
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json)
Hash identifier: bzNfRl8j9qu3R7apOQ+4UOhRRjyiEXHPou5QTLEsxgA=
Subject key identifier: 21:DB:B1:B3:60:83:7C:C2:93:06:15:72:8C:36:31:49:1E:DC:7A:29
Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Certificate serial: 0855
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
Manifest number: 0848
Signing time: Wed 22 Jul 2026 21:32:02 +0000
Manifest this update: Wed 22 Jul 2026 21:32:01 +0000
Manifest next update: Wed 29 Jul 2026 21:32:01 +0000
Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: egAJCM4HS73a49XD8gQJSkrOec0PONrC7+oQbCzyzgo=)
2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: yOuFWEMRjDuMVm01IbqIe3i9wqxDvbb8W9g8zqSmMx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Validity
Not Before: Jul 22 21:32:01 2026 GMT
Not After : Jul 29 21:32:01 2026 GMT
Subject: CN=6a6136d1-c985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:96:ad:0e:f9:87:8c:a5:41:83:88:2e:fc:
42:53:c8:1b:55:52:79:ae:09:45:de:eb:15:65:33:
4a:ac:fc:a1:25:0b:48:7f:e2:0f:29:94:40:f5:ae:
ae:e9:c8:e7:b0:9b:a9:44:45:0d:87:70:dd:df:fe:
31:7d:87:f0:55:cd:39:df:29:30:37:5f:d0:db:f4:
4f:2a:4a:34:54:55:55:3d:6e:d2:ee:9d:eb:6d:62:
53:1a:ae:d7:69:24:af:28:fa:84:e8:68:f0:7c:47:
d3:24:c3:70:ba:8e:12:a6:c4:8b:b7:24:7b:14:6f:
21:a1:e4:8d:51:23:65:b4:4a:f1:0c:42:c5:b5:f6:
62:d2:55:29:64:da:83:93:4f:75:5b:80:a7:47:1b:
d0:21:55:14:fa:2a:0f:3d:de:1a:f6:a2:ae:98:3c:
01:41:9d:81:65:cf:07:1d:66:4a:fb:c3:f9:af:78:
d9:00:ee:d3:3f:25:87:30:c8:00:71:e2:40:37:d6:
81:42:a2:1e:49:03:e4:81:a7:46:35:6d:58:1b:1f:
fc:3c:3f:e1:0e:8f:45:1e:9a:ff:31:9d:8c:6d:37:
d7:bd:db:43:19:87:77:97:86:92:e7:ed:2f:89:d0:
69:8f:5a:08:e8:72:2b:b4:8a:4b:d5:f0:56:09:74:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:B1:B3:60:83:7C:C2:93:06:15:72:8C:36:31:49:1E:DC:7A:29
X509v3 Authority Key Identifier:
keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:0e:f2:3c:f6:80:6f:be:95:3c:26:bb:cc:70:f0:93:22:2a:
b8:e8:58:1c:1f:2c:f1:b3:e5:b4:87:82:1b:de:67:9e:d4:52:
99:d6:c3:77:67:1e:7a:e6:d7:13:1d:2e:e2:2b:31:05:3f:0e:
c3:44:d9:ce:88:2f:37:82:85:34:bc:e9:ee:ef:a6:75:c8:7b:
70:37:66:d1:3a:77:a6:ea:56:0a:5e:12:c9:49:81:32:29:19:
1e:80:d8:7d:64:1a:6c:18:06:0f:64:21:cc:04:0c:d4:e4:a4:
08:99:1e:ab:69:39:9d:dc:2a:ca:7b:76:8c:4e:8f:7c:b3:e7:
61:b3:81:c0:b6:0f:cb:f8:b4:9c:a6:6f:a4:f6:2b:47:b4:9f:
44:9f:08:31:2a:86:7d:1b:66:2f:f3:53:b6:15:63:38:41:3f:
31:57:d7:b6:7c:e9:7b:31:68:78:54:d7:28:76:5f:4f:65:41:
32:93:21:6f:2b:4b:a5:54:d8:80:eb:1b:8c:54:2e:d2:c8:4e:
e3:a5:57:77:70:7e:7f:9d:8a:a0:0f:66:98:4e:16:a9:89:47:
d2:e2:34:ad:0c:07:8e:61:76:28:4f:04:a2:3c:fc:67:70:ca:
a2:41:14:43:82:25:cc:a9:2b:1f:d8:c7:ca:5c:5a:06:73:0b:
76:b4:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:47 2026 by rpki-client