
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json)
Hash identifier: XQ864lcyZzZzgzoyim9dmbJxV3ZOah46IDEyg/4EiL0=
Subject key identifier: 9D:E0:A8:D5:AF:A9:FD:06:BE:CE:B2:8D:70:65:A7:C6:82:02:3E:0E
Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
Manifest number: 0139
Signing time: Thu 23 Jul 2026 07:08:57 +0000
Manifest this update: Thu 23 Jul 2026 07:08:57 +0000
Manifest next update: Thu 30 Jul 2026 07:08:57 +0000
Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: hivhswB5Z8cOwsIzBCWVRyjppEavyFqT4TOqRfi0LqQ=)
2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: R8HXpTKiYzOK8eX9NLZRgUVX35WrC+0ru/2MFWBu2jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl
rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Validity
Not Before: Jul 23 07:08:57 2026 GMT
Not After : Jul 30 07:08:57 2026 GMT
Subject: CN=6a61be09-9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:8e:fb:ce:6e:ed:e1:b3:3f:45:3f:7e:0e:
96:5a:cc:bf:f9:65:1d:ea:a4:25:ab:25:64:d1:75:
29:ac:15:0f:93:00:61:97:88:11:7b:ca:19:e6:cb:
d0:58:87:27:78:eb:f4:18:54:34:0d:d5:ce:02:44:
d3:e2:86:69:70:ba:be:8c:70:6c:6b:e5:78:37:8b:
4e:c9:8e:00:bb:d6:02:ef:39:b8:d7:cb:72:eb:19:
3a:d6:24:45:a4:a0:02:46:dd:19:be:49:2c:d2:a0:
ec:dd:13:46:39:3b:b8:23:f5:ba:d0:86:be:0b:95:
d5:63:3b:ac:20:83:da:2e:cb:4b:04:c2:eb:92:bd:
dc:3d:3b:16:a9:ef:c8:23:48:fd:9f:cd:1d:20:ed:
41:05:70:77:d8:0b:06:9c:bb:e8:1e:58:c4:6d:cf:
65:0b:7a:a7:b7:c4:b1:a2:75:2c:af:3b:57:cd:f4:
22:c1:33:04:4b:05:e2:11:44:29:43:dd:9a:df:1a:
9b:bb:e7:91:f3:ca:0a:58:88:16:a7:03:7e:14:22:
81:16:df:a8:0d:9c:b1:db:6b:07:7d:9a:2b:40:34:
0c:80:d7:13:89:12:b7:82:e4:3d:5f:86:43:c2:a3:
be:20:ae:20:f3:af:90:cb:b9:37:f4:7e:c9:ca:da:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:A8:D5:AF:A9:FD:06:BE:CE:B2:8D:70:65:A7:C6:82:02:3E:0E
X509v3 Authority Key Identifier:
keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:c7:4e:90:ca:11:d9:5a:ed:92:a7:90:10:f2:7b:6a:3c:
8c:6c:b8:7f:7d:cb:cd:ef:5c:fe:d1:79:9e:5d:30:6e:e1:eb:
d2:8e:e7:73:c0:8a:34:37:b1:38:25:a9:76:d7:30:b5:90:49:
30:e0:31:6e:7b:89:a0:45:f1:af:3f:84:5a:16:c5:03:2a:78:
6f:d1:50:0d:37:8b:b8:e0:7f:e9:f4:01:fb:99:c2:b5:b2:a5:
b0:7c:f9:53:40:61:4f:cc:0c:d5:7e:81:9f:1c:b2:79:1d:8e:
dc:19:ca:61:29:f9:0c:01:0b:da:23:b1:0b:65:d8:84:9f:00:
66:e1:b0:a2:c3:9b:32:46:6a:b6:76:b7:32:f6:44:81:4c:41:
3d:d4:21:89:bf:61:65:be:cb:ac:1b:2b:64:4c:22:9f:28:19:
39:09:e3:c2:94:5d:5d:c7:4d:8e:4a:4a:75:5a:a7:84:30:6d:
d5:d8:b8:c3:c2:02:52:bb:2a:21:89:13:a8:2f:ea:64:3f:4b:
5c:bb:15:94:c0:f0:71:9a:d8:3c:a0:dc:f1:36:ac:3f:05:7b:
e5:71:a9:7b:b4:8a:a3:01:00:ad:d0:2f:e9:76:a4:85:38:fa:
79:68:c6:9f:c8:a3:e3:db:32:bf:fc:9c:c1:d0:f1:34:61:bf:
b3:89:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:37 2026 by rpki-client