
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier: YXL/rw2Cakfi+3tgnYD5KRuO6q5ZHy3efSnfDq2CBXE=
Subject key identifier: E0:75:72:3C:54:AE:97:3C:9C:18:2D:CF:B3:97:FA:01:EB:AB:E1:2C
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 19AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number: 199B
Signing time: Fri 24 Jul 2026 16:32:14 +0000
Manifest this update: Fri 24 Jul 2026 16:32:14 +0000
Manifest next update: Fri 31 Jul 2026 16:32:14 +0000
Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: x5xdihwBWfMgLABWwLxYB2UBmdhrS/EwBEVBHWnYJw4=)
2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6575 (0x19af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Jul 24 16:32:14 2026 GMT
Not After : Jul 31 16:32:14 2026 GMT
Subject: CN=6a63938e-fb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:c6:86:3e:98:ce:7a:f5:6f:fe:5b:51:64:
95:3a:95:42:9c:5e:00:20:d4:07:41:99:dc:77:34:
e4:76:4d:04:17:89:9e:b1:67:07:03:64:ac:da:2c:
9f:79:12:7e:36:8a:d5:ce:a3:4f:7d:d9:99:f3:c6:
b6:a7:78:66:a7:0b:09:5b:05:64:b7:ad:24:e5:3d:
ce:df:6e:1e:18:87:e0:bb:31:a0:c5:4c:ae:66:4e:
d3:f7:75:eb:01:7a:b8:61:d2:7c:96:07:cc:8f:0f:
06:c2:19:d6:a4:c8:ec:ef:a0:67:08:68:dc:52:10:
24:41:51:30:af:9e:37:01:d9:b0:ac:d5:47:fc:26:
da:45:a1:16:e9:36:17:f2:34:20:2d:58:df:12:05:
4e:f3:1b:8c:05:39:66:69:55:32:36:8f:4f:17:85:
f4:2d:fc:bc:b6:3a:02:c5:cb:8a:5b:5a:97:41:32:
b2:00:bb:e3:e3:84:1c:31:74:d0:e5:b6:9d:a2:67:
be:ab:1a:cb:ca:98:6b:3b:25:f5:68:6f:3d:c4:06:
84:c0:5c:0b:96:14:10:6c:ec:0a:b5:d9:a7:9a:15:
f3:9d:49:46:26:20:43:d9:5c:db:16:6d:73:b8:9f:
0a:56:79:09:e0:fc:93:a6:15:62:d2:e1:58:a1:2e:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:75:72:3C:54:AE:97:3C:9C:18:2D:CF:B3:97:FA:01:EB:AB:E1:2C
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:0e:0a:2d:23:83:0b:01:38:6c:ae:d7:21:5c:a4:c9:b3:82:
ec:62:5d:e7:fb:3c:7d:ae:07:b5:75:70:f8:e8:3a:d7:21:8c:
bf:3e:ee:a8:a4:70:4f:91:08:15:53:c5:7d:8a:9b:79:b6:c4:
3e:51:ab:12:b1:72:d9:b3:02:93:f5:36:a1:00:71:97:8e:97:
8d:c8:a7:3f:c2:e3:a5:53:1a:72:b6:e7:39:8f:f5:32:48:17:
aa:47:3f:e0:f0:40:00:67:73:91:ed:73:14:b5:ce:fc:42:b8:
e1:b0:0d:37:38:02:db:bf:2f:de:3e:0b:cb:68:18:f0:e7:99:
a0:23:e0:40:45:1f:73:73:e1:cc:b9:80:ee:15:9f:9a:cc:9e:
40:a7:bb:f9:53:85:43:8e:96:70:cd:9b:e6:19:e4:b1:e3:89:
77:00:a9:e1:34:be:05:66:62:02:d5:d0:93:67:6b:a2:a0:b5:
74:ec:b7:4b:e0:e3:68:17:ae:e5:7e:ee:cb:f3:5a:54:e9:46:
be:44:a5:85:39:e4:d6:ce:dc:22:90:bc:3e:e3:40:af:22:6f:
65:1a:f4:f3:50:a4:46:ca:8d:80:a7:80:2a:1f:5d:39:71:f7:
25:64:c5:ef:29:33:1f:98:0c:c7:6d:03:1c:98:8b:a1:86:08:
34:86:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:24 2026 by rpki-client