
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier: VRzHuJMpp1gH7rEG+rtM28b4sYEvFvH0AFg9pHnNKkY=
Subject key identifier: 78:5A:EA:20:3A:EF:38:02:91:90:E2:8A:BE:37:64:47:47:01:EA:93
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number: 0209
Signing time: Fri 24 Jul 2026 15:35:15 +0000
Manifest this update: Fri 24 Jul 2026 15:35:15 +0000
Manifest next update: Fri 31 Jul 2026 15:35:15 +0000
Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: E7QrwGiTPIBwPCM2hNIUpq12/lBZWPWoHZORD5cpnlg=)
2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Validity
Not Before: Jul 24 15:35:15 2026 GMT
Not After : Jul 31 15:35:15 2026 GMT
Subject: CN=6a638633-9e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:b0:a9:aa:80:2d:77:f9:73:31:2f:5f:d1:
e8:9c:d6:fc:82:e7:29:90:55:42:32:1a:f7:b6:f1:
4b:06:85:ae:33:63:27:75:e7:4d:e6:16:fa:f5:ea:
c0:1a:96:bf:de:77:aa:67:9c:c0:4b:2e:d4:4e:62:
36:84:8c:24:04:e9:88:9c:68:3e:6b:34:4f:af:e7:
07:c9:4b:89:56:8d:09:97:a9:50:ce:da:4f:39:57:
08:b2:ea:64:82:f7:cf:0f:70:6a:60:ef:43:ce:95:
3d:f7:f2:11:56:ed:c5:f0:df:a3:73:e7:ab:82:a2:
3e:72:cf:e8:56:02:6a:b4:40:07:fb:82:f6:c7:f4:
81:19:f5:f2:d6:f0:cd:18:b9:11:c3:53:5d:4f:ae:
25:94:d2:d8:35:67:89:9e:9f:c1:48:5d:cb:e5:b3:
bd:27:6a:b5:4e:f1:e1:76:4a:2e:53:26:4a:51:78:
62:3c:59:4b:88:25:21:93:df:05:0c:8f:66:50:18:
12:45:de:2d:f7:4e:b7:48:b3:c4:2a:3e:a5:73:93:
ee:19:72:31:68:3c:cb:32:75:3d:3a:d7:46:eb:c9:
ec:e4:2e:8c:bf:54:e6:6f:e7:fd:d4:13:f5:d1:25:
32:26:5a:8c:84:b4:73:4a:55:6c:f7:7d:3c:e1:96:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:EA:20:3A:EF:38:02:91:90:E2:8A:BE:37:64:47:47:01:EA:93
X509v3 Authority Key Identifier:
keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:61:a7:a3:af:2d:db:ad:37:ea:4f:7a:be:64:4f:11:0d:
3f:c5:88:7c:48:41:d7:91:38:7f:92:8d:7c:e1:7b:03:99:e6:
97:34:f2:79:ae:c4:3f:70:8d:53:48:f1:85:ac:52:fb:32:73:
68:cf:0e:a2:42:e9:77:2c:37:55:19:ca:74:f4:8e:da:a7:45:
bc:c2:01:e9:d1:ea:ed:df:58:16:ee:a0:c2:20:f8:66:a4:18:
9b:a4:a6:7f:83:7a:ba:a8:d8:e8:ac:b6:13:7e:b9:a6:38:e2:
f5:3e:27:88:5a:29:41:6f:89:fb:a5:1d:22:04:b8:54:43:25:
45:d4:db:c9:10:ac:30:74:4b:82:1c:9f:59:8b:1a:05:23:67:
60:e2:2d:f4:c1:4c:59:b8:88:6a:eb:51:21:ed:55:a5:f9:50:
71:bb:f2:94:8f:e6:4f:36:81:c3:db:07:b1:37:09:ab:7c:74:
97:c0:6b:53:06:21:e2:be:e9:3f:d5:a8:62:ab:c0:24:b9:b4:
fc:9d:72:c9:07:62:11:4f:71:9b:c0:5f:87:44:37:c4:ef:8e:
20:c6:ce:08:24:50:fd:53:7f:42:96:7b:7b:fa:d2:f0:0d:6e:
1d:d8:6c:eb:cb:3a:8e:2e:f1:b1:62:2c:6f:50:d3:17:49:18:
2e:7a:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:32 2026 by rpki-client