
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier: n9h2Xk0/XvUJrRBgJ4RpkovYbe9mKaW/4jaXTG8Neck=
Subject key identifier: 9B:1C:EF:50:68:FA:1B:83:47:6D:A0:2B:26:C7:B8:78:B3:5E:BF:39
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number: 02A3
Signing time: Thu 23 Jul 2026 02:43:23 +0000
Manifest this update: Thu 23 Jul 2026 02:43:22 +0000
Manifest next update: Thu 30 Jul 2026 02:43:22 +0000
Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: O55PrYOKC50DtWn+j/44Lu7v6gg5qgMspZbQIDUhpH8=)
2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: 9AQPocMd2J6g2hv7Dkr/AUm1nWYER+gsBq8heFcxqIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Validity
Not Before: Jul 23 02:43:22 2026 GMT
Not After : Jul 30 02:43:22 2026 GMT
Subject: CN=6a617fcb-1b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:f1:0d:51:de:d7:08:df:eb:97:1a:b6:a9:
1f:5b:08:43:c1:b8:37:92:7b:80:1d:85:cd:19:d3:
f2:d0:47:86:be:fb:7a:8f:a2:32:af:ab:98:4e:5b:
16:45:50:72:a0:e7:2a:bc:51:a5:48:a7:bc:a6:ec:
29:11:71:59:e1:77:46:3b:d3:67:bc:a9:b3:33:2c:
af:44:ea:62:66:d0:08:3e:5b:6d:98:be:6c:66:7d:
20:da:60:7a:94:d5:c5:43:7b:58:4a:e8:2a:a1:50:
fa:b0:e5:b0:94:98:aa:83:8b:7b:72:04:c8:88:c8:
c9:56:e8:3a:9f:a5:4d:f4:35:b8:dc:7f:aa:d7:17:
d6:63:91:c1:73:42:99:89:34:82:01:e0:b7:cc:c1:
1e:0e:e0:09:d5:e7:66:81:8a:f4:95:7c:e1:46:30:
e4:49:b2:22:4d:99:56:f2:19:0a:fd:6d:8c:f1:a6:
ef:f6:9e:c5:99:2c:b0:09:06:7b:ca:68:66:0b:f4:
9b:5d:36:35:48:c7:33:f6:da:0b:40:f9:01:a0:0a:
df:67:95:00:cd:f8:90:b3:64:d0:a2:9b:36:11:29:
ac:d2:fd:7f:ea:50:42:c4:14:75:93:96:3a:91:d3:
8e:67:38:db:93:68:13:06:85:84:4c:e9:9f:21:e9:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:EF:50:68:FA:1B:83:47:6D:A0:2B:26:C7:B8:78:B3:5E:BF:39
X509v3 Authority Key Identifier:
keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:95:60:bc:00:9a:d3:3a:dd:e9:fb:74:7c:45:70:f9:99:
c7:cd:b7:1c:c0:68:88:c4:2a:89:4e:74:64:4d:15:dc:85:e1:
87:c8:b7:e6:2d:e1:b6:27:2f:ff:69:0d:d1:ef:d6:5b:24:3b:
a4:89:93:db:86:5b:88:50:33:77:2c:03:fd:03:6b:57:b7:de:
b5:38:42:5d:cc:9d:6a:ad:f7:69:90:86:2d:22:e6:f4:17:8d:
d0:2c:56:cf:a5:ba:6b:ce:6f:f3:e8:74:88:3a:de:5a:e5:6f:
f3:c8:6a:fd:50:7d:a7:7e:b5:ee:7e:74:3f:6c:04:25:bb:89:
c5:a7:e7:83:a6:48:ac:0d:28:6c:f5:b7:2d:76:19:91:5f:2f:
8d:6b:31:35:21:31:5e:f6:63:04:42:8c:8f:10:64:58:37:90:
01:c4:f6:36:c7:38:2d:35:70:b5:26:d5:e1:ea:51:c7:00:87:
26:07:12:31:fa:97:e7:90:fb:e7:da:79:4a:18:26:bb:0b:a4:
db:37:3b:67:c5:e4:08:c4:29:57:27:dc:13:a1:5e:c4:15:08:
55:d6:bd:eb:b7:b7:0f:14:3e:41:8d:76:a7:98:9a:2d:7c:a3:
93:28:0a:08:19:44:1c:06:d4:db:02:ba:57:38:35:6c:21:d6:
59:72:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:03 2026 by rpki-client