
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier: fUeM99wfZ8GLWaxIxXngpxfntVBZd0Du/kWbUDaGcyM=
Subject key identifier: A8:D0:CA:54:0F:9D:98:9B:BD:A3:BF:CD:09:B4:D9:23:28:1E:BD:A4
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number: 024D
Signing time: Thu 23 Jul 2026 03:31:14 +0000
Manifest this update: Thu 23 Jul 2026 03:31:13 +0000
Manifest next update: Thu 30 Jul 2026 03:31:13 +0000
Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: W+rr02ZQ7aB6n4WGq+ZPc/aYW70D1FzK2TfgSEiP9VY=)
2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: yqtXxu6K8/SJ810590/3CfsacSmByFqUd6TVJx9QLFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Validity
Not Before: Jul 23 03:31:13 2026 GMT
Not After : Jul 30 03:31:13 2026 GMT
Subject: CN=6a618b02-b9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:99:76:1a:fd:fd:02:2b:ad:3d:38:23:2a:
0b:19:40:63:19:79:04:3e:91:34:77:f6:33:35:c7:
99:7d:32:b7:81:ba:b9:fb:a8:f4:4f:24:7f:6a:65:
69:f6:fb:52:e0:ae:cd:10:f6:15:62:74:94:b4:e7:
c9:b8:6c:3e:b6:9b:e0:16:bb:c4:28:87:42:b6:5b:
5a:99:f1:2c:71:ce:b8:79:5a:1d:33:ed:7c:3e:27:
24:20:a5:19:a9:35:45:b6:9d:c3:97:e7:76:24:30:
93:56:b7:a8:33:49:3a:18:0d:81:d7:25:e8:49:f2:
0b:90:f7:34:47:cd:1b:da:c3:09:25:f8:b8:04:11:
24:99:1a:c1:03:0d:de:6e:ed:42:0d:1b:f5:c0:c1:
93:74:28:36:44:2c:7d:2f:01:bc:35:9e:63:47:f6:
14:0c:cd:94:52:10:d1:0b:6b:2f:a3:74:40:22:ae:
8b:4a:8b:4b:44:a4:73:80:83:d9:a0:b4:46:bb:fd:
16:49:de:20:a7:2c:4b:4c:c7:8c:33:c6:78:81:1a:
ec:a5:da:bf:8a:c9:8e:0c:fd:dc:ce:24:c0:31:82:
fc:cd:06:d8:d2:05:15:eb:76:c0:79:96:1e:9a:7f:
3b:64:62:dc:a1:56:93:13:a2:88:ec:b4:36:c7:0b:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:CA:54:0F:9D:98:9B:BD:A3:BF:CD:09:B4:D9:23:28:1E:BD:A4
X509v3 Authority Key Identifier:
keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fc:d4:53:d3:9b:e9:6a:4d:41:f4:9d:5c:40:bf:ff:7b:da:
67:ae:a7:b6:51:f0:e6:c0:78:b3:51:40:aa:f8:d4:2a:d8:d3:
dc:d4:67:ad:dd:bb:84:5e:9f:3d:76:34:e9:7e:0c:7c:c2:1e:
65:29:75:74:70:b5:ba:31:3d:e7:1d:5a:81:31:24:d3:df:1d:
b3:75:c9:39:df:be:d5:84:04:26:04:2e:de:cd:94:f2:71:b8:
15:aa:19:fc:89:83:35:0a:1c:ce:b9:f3:10:cd:3a:76:50:d4:
61:b1:3f:b0:70:56:c8:0d:82:e7:68:10:58:d7:df:36:58:ab:
53:30:7c:79:81:72:44:cb:80:e9:f6:8a:59:7a:ef:8e:c8:88:
4a:db:01:ac:d8:1d:30:70:43:7f:50:d8:50:24:d0:5c:92:b9:
b1:90:02:18:b1:0d:45:98:8b:81:0f:68:41:80:8f:62:c8:8d:
c4:00:c2:0d:7e:aa:9c:71:63:57:f1:57:5b:d8:a3:2e:f2:10:
21:38:5a:3d:ba:07:0a:1e:a2:15:9e:e4:4b:47:28:84:eb:e9:
18:58:1a:44:4b:63:f7:17:0f:13:f1:28:eb:09:e3:4e:76:d9:
37:2c:07:1f:cb:81:51:81:55:c7:a3:f9:b1:ae:9f:fb:ed:5b:
29:41:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:13:00 2026 by rpki-client