d:94:da:9f:28:af:eb:b9:8e:16:4f:d7:e1:27:
30:f6:6a:e4:97:1b:42:7f:2a:1f:8c:50:54:82:10:
de:c7:c9:84:9f:2f:52:7f:af:10:e8:42:65:64:33:
72:24:77:b2:65:d1:f0:c3:c7:05:a4:e9:6c:d3:ab:
93:62:47:7f:8f:7e:a7:ee:b4:8e:e6:fa:d3:ed:f2:
09:ed:f0:28:a5:d5:ce:ad:48:76:4e:8c:07:25:9b:
9c:c2:8f:3d:04:1d:79:2d:b9:29:51:23:fd:8d:b8:
cb:00:b3:7d:b2:f7:3c:58:41:5d:96:8f:da:3e:b5:
f2:35:60:c2:0f:d9:a6:f3:ba:e2:ef:85:bb:6c:a5:
af:35:03:38:bf:d2:b6:6f:9b:11:a9:8b:1e:35:47:
75:1b:af:13:54:69:74:a6:53:04:75:55:77:04:14:
dd:a8:e5:67:16:d4:2e:c5:a3:27:5f:f5:da:a3:d3:
f6:9c:32:97:48:8c:00:67:e2:05:07:05:6e:59:9e:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:C5:59:D5:78:49:ED:50:CE:37:B9:F7:05:F0:05:93:02:35:D1
X509v3 Authority Key Identifier:
keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:39:db:68:a2:7a:5e:7a:96:38:9e:86:e2:b7:0d:11:76:
f4:30:72:4b:3a:ee:24:8a:45:14:5e:ef:0d:a4:2b:8f:fb:f8:
d1:47:22:c7:99:3c:04:ae:56:34:52:f5:db:36:54:dd:0b:93:
8c:3c:06:dd:60:ef:4b:d3:d2:b5:6d:e1:0d:fa:8d:26:7b:9b:
69:18:09:3a:55:32:e1:46:1c:b3:78:17:24:a6:c7:52:89:73:
98:53:d9:90:c2:13:7c:4b:09:5c:ea:d4:51:f7:6e:b7:e3:97:
a3:49:ed:7a:94:3e:90:34:e1:3f:ea:c2:a4:0b:a1:0c:07:b1:
0c:1f:f2:d1:58:cd:98:a1:5e:96:12:50:8b:a1:0f:4c:00:b7:
74:55:63:0d:d9:24:3d:66:40:82:f0:40:6b:cf:59:ac:69:cd:
99:8c:45:51:5b:7f:70:be:85:f1:79:f4:ca:af:46:51:c6:3c:
97:d8:81:6c:6c:21:69:b2:a8:48:6e:f7:30:bb:1e:7e:72:de:
63:0a:0c:33:ae:9e:e9:15:35:5d:e8:e4:8d:09:a8:db:63:17:
fc:82:b6:8b:c0:c1:17:9f:e4:61:ad:dc:f7:05:d0:03:de:28:
55:e0:80:e5:cb:51:56:85:5e:74:77:b3:31:fd:38:75:e7:9f:
0e:e4:fb:b5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NkJERTExMC8GA1UEBRMoQjFDNzhFOEVCNDM5MzFCMDNFOTBCQkI1NTM1NzlENzlF
RDE5RkQ1MDAeFw0yNjA3MjMwOTQ0MzhaFw0yNjA3MzAwOTQ0MzhaMBgxFjAUBgNV
BAMTDTZhNjFlMjg2LTIyOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVek95C83qbLp5o8RcketYVnOe1eIfuXjOmISvrbF/aKgV+jFSqcnEF62dGk3L
/mr9rGocYp7KXeomXbuNlNqfKK/ruY4WT9fhJzD2auSXG0J/Kh+MUFSCEN7HyYSf
L1J/rxDoQmVkM3Ikd7Jl0fDDxwWk6WzTq5NiR3+PfqfutI7m+tPt8gnt8Cil1c6t
SHZOjAclm5zCjz0EHXktuSlRI/2NuMsAs32y9zxYQV2Wj9o+tfI1YMIP2abzuuLv
hbtspa81Azi/0rZvmxGpix41R3UbrxNUaXSmUwR1VXcEFN2o5WcW1C7Foydf9dqj
0/acMpdIjABn4gUHBW5Zno2zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKmjFWdV4
Se1Qzje59wXwBZMCNdEwHwYDVR0jBBgwFoAUsceOjrQ5MbA+kLu1U1edee0Z/VAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzQzNUJGMUFDRDNG
QzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJBLWtMdTFVMWVkZWUwWl9W
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc2NlT2pyUTVNYkEta0x1MVUxZWRlZTBaX1ZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2
QkRFLzQzNUJGMUFDRDNGQzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJB
LWtMdTFVMWVkZWUwWl9WQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAzzznbaKJ6XnqWOJ6G4rcNEXb0MHJLOu4kikUUXu8NpCuP+/jRRyLHmTwErlY0
UvXbNlTdC5OMPAbdYO9L09K1beEN+o0me5tpGAk6VTLhRhyzeBckpsdSiXOYU9mQ
whN8Swlc6tRR926345ejSe16lD6QNOE/6sKkC6EMB7EMH/LRWM2YoV6WElCLoQ9M
ALd0VWMN2SQ9ZkCC8EBrz1msac2ZjEVRW39wvoXxefTKr0ZRxjyX2IFsbCFpsqhI
bvcwux5+ct5jCgwzrp7pFTVd6OSNCajbYxf8graLwMEXn+Rhrdz3BdAD3ihV4IDl
y1FWhV50d7Mx/Th1558O5Pu1
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:54 2026 by rpki-client