
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier: 1yJZAMEDQtvO+74nRICqjE/9vfsFo3l6ATO6xjpBWsk=
Subject key identifier: E6:28:A4:29:1E:5D:5D:59:8B:F7:2A:0D:D7:39:DF:09:E4:7D:78:25
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number: DD
Signing time: Thu 23 Jul 2026 08:20:15 +0000
Manifest this update: Thu 23 Jul 2026 08:20:15 +0000
Manifest next update: Thu 30 Jul 2026 08:20:15 +0000
Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: 3CXOZu1nEEaBBjI5hNiZo0mkASa12qgtKPcMNoccM7w=)
2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: cVYUwns5T54IoB72QKZ0CGvpMEfMrfhrzm1qDa/aQyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Validity
Not Before: Jul 23 08:20:15 2026 GMT
Not After : Jul 30 08:20:15 2026 GMT
Subject: CN=6a61cebf-c69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:16:7b:08:cc:c4:3e:67:0f:3f:7d:b4:3f:
25:2d:2c:ab:9d:c6:c2:ad:bf:09:61:b5:ce:80:80:
f0:e5:6a:d2:df:f0:15:24:cd:22:a2:58:f7:44:78:
e6:ec:b1:26:66:9e:82:cf:f5:08:63:91:73:da:c4:
d8:ae:32:6d:7e:a3:c9:2d:d2:91:03:84:3c:6f:36:
75:ed:d6:31:96:53:12:8d:a7:c1:c2:f5:ac:27:48:
6c:21:60:7a:30:b0:7e:89:f0:0b:f7:01:88:c0:45:
81:ef:9a:92:cf:fc:59:aa:42:85:8a:4f:ac:56:5b:
da:1b:21:02:87:be:fd:b8:4f:7f:9f:ca:fb:4b:e8:
ac:fb:f8:f9:c0:e6:1f:83:01:6e:53:5f:54:6d:5c:
92:df:3f:5f:f2:b3:63:99:91:c5:67:97:b3:27:32:
3a:f6:18:02:a3:71:0b:64:c3:af:63:46:c7:92:86:
1d:32:a1:51:e1:06:b6:ed:c4:f2:da:7d:4e:17:17:
36:42:93:41:06:17:10:8d:92:f7:5b:f1:12:f5:80:
de:8a:af:18:1c:d3:b0:79:cb:5e:61:e1:e5:b0:f5:
fc:35:21:0f:ff:28:bc:ee:52:12:62:08:a0:4e:c0:
fb:9c:c7:20:a2:8a:09:8e:a5:29:ac:10:57:89:89:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:28:A4:29:1E:5D:5D:59:8B:F7:2A:0D:D7:39:DF:09:E4:7D:78:25
X509v3 Authority Key Identifier:
keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:51:2c:29:e7:d7:c7:a6:be:5e:c3:9e:74:45:ad:b6:e4:
67:8e:da:04:fe:05:25:c6:66:76:50:ed:da:bb:87:c1:35:35:
d6:a9:11:b9:5c:1f:66:5f:3d:ec:4b:8b:e4:91:80:70:18:56:
77:e2:f2:22:1f:e3:2d:db:df:62:a3:d7:99:ed:6a:12:e2:b7:
6b:82:64:fb:66:37:31:80:9a:f5:7c:39:b8:82:49:2f:79:41:
80:f6:a4:53:93:84:f2:29:2a:69:96:52:cb:85:14:f3:95:f8:
fb:9c:77:a5:e4:13:6c:83:f3:56:d0:58:fb:25:03:5c:9a:d1:
41:c7:99:b0:fd:e5:c1:45:01:9b:9b:2a:3a:36:3c:53:e9:14:
8a:4e:d2:dd:10:90:7a:17:e3:06:79:8f:5e:53:2c:14:67:16:
f0:89:c6:68:bf:6e:1f:53:82:01:8f:d8:2d:e7:5e:7c:13:44:
7a:fd:c7:61:90:59:c1:fd:a9:bc:44:7e:49:58:d7:d3:80:d6:
c0:a9:74:1e:62:ab:b2:4b:e1:c9:ee:fe:d7:fc:62:ee:a1:08:
4f:6e:7e:f5:14:d7:d0:15:d0:c1:85:bf:a1:df:5e:37:d4:53:
a9:01:6c:bd:5c:04:a0:1a:9d:6e:e1:5b:3e:7a:84:f1:ae:cb:
53:fd:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:29 2026 by rpki-client