
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: m0o+F8Zm1F7gyP9LAZPlQU6cQmXbVN1BX98tAqg5xpU=
Subject key identifier: 2D:07:B8:D4:47:BA:E9:FE:B1:69:61:25:DB:2D:64:96:A2:F0:7E:8B
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 0204
Signing time: Thu 23 Jul 2026 04:27:57 +0000
Manifest this update: Thu 23 Jul 2026 04:27:56 +0000
Manifest next update: Thu 30 Jul 2026 04:27:56 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: ZVXpvZxta0jnKq4654dVOlRv4MpWAnp8usl1pGNvH48=)
2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: yzSO4tM9nUI6xnt7Kh6rwJxk9dfi0T3Au+GC85D5PJE=)
3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: oIvNDV0kKg8+q3urTzdMBjxhKk7FfiR/yZ0iZHzMy9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Jul 23 04:27:56 2026 GMT
Not After : Jul 30 04:27:56 2026 GMT
Subject: CN=6a61984c-a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:cf:bf:82:c1:3e:35:d8:3e:0e:7c:5b:d5:
5a:a8:1f:d8:34:fa:52:6a:16:79:6c:69:7d:5d:ea:
fe:69:a1:1a:3a:f2:47:e7:fa:67:79:20:2e:f6:49:
43:34:2d:fd:10:bf:d4:a1:a9:ca:9b:4c:19:e9:10:
e1:8f:61:e4:d9:38:aa:7f:03:8e:c4:6b:51:0b:ba:
92:75:98:3e:f8:47:bf:62:ee:58:cb:d6:51:ef:e4:
d2:e4:89:cd:18:64:00:35:0d:0b:96:13:55:20:50:
fe:cd:b4:5e:d3:47:33:e4:7c:ac:39:6b:c5:ea:9d:
5e:0d:4d:61:91:6e:be:c8:78:fd:a2:16:15:a6:10:
82:65:63:1d:74:22:79:18:26:5a:27:91:dd:1f:c1:
92:59:84:65:6e:08:33:c3:62:df:b1:2f:33:36:75:
f3:d8:05:fa:39:64:9b:12:98:05:b6:68:8d:14:77:
64:d6:b0:6f:19:ce:16:e2:51:31:72:34:31:3b:51:
11:a9:aa:b2:d9:12:38:df:82:b6:44:e2:9b:cd:20:
9c:fd:72:d0:87:3c:16:e4:11:6f:9c:0a:12:92:f6:
ad:a0:c9:e1:9c:46:c0:3b:36:2b:ec:6a:3d:db:3c:
27:19:2b:3e:17:6b:cd:d8:e4:a7:0c:a1:26:db:d2:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:B8:D4:47:BA:E9:FE:B1:69:61:25:DB:2D:64:96:A2:F0:7E:8B
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a5:fc:e9:98:39:ef:b3:fe:da:70:33:43:19:bf:a9:85:02:
49:00:bc:e0:5c:6d:d1:b9:76:ce:a6:1c:72:f4:ae:ea:50:8d:
ca:27:c7:56:4d:ac:1f:b0:a1:f6:9d:05:1e:9e:c1:ca:cc:1c:
ef:17:17:40:b8:de:02:de:7d:76:9e:74:a6:8c:70:3f:78:8e:
a9:9a:69:05:c4:ab:e8:d8:c0:47:ba:31:eb:70:37:49:e6:0d:
64:b3:49:08:f1:f3:b6:be:43:16:63:96:05:6d:e4:bd:5f:3d:
62:c3:ed:7c:28:53:b5:1b:7d:b9:1a:88:8f:5c:30:79:38:a5:
a3:cd:22:ec:ce:23:fd:d6:54:ee:a3:17:d2:38:20:da:ac:ea:
32:25:f8:92:77:77:84:53:49:d5:41:8f:c8:ca:e8:c8:b0:1e:
85:ac:a9:82:cf:ab:93:01:2d:fb:f6:d2:b5:30:47:2d:9c:e5:
b5:0d:6b:06:ab:17:07:14:11:63:7b:cb:2d:08:65:f7:83:e3:
c1:b8:e7:61:bd:b7:df:55:3d:ad:ac:45:7c:a5:09:11:59:bd:
6b:86:40:79:09:b9:03:42:d5:f7:01:4f:ab:10:7f:58:62:55:
2e:c7:b5:8d:10:ca:ed:83:4b:66:fc:c6:3e:4f:49:a8:33:0b:
8f:86:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:18 2026 by rpki-client