
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: eT3sLi5mCPKEvckOeMVIeNW0NFmHU6Uwi3eVvWXQBs8=
Subject key identifier: ED:D5:68:D1:78:7A:A3:67:1F:B1:B0:4F:15:64:B3:BF:4B:4A:71:93
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BBD
Signing time: Fri 24 Jul 2026 01:22:47 +0000
Manifest this update: Fri 24 Jul 2026 01:22:47 +0000
Manifest next update: Fri 31 Jul 2026 01:22:47 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: INPsLrX9uYklvUAZbrJcguD8N/ZZ+6kSc/k8p0C+lYo=)
2: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
3: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
5: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11283 (0x2c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Jul 24 01:22:47 2026 GMT
Not After : Jul 31 01:22:47 2026 GMT
Subject: CN=6a62be67-4336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:11:fa:54:43:4c:4d:b6:b7:c0:db:c0:e3:
b4:22:10:49:a8:80:ad:c8:e9:fe:dd:0a:71:68:e9:
78:93:63:36:58:8a:12:81:d0:05:09:1a:5d:25:4d:
85:62:46:45:2a:c4:6c:0b:d8:97:1a:8b:ff:15:9c:
53:f5:57:2c:bb:d8:88:e9:16:7d:d3:4c:e2:6d:c4:
2f:eb:d1:2f:61:3b:cb:2f:28:f0:2f:72:b2:16:90:
f3:98:ef:dd:7d:35:2c:b5:31:7d:c6:6b:ff:b3:84:
b5:18:13:77:1e:4d:a3:07:5b:89:af:ac:fc:51:3a:
02:88:70:46:f4:10:96:2e:bd:c1:a9:70:d6:61:1e:
6f:65:ef:33:a3:35:62:85:60:e4:19:d2:dc:da:61:
09:2a:62:99:84:eb:74:35:cb:a5:3f:03:1c:69:9d:
b7:84:2f:a5:8c:f8:97:be:47:18:07:da:19:8c:5f:
02:8a:eb:ea:61:c1:4d:16:5c:cd:39:52:e1:29:58:
ca:91:df:14:b2:d9:c5:60:e9:d2:1d:1a:b1:8a:54:
e2:f6:df:ae:e5:05:51:13:62:c5:6e:02:80:81:0c:
d9:67:f7:ba:1c:13:32:53:3d:58:6d:d7:5e:0a:c1:
d0:88:ad:e1:22:86:79:ad:a9:62:d5:aa:30:1a:cc:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:68:D1:78:7A:A3:67:1F:B1:B0:4F:15:64:B3:BF:4B:4A:71:93
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c0:ff:cc:52:0d:ca:00:d9:54:1d:12:b5:da:a4:62:2f:76:
1b:cc:aa:7f:40:2c:df:22:7e:14:59:28:a3:9a:95:9d:41:28:
2d:d7:18:db:ab:4c:5c:b9:54:c5:f3:6a:80:1e:6a:89:4b:82:
e9:f6:e7:d4:fe:8e:16:3f:85:54:45:f9:bd:b8:64:af:87:c2:
ad:1e:1f:5d:40:4f:bd:27:7c:c8:6d:cd:dc:76:50:9f:6a:3c:
76:ff:09:31:36:b8:47:8c:2d:2b:ee:28:f9:9c:cc:28:ff:59:
8f:cb:eb:70:99:cc:54:56:ba:0c:b2:c5:27:36:d4:68:17:36:
88:1f:37:dd:7e:b3:95:30:63:86:63:cb:67:45:2b:a7:b8:14:
13:ca:ad:26:ea:65:2e:09:e5:e2:74:15:31:49:ae:c3:a7:27:
83:e9:c0:2b:ba:45:29:a7:b1:15:4d:f3:37:90:ef:32:4f:1b:
ce:0a:dc:9b:c7:bb:3c:85:77:9b:00:f8:01:64:21:21:24:d3:
5f:ca:52:9a:b8:81:1b:85:db:6c:90:12:88:cb:d6:43:ee:25:
a2:8b:18:4b:8f:da:d1:7d:ce:cf:4a:12:d7:45:f3:fa:69:a0:
00:9b:46:78:56:ea:68:aa:5f:81:f7:96:58:42:69:c5:74:8b:
13:35:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:40 2026 by rpki-client