
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier: 6M97U8dReGYaqUOG/j0HL69dmgxDTci6Q2qzCRcpP7A=
Subject key identifier: 7C:25:C9:79:2A:F9:29:8D:BA:C3:DA:B9:C5:1B:C6:95:06:01:7B:3D
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number: 013D
Signing time: Thu 23 Jul 2026 07:02:10 +0000
Manifest this update: Thu 23 Jul 2026 07:02:10 +0000
Manifest next update: Thu 30 Jul 2026 07:02:10 +0000
Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: yEmGzsodJJ11aeE2ueFeOJFJcoDkQ2wTZG0hRb+wh9c=)
2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: r3aI1/tR8opqWS0V1KSkbb0iZwN9sMbMB5X14kpNYs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Validity
Not Before: Jul 23 07:02:10 2026 GMT
Not After : Jul 30 07:02:10 2026 GMT
Subject: CN=6a61bc72-25cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:7e:30:30:c1:45:09:45:9c:99:15:f9:ef:
e8:a8:6f:59:cb:ef:d8:53:65:41:39:23:4f:a5:85:
9f:f9:92:77:0d:1c:37:c6:aa:9f:06:8b:83:0c:42:
94:98:aa:47:85:34:22:b5:da:f0:cc:f6:9e:a3:05:
74:47:b3:23:b0:5c:98:c1:f3:c5:80:52:64:4e:d7:
ba:2e:83:ef:ae:06:ed:09:6b:ae:68:46:15:2f:bb:
c0:f9:c1:dd:87:ff:b7:e8:52:82:50:d7:3d:6a:96:
3c:f3:4e:02:1f:bb:b0:23:c8:24:84:26:dc:be:6c:
e9:53:cf:59:52:a5:f6:d9:01:cf:e3:34:6b:d1:93:
57:b8:d5:7e:8a:88:b0:a9:ac:07:13:59:99:1b:7c:
f3:4d:e3:dc:d5:7f:8d:1c:aa:7a:28:2d:16:90:1f:
ed:5b:ad:8f:50:aa:9d:1a:8b:0d:cc:2d:96:14:0a:
80:73:7b:fc:76:1b:46:80:76:a3:61:d2:cd:3b:d3:
eb:27:2d:dc:d4:40:36:e7:3d:2b:5c:2e:8b:25:bb:
6b:82:a6:a4:9e:d6:ce:18:a0:fa:97:62:d3:2d:39:
36:bc:51:67:12:f4:22:13:ae:0e:8c:f5:fb:dc:35:
5a:1f:0a:6d:bb:fc:b6:73:f1:45:0d:d3:34:ea:bf:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:C9:79:2A:F9:29:8D:BA:C3:DA:B9:C5:1B:C6:95:06:01:7B:3D
X509v3 Authority Key Identifier:
keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:be:ef:60:25:20:05:e8:3d:ca:a2:f5:cc:bc:24:59:65:
04:69:ba:0e:f2:0c:49:f6:21:a2:3d:e1:1e:96:d7:38:8a:2c:
d9:c6:a4:d8:8d:93:6f:d1:32:1f:c1:73:94:d0:bb:80:6c:9f:
74:ce:dc:de:ac:f4:f4:b1:a4:84:62:cc:f6:ed:22:01:58:f4:
05:cc:06:a0:6d:c6:8b:1e:22:d2:a9:26:88:08:2f:e4:d1:62:
47:a7:62:ca:07:73:98:61:ac:ef:d8:c1:84:2c:0b:a3:20:0a:
5a:bb:2e:a4:83:45:7d:88:fe:9b:03:82:80:18:ce:d4:f5:6a:
06:08:37:82:02:32:9c:77:e6:99:ab:eb:00:4d:2c:e7:54:43:
92:15:ca:2f:e6:0c:2d:03:7c:b4:eb:1d:28:ba:51:ab:2a:ef:
6a:36:8f:54:26:32:fc:86:39:cb:47:4c:0a:14:c0:60:cc:9e:
4b:33:77:0d:90:1f:42:18:dd:fd:81:0a:44:31:ee:50:2e:49:
a9:68:3d:9c:5e:a8:0f:2f:18:0b:4a:c1:65:15:34:e0:73:a4:
93:56:21:f2:07:99:5e:77:a3:65:61:3f:5d:68:93:55:0b:f6:
19:3b:3a:91:0e:e0:a7:cc:eb:61:5d:7a:1d:3f:cd:9f:94:7b:
f7:41:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:59 2026 by rpki-client