
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: IrMtlugOcDTJDo1XWcIoKnwQdEAiQIkjA4d4Q9c7k2I=
Subject key identifier: 8A:5E:66:68:59:18:06:A3:92:9F:67:AA:84:DF:0F:18:D9:2D:7C:12
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 0525
Signing time: Thu 23 Jul 2026 00:22:39 +0000
Manifest this update: Thu 23 Jul 2026 00:22:38 +0000
Manifest next update: Thu 30 Jul 2026 00:22:38 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: Uv0FOp2ewiJPPtvWbuORmn/6dgIburRN5ibbUGnx8W4=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Jul 23 00:22:38 2026 GMT
Not After : Jul 30 00:22:38 2026 GMT
Subject: CN=6a615ecf-5f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:4a:40:ab:81:f1:65:f7:ec:d6:71:15:10:
84:4a:88:b3:d9:c2:2f:ec:ff:34:5f:5e:e2:5c:bc:
06:23:df:ba:67:dd:29:22:b1:03:84:64:c4:cd:f4:
b8:b5:44:35:b8:d7:3b:6e:80:f7:81:e5:8f:6f:99:
69:ae:a5:71:4b:a5:18:c3:ee:58:e7:87:fc:a9:9a:
fe:e0:95:8e:45:c3:6c:06:83:6a:f6:e6:92:b9:2a:
43:aa:a2:dc:a3:12:25:76:4a:7f:cb:cd:0a:db:36:
d3:79:51:cb:f1:19:bc:f3:68:9f:d3:6c:f8:5f:8f:
fc:a2:6a:88:fd:49:b4:61:0c:bd:db:4f:6a:81:8d:
95:f8:24:1c:74:1c:33:09:11:4d:68:2e:44:a6:01:
93:93:13:de:25:9a:9e:cb:dd:c3:f2:d5:c7:96:ba:
e5:c4:e5:03:47:f0:e4:fd:5d:33:e6:ef:85:4c:f4:
76:df:6b:84:85:7f:69:c2:96:5d:9a:c5:e6:26:99:
05:45:5e:1b:aa:51:38:59:57:96:5e:b6:7d:bd:df:
df:60:14:fe:81:0f:d7:df:08:20:b5:bc:32:63:0e:
8e:f8:4e:16:e3:7d:bd:9f:e4:e6:29:22:cb:b9:76:
98:11:a4:bc:ec:9c:ab:ea:28:e8:60:db:41:56:5a:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:66:68:59:18:06:A3:92:9F:67:AA:84:DF:0F:18:D9:2D:7C:12
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:7f:5d:05:cf:49:3f:13:d2:a3:28:05:7c:a4:e3:10:72:
3f:c8:da:1d:74:32:e8:0e:26:cd:6f:89:a0:d9:02:46:a4:68:
f0:4f:18:f3:db:fc:d0:3b:63:54:4b:6b:a6:27:c9:c6:fd:00:
2d:4c:ea:34:55:91:07:1c:8a:d1:23:b1:3a:6a:b9:de:83:d3:
09:10:c6:4a:68:3c:3a:eb:9e:30:88:07:cd:85:b5:60:0a:43:
53:9d:8b:0c:6a:83:7a:df:bb:2d:7f:aa:58:cf:03:f8:fe:1a:
61:51:36:af:df:61:c4:88:0f:c9:fd:4e:09:8f:49:dd:98:90:
f7:d7:c7:b7:2d:6a:f4:63:26:1a:37:70:ab:8d:6b:2a:eb:04:
92:64:9c:88:f0:3f:7b:80:44:6e:58:1a:f0:4a:60:a8:8e:8f:
21:ad:fb:d7:d7:c8:69:1d:66:15:d7:c0:02:66:a1:da:17:f8:
fc:37:79:47:bd:1d:db:c8:40:8d:63:5f:39:c1:e5:01:1d:04:
25:a8:03:00:8c:62:37:85:c3:c5:59:03:1a:92:58:40:06:ff:
48:70:e2:23:45:70:b4:a5:af:c2:8f:61:86:37:58:46:c5:1a:
72:d0:10:be:21:d0:d2:54:bd:ac:c6:58:f9:e4:d3:5f:af:66:
46:64:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:11 2026 by rpki-client