
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json)
Hash identifier: evvrnPz3FRGjVsIFku/MBspdGayHtNhLuvSzjLtdMG8=
Subject key identifier: C9:9F:42:27:DA:F7:40:EE:82:98:83:7C:04:3E:99:E2:23:10:C2:05
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
Manifest number: 0181
Signing time: Thu 23 Jul 2026 06:00:28 +0000
Manifest this update: Thu 23 Jul 2026 06:00:27 +0000
Manifest next update: Thu 30 Jul 2026 06:00:27 +0000
Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: LL6ojn7d77IC96zLMtalGxj2QmM7C+dqghnOHjt4zz0=)
2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Validity
Not Before: Jul 23 06:00:27 2026 GMT
Not After : Jul 30 06:00:27 2026 GMT
Subject: CN=6a61adfc-366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:d3:c1:42:f3:66:98:c1:c7:8c:f6:f8:6e:
89:4c:cc:fc:e1:b8:d9:e3:82:f4:38:92:0f:40:d3:
f2:ed:2f:3c:ba:53:ec:bf:ed:28:af:de:e8:9b:42:
89:cb:70:1b:15:60:24:10:7a:a9:80:02:6b:e9:58:
37:c8:e4:39:02:79:83:0a:f2:4e:c4:77:2d:fc:54:
8e:5e:3a:77:ad:16:3c:ae:2d:fe:f4:16:55:fe:0c:
a1:df:bf:1f:24:ce:25:b4:a4:ba:9b:a9:4e:68:a8:
f6:4d:5f:05:dd:98:6b:04:86:be:4f:99:72:5a:f2:
1d:c3:21:c7:a3:fe:ad:ee:c4:6a:4d:81:df:be:f5:
5d:6d:01:36:b4:ce:99:6c:4a:98:03:4e:27:4b:37:
42:bf:bc:78:2c:1b:6a:13:8c:48:83:d1:9c:33:7b:
ee:ff:94:36:71:9a:3e:bb:ca:34:53:5f:dd:6d:c2:
cd:6d:11:09:98:e0:52:a5:3b:e4:22:32:76:ca:36:
70:4a:e2:1e:b6:7e:45:a2:42:48:72:46:c3:8b:5a:
67:39:8f:f0:05:50:07:4a:c1:89:87:61:8e:93:db:
ec:71:7b:43:dc:29:f0:ef:05:08:2e:bf:d5:23:fa:
86:10:67:3a:3b:b1:0e:e4:11:1d:98:c6:8d:6d:55:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:42:27:DA:F7:40:EE:82:98:83:7C:04:3E:99:E2:23:10:C2:05
X509v3 Authority Key Identifier:
keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:89:02:29:13:6a:69:e2:65:9c:95:12:06:66:95:99:87:
47:ca:fe:35:72:61:6e:97:16:7b:3b:8b:bd:c8:87:de:b9:b9:
38:64:48:19:fa:2b:b3:6e:80:b3:71:a9:db:14:db:2f:bc:40:
40:04:e5:72:00:da:bf:c2:bc:cd:99:fb:7f:a1:4e:f6:ae:78:
b1:2a:c8:ea:da:fa:cf:3d:22:fe:77:99:6d:99:63:85:2d:50:
a5:7d:49:a1:37:76:b6:a9:b2:9f:32:bc:91:e0:91:bb:0e:9c:
cb:a4:c4:70:6c:03:a4:48:49:93:41:3d:fa:7c:46:fd:e1:c1:
f4:43:37:66:0a:5c:eb:d2:4c:40:32:05:2b:11:48:c6:a2:1a:
c3:05:c5:3f:89:ce:54:c8:de:5f:b3:13:78:d7:1b:5d:a2:c3:
3e:74:99:65:f4:a7:36:bd:04:0a:1a:47:67:18:46:1d:05:4d:
f1:51:84:5c:a0:2a:fe:ac:77:dc:79:f2:47:3a:27:47:03:96:
a2:4f:cc:d7:40:9c:fc:42:75:10:82:6c:e9:04:ae:a8:cb:d2:
37:0c:85:39:5b:5d:8c:e7:5f:96:c5:9c:57:b3:e9:c3:2b:16:
07:0e:07:9e:8d:13:b8:55:f6:12:7f:17:82:57:31:a5:b3:af:
30:d5:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:37 2026 by rpki-client