
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: p6DylS2WX7wpLZNqzkUXbCOcJZ5cq9Wmy+HhDWFTpjc=
Subject key identifier: E6:6B:C4:E0:AA:DA:18:BA:67:02:21:4A:81:27:57:DC:C8:24:F4:85
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 07D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 07CA
Signing time: Tue 12 May 2026 21:31:37 +0000
Manifest this update: Tue 12 May 2026 21:31:36 +0000
Manifest next update: Tue 19 May 2026 21:31:36 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: vUCwYrdkhE5mIzholv0wkLZ/nHNQ6dsMgcG7m6pAMaE=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: May 12 21:31:36 2026 GMT
Not After : May 19 21:31:36 2026 GMT
Subject: CN=6a039c39-0178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:86:07:c0:46:90:e4:74:09:65:77:4b:43:
93:16:3b:f2:64:02:af:f7:b0:e5:13:53:3d:08:7e:
0b:2a:63:9e:ed:57:1d:4e:3c:25:80:ba:b9:c1:3b:
0b:a1:f3:97:c1:eb:5c:8f:a6:93:dc:08:eb:0b:3c:
16:05:37:51:ae:29:a2:15:13:07:10:e2:a1:40:72:
b6:d7:8c:16:ca:74:0d:a7:aa:ec:05:6d:4d:c2:d4:
d4:74:77:3f:74:94:8e:c2:b1:eb:51:cb:6b:d3:74:
73:da:33:66:7c:ce:f7:66:75:5a:86:6b:32:fd:e4:
97:62:15:f0:32:28:29:76:4c:9c:2f:b1:0e:b6:99:
ee:f5:34:04:4d:9c:83:ed:66:7c:29:b3:d7:1c:67:
dc:17:0c:4f:61:ff:76:d9:b1:af:c6:7f:42:cb:8e:
29:9a:61:08:7d:55:6e:3e:2e:7a:49:f7:51:f7:75:
53:f8:7d:93:aa:f2:30:7b:e4:df:a8:11:19:cc:ed:
4e:6f:f5:84:e6:96:fd:92:a8:e3:91:84:36:d3:62:
d6:a2:db:f2:b7:34:05:bd:ae:4e:f6:b8:31:2b:87:
44:b0:eb:dc:cc:3e:53:bc:84:16:3a:b5:8a:7d:7b:
66:74:5b:33:0b:ff:e5:e3:ac:25:ce:c0:15:2c:b0:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:C4:E0:AA:DA:18:BA:67:02:21:4A:81:27:57:DC:C8:24:F4:85
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:b1:1f:32:81:e8:3b:90:49:8f:71:b7:6c:16:98:36:44:
af:ef:d0:bc:64:fd:2c:4a:57:69:e7:c8:c6:f7:e8:26:03:9d:
fd:0b:85:8c:af:fe:c3:b6:75:7c:2e:74:9b:c4:df:b5:66:34:
55:19:73:ae:d9:20:8f:d2:38:bb:0b:04:73:59:04:4a:25:2e:
e1:25:fa:bf:dc:bc:82:81:1b:eb:df:6f:15:63:f2:f3:d4:52:
f6:5f:99:c8:ce:b7:37:58:ca:98:a4:59:c0:d1:b7:b8:35:d8:
9e:fc:50:9d:1c:68:12:e3:96:aa:1e:0c:37:ed:f6:7e:34:6b:
1f:e9:ba:ca:76:18:ee:28:69:58:fd:02:dd:47:66:75:a9:17:
e2:9c:e8:26:d8:9f:e4:99:cb:90:ab:5b:60:8a:ca:f5:13:49:
38:33:e0:10:50:34:08:ec:79:40:3c:eb:e7:38:4b:c8:7a:7d:
25:c5:f4:71:af:ba:2b:1e:49:01:d8:ba:a0:a5:a9:a4:ef:81:
48:94:0b:b9:57:4e:0a:c4:36:06:5f:b4:60:09:93:39:d9:d0:
be:4a:ee:dd:d3:4c:f4:95:f3:e4:a8:d8:42:f6:a5:ae:8c:ed:
ea:80:eb:65:69:8c:0e:23:55:1a:62:eb:af:60:a5:1e:3f:38:
5d:d3:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:33 2026 by rpki-client