
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json)
Hash identifier: 7A5KP7+LcfBFODEEZWlgaTplpsUIAgogNPVV2id3xvo=
Subject key identifier: 52:1F:62:35:79:91:A6:4C:23:7F:1D:A7:B8:F8:3A:01:D8:F4:EE:9E
Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
Manifest number: 023F
Signing time: Thu 23 Jul 2026 03:47:13 +0000
Manifest this update: Thu 23 Jul 2026 03:47:13 +0000
Manifest next update: Thu 30 Jul 2026 03:47:13 +0000
Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: tWpfImVYXLribk1D5jAzk5m+aPkdPexVsnPW21mAcTA=)
2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: Ny3isw6umsC+HWLP+QGmuoxGo7jIpWZVWqHK1TweF80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl
rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
Validity
Not Before: Jul 23 03:47:13 2026 GMT
Not After : Jul 30 03:47:13 2026 GMT
Subject: CN=6a618ec1-e892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:9b:81:1b:42:92:50:7b:e8:ab:e2:4e:5e:
30:4f:41:e7:1f:cd:55:a3:7e:bc:bf:31:0f:68:d3:
58:21:78:83:cf:8c:f1:94:0d:1e:92:4b:3a:7a:bd:
e3:7f:ed:82:94:54:95:56:ab:f2:d4:96:5e:cc:de:
b2:2b:c0:51:91:fc:50:20:5e:6e:45:6a:10:b8:d5:
6b:2a:41:4b:46:4b:d7:f8:10:11:94:4c:7d:03:7e:
26:5b:f3:99:6f:ad:c9:4a:e1:ca:55:61:40:61:50:
ee:d0:f7:73:95:25:68:d8:a7:19:80:3a:1a:61:e9:
51:fa:a7:fc:ce:e7:72:f7:8b:a1:9c:f7:eb:d9:ac:
da:dd:2d:62:d5:59:85:8f:6c:d5:92:31:82:40:96:
30:16:a0:48:69:3c:0e:cc:29:28:d3:83:6b:f1:82:
ed:a0:44:3f:fa:74:78:32:53:1c:54:c2:9c:01:21:
33:9d:1c:0b:a0:cf:58:68:2e:b0:37:77:c4:d0:6a:
b3:71:8e:f1:7b:0d:03:d1:55:4c:40:f6:dd:cc:a9:
3e:91:75:d5:0f:80:d7:d8:d0:fc:b4:c8:ad:1b:b2:
be:88:3c:85:2a:38:8d:a4:b1:78:53:ca:64:d7:8a:
5a:03:eb:01:aa:d6:73:60:6f:39:2d:98:58:7a:4f:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:62:35:79:91:A6:4C:23:7F:1D:A7:B8:F8:3A:01:D8:F4:EE:9E
X509v3 Authority Key Identifier:
keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:55:4c:4f:aa:0e:75:c3:55:d2:13:6d:64:15:ab:72:49:
31:ac:09:60:02:3e:f4:82:51:40:25:c5:d8:16:ad:eb:86:7b:
b1:eb:24:c7:a0:e7:ea:6f:24:6b:4d:61:89:5c:f2:93:92:e4:
ed:2e:7f:55:a4:a1:dd:21:27:c4:b9:dc:2a:59:95:23:47:35:
8c:27:be:2f:58:bb:7b:4b:60:d2:e9:65:27:0b:26:3b:45:0e:
81:e9:b8:4a:ee:d7:51:1c:5e:cf:51:39:16:a0:23:1a:a0:11:
1b:63:0a:c8:b1:b2:96:39:57:b8:cc:9a:fa:76:66:e7:15:fa:
98:6d:e0:ff:ae:b0:39:87:9e:e4:d3:55:64:30:fe:75:35:54:
08:6b:3f:c6:1d:65:8d:c8:56:30:71:6d:75:72:5b:1c:e2:df:
81:cf:43:d5:3d:4f:fd:82:2b:53:2f:f7:6f:0a:71:25:01:a4:
7e:30:f0:3d:d5:f7:a5:b7:ac:6f:bb:24:d8:fb:e0:cb:dc:66:
04:f7:f7:d6:88:84:46:17:12:70:a4:ca:8d:f8:3a:d7:b7:c5:
9a:73:38:a0:b0:6c:22:84:c1:e2:d4:3b:d2:77:f5:4a:65:46:
b7:8f:4d:a3:12:29:c0:f5:03:fc:2c:34:9a:df:0d:40:62:56:
a2:b7:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:42 2026 by rpki-client