
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
File: rLt_9DfbXs46q3oR0szOQb_IQJ8.mft (raw, json)
Hash identifier: rdruXl8QXmvmgXw4+OsbTMncOe5eO3+yx3+YtBv6M9U=
Subject key identifier: 36:B1:E1:86:A9:B2:82:08:B2:82:05:C5:34:86:00:4F:53:17:13:AA
Authority key identifier: AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F
Certificate issuer: /CN=A9139ECA/serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
Manifest number: 0D
Signing time: Thu 23 Jul 2026 11:12:44 +0000
Manifest this update: Thu 23 Jul 2026 11:12:44 +0000
Manifest next update: Thu 30 Jul 2026 11:12:44 +0000
Files and hashes: 1: rLt_9DfbXs46q3oR0szOQb_IQJ8.crl (hash: GJM4lbJR8zdQJHZDgCZohCrS63q+TRPT/xXgZ+f/jV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl
rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139ECA, serialNumber=ACBB7FF437DB5ECE3AAB7A11D2CCCE41BFC8409F
Validity
Not Before: Jul 23 11:12:44 2026 GMT
Not After : Jul 30 11:12:44 2026 GMT
Subject: CN=6a61f72c-a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:02:cf:f0:11:bb:19:de:94:7a:27:89:d4:
34:7a:84:e3:56:b4:ff:91:1b:e1:a5:59:bd:10:46:
c0:a8:d6:c4:c8:70:ab:ec:32:fb:e3:cd:26:c4:ce:
7f:5d:04:38:1c:90:6c:36:db:8b:2e:a4:57:dc:9c:
9f:8f:52:27:cd:ec:06:9a:89:64:2c:d9:32:33:60:
e5:93:d0:59:cd:fe:d1:ce:69:34:25:41:f4:e0:27:
0c:6f:b7:3e:52:5b:27:23:9e:e3:4f:9a:ca:43:b0:
7c:61:7d:9a:30:15:2c:cb:62:28:37:15:81:60:5b:
a9:d3:3c:79:5b:70:1a:3c:24:2c:de:06:e3:a7:60:
8e:fd:7b:7a:9f:57:d8:29:2b:82:e8:25:14:4c:83:
ed:52:74:77:71:ab:d2:f4:d1:96:d4:00:6e:da:04:
59:d4:ff:f6:36:e2:30:3c:36:72:e6:2f:47:8e:d8:
ef:81:b9:59:8a:25:eb:20:54:52:11:a0:91:34:aa:
b4:61:af:61:25:3b:0d:67:c8:09:5c:2f:69:3e:bc:
6b:e0:f7:44:9f:47:02:90:55:30:7e:63:aa:af:2f:
db:53:44:2e:d7:c7:46:e6:7d:b7:ba:ac:a3:9d:82:
c1:c5:d9:c1:09:5a:d6:11:90:1e:d0:92:5d:f3:b5:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:E1:86:A9:B2:82:08:B2:82:05:C5:34:86:00:4F:53:17:13:AA
X509v3 Authority Key Identifier:
keyid:AC:BB:7F:F4:37:DB:5E:CE:3A:AB:7A:11:D2:CC:CE:41:BF:C8:40:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLt_9DfbXs46q3oR0szOQb_IQJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/A06FF2A4744B11F1A715B8456CA30FBC/rLt_9DfbXs46q3oR0szOQb_IQJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:15:5d:85:84:df:5e:74:a7:a3:e4:ec:c9:a6:e9:2e:16:
58:82:03:23:3e:ba:c2:fa:10:ad:2a:e6:81:41:2a:7e:f2:e1:
99:bb:67:50:42:87:66:70:52:10:95:14:15:56:67:ee:17:0f:
5a:d7:32:e5:a2:59:df:70:a8:68:67:f9:f4:71:8e:07:4c:96:
43:44:fd:6d:a3:ca:82:0d:ba:cf:e5:c9:77:0a:94:91:73:a7:
27:54:2b:e1:6f:e4:82:27:c1:95:e2:a2:db:05:5d:2e:02:8a:
e9:7b:d0:69:0e:1b:38:c6:f7:ba:56:33:7c:0a:45:8f:f6:e2:
74:ab:4d:07:41:e9:72:2b:e3:36:20:af:e0:5d:83:a0:99:0e:
ac:7e:cc:e2:8c:7b:79:f4:40:2e:fc:4e:31:96:d7:a2:91:88:
c3:77:90:83:93:29:3a:85:8f:39:b6:11:ed:ec:39:bb:da:8e:
fb:83:4d:b3:5a:37:3c:83:22:7b:4e:a0:6a:1c:ad:28:9c:0c:
49:32:69:01:e2:9c:38:55:2d:39:f0:1a:ae:66:61:50:6d:cd:
4c:2d:a9:7f:a7:ff:be:ce:9d:f6:d0:14:df:b8:46:61:e0:ea:
a0:4f:02:25:9d:e2:2d:01:d7:6f:4b:af:e5:12:af:e5:be:92:
8e:57:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:37 2026 by rpki-client