
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier: 2wv62yReL+Z1odzNz4aDaxhGHYprRWJlQlqX3PJxAgQ=
Subject key identifier: 97:5C:09:9A:DD:F4:34:81:E2:67:38:6B:48:38:2D:77:90:1F:B2:8A
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number: 0522
Signing time: Thu 23 Jul 2026 00:25:59 +0000
Manifest this update: Thu 23 Jul 2026 00:25:58 +0000
Manifest next update: Thu 30 Jul 2026 00:25:58 +0000
Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: 7RhgFSJO0T3+Sl7LU4G4GAeUqIxgCWyErucq+K+93iw=)
2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: 99vdeYRHmvAZBTn+o2vbxAXonLGmmxRzUfRMT6ujYvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Validity
Not Before: Jul 23 00:25:58 2026 GMT
Not After : Jul 30 00:25:58 2026 GMT
Subject: CN=6a615f97-da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:60:c0:54:35:ec:1c:76:e7:d2:1e:0e:17:
ab:a9:11:73:39:a1:99:d8:d5:a9:83:b5:a7:06:e3:
14:39:4e:bc:39:8e:3c:79:04:63:e4:ac:df:70:42:
31:4f:8f:7f:93:6e:67:22:98:d3:59:2f:9f:73:c3:
c2:f6:3e:b7:23:9d:31:a5:c1:1f:1f:55:95:44:8c:
bf:1d:00:71:7d:4b:37:fc:f1:84:0c:0e:38:30:d8:
e1:72:63:aa:38:50:5e:08:ce:06:6f:63:1f:3c:04:
ea:1e:63:2c:57:fc:c6:e2:96:9e:b7:7c:d0:13:2f:
f0:17:ba:43:32:31:84:ca:79:a3:2b:47:1b:1b:1d:
a1:36:a9:42:a1:a0:33:3c:3f:4c:c7:c7:d2:ea:d9:
7a:81:19:2f:19:52:1c:5b:df:7e:f2:0b:b9:24:b7:
19:87:28:23:f3:da:39:9a:d3:48:20:de:19:33:b5:
52:ec:db:e7:d3:f5:1a:3b:19:77:13:c7:c9:e3:37:
92:66:11:6b:01:d7:48:27:6a:13:4e:39:62:fa:45:
88:03:82:b2:09:1e:fa:1e:d4:b6:43:70:5c:64:11:
0f:01:34:f9:12:40:d9:3c:c2:35:29:46:0f:3f:db:
c4:18:08:62:c3:86:2f:e6:81:b8:ed:8a:1a:1d:a6:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:09:9A:DD:F4:34:81:E2:67:38:6B:48:38:2D:77:90:1F:B2:8A
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:2b:08:c4:28:67:02:34:f6:22:fe:30:ff:43:61:f9:a9:b9:
45:7c:05:d7:f4:f0:11:9a:22:a6:e2:36:d0:78:c1:5f:5c:88:
8c:f4:1e:ed:21:0b:03:cd:15:44:8a:10:51:ed:5e:49:18:ec:
82:b7:ec:d0:72:6d:16:8e:13:68:ba:72:4e:c6:c6:d0:ea:8a:
71:34:07:ff:2b:1d:e6:97:00:73:88:3f:19:10:26:20:18:68:
29:d5:15:42:3e:31:54:c1:0f:4f:c7:08:2a:42:19:4a:4d:8a:
11:bb:42:fe:0d:db:77:97:83:7f:1b:82:97:2b:04:ee:e4:5e:
d3:09:a8:0b:07:3f:72:51:ac:20:f0:b4:dd:9b:cd:5e:37:04:
95:6a:97:cb:95:41:75:33:9e:4b:d6:f7:49:a2:ac:98:d1:57:
9c:c3:a4:6e:1f:82:be:d9:70:66:fd:9e:a1:1c:38:06:ff:54:
b7:f1:b6:b1:8d:17:f0:ee:4f:19:62:c3:71:de:73:2d:c4:16:
42:18:f4:7b:92:e1:33:b1:51:9b:dc:51:40:76:5b:67:a0:3f:
56:07:d6:e2:45:0b:d3:b4:0a:af:f2:a8:b5:42:40:44:a0:18:
a7:2b:c2:39:43:db:b4:73:ec:7b:d3:21:eb:81:1a:5c:b2:bd:
4d:04:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:07 2026 by rpki-client