
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier: uF3aY1jEsfTaic+j5SS60Hr59Mcvy+A2AGmk4U0+7c0=
Subject key identifier: 7C:20:9A:F0:59:E6:36:94:3A:B9:45:2E:BF:5C:33:A2:41:D8:A3:46
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial: 0561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number: 0553
Signing time: Thu 23 Jul 2026 00:13:04 +0000
Manifest this update: Thu 23 Jul 2026 00:13:04 +0000
Manifest next update: Thu 30 Jul 2026 00:13:04 +0000
Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: sgiymykupv0BNCtQeBKX1hkUcAOcp6ByGg+q59cgNMI=)
2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=)
3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Validity
Not Before: Jul 23 00:13:04 2026 GMT
Not After : Jul 30 00:13:04 2026 GMT
Subject: CN=6a615c90-0aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:6b:f1:b9:84:65:96:ab:14:97:d7:0a:44:
01:e2:39:3f:6a:6c:6a:da:bc:92:04:eb:b9:85:33:
94:c4:ac:46:3d:0a:3f:23:68:fc:f7:21:9e:9f:b2:
c8:43:72:c0:f6:62:e4:9c:2b:07:72:5f:37:e0:f5:
7b:09:e9:ec:0f:8b:2f:60:75:e3:b2:c5:f3:0c:96:
1c:13:82:42:fc:bc:f7:f2:c7:ac:fd:f6:24:db:7a:
50:3a:0a:5a:94:6e:2c:ca:04:23:dc:e8:32:57:ae:
31:f7:a4:d4:3e:94:97:fd:6f:ac:62:0e:ed:d1:2b:
36:02:49:b1:ad:03:89:ac:2e:22:f0:f7:1b:4b:a3:
9b:aa:75:f5:05:c5:f5:b9:29:19:9a:a5:eb:91:90:
e9:79:f2:46:67:79:fd:c2:0c:7d:f7:75:91:39:39:
1b:61:05:1a:dd:fb:40:e5:ea:f7:fb:f7:08:0e:e4:
e0:c1:bc:d7:4f:31:4d:ae:4f:72:43:cc:9f:f4:d6:
14:1e:96:f0:1e:63:85:d7:9f:e8:60:61:48:8d:af:
86:cd:43:17:e3:a6:f3:ae:d6:43:9c:25:14:06:ac:
24:e5:2d:83:01:10:38:a1:36:04:2b:04:b9:98:5d:
11:e9:31:e5:76:04:4c:a8:44:de:5d:22:fb:fb:3c:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:9A:F0:59:E6:36:94:3A:B9:45:2E:BF:5C:33:A2:41:D8:A3:46
X509v3 Authority Key Identifier:
keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:fe:07:82:85:56:1d:6a:3c:b2:6c:a9:a5:14:97:e5:34:
fc:d6:af:cf:27:3e:78:63:9e:ba:18:b7:fe:8f:68:76:dc:72:
60:16:1c:33:11:cd:b2:3f:52:3f:b0:0d:da:f9:40:d7:0d:72:
50:0a:ec:0d:08:df:21:e5:8a:b5:4a:d2:c7:20:d3:95:b8:68:
6d:1f:38:82:14:92:ab:1a:53:5c:4c:ea:6c:78:1d:50:e7:56:
f5:5e:b9:f4:bb:25:ba:b4:00:da:24:2c:d0:4b:20:83:4c:37:
71:a5:bd:38:0b:8b:01:7d:aa:37:e6:a9:3a:55:25:96:71:cc:
dc:21:23:bb:16:56:87:17:b3:04:6b:ce:f8:45:3f:8c:6d:b5:
d5:10:2a:62:0d:35:46:0d:9f:f3:c0:82:7a:16:61:1b:80:a8:
11:21:68:8f:14:84:d9:8e:d7:99:96:c9:11:07:4d:e7:61:35:
50:9a:b6:b1:26:5d:48:3a:53:20:a4:89:ba:1b:72:8d:71:76:
8f:c5:8f:2f:9a:a4:2f:44:37:f9:e0:8c:1d:69:72:34:a6:74:
88:2a:5e:69:b8:6e:8d:30:00:60:42:9a:36:de:de:a6:48:a5:
04:0d:9d:b8:2a:93:88:0d:a9:41:f5:88:e4:6c:c2:73:31:a3:
30:e7:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:31 2026 by rpki-client