
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier: xJphfjbuUhaldLOxteTceZYyyte1t5nNiCSVErXo5iI=
Subject key identifier: 86:36:FF:3C:93:6B:43:C6:22:F4:3A:1C:6A:AC:C4:20:F3:30:21:70
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number: 79
Signing time: Wed 23 Sep 2026 07:35:11 +0000
Manifest this update: Wed 23 Sep 2026 07:35:11 +0000
Manifest next update: Wed 30 Sep 2026 07:35:11 +0000
Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: 8651zdDsFksr0ebFksEdL8SBtU6hbumq0dZNmNaHe0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Validity
Not Before: Sep 23 07:35:11 2026 GMT
Not After : Sep 30 07:35:11 2026 GMT
Subject: CN=6ab3812f-cc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:f9:6b:fb:36:d7:5c:6b:f6:3a:b1:e3:6b:
2e:d3:1a:5e:67:62:9b:9f:f9:36:b1:dc:a2:e6:38:
9c:68:12:0d:b2:94:90:e0:ff:22:92:9b:01:8c:c7:
31:42:84:de:10:50:ce:5d:5c:a0:2d:30:e6:77:9a:
4f:f5:90:22:90:62:89:a1:a8:ac:a2:c2:fc:e5:8b:
99:8b:8d:40:24:71:1a:23:82:48:6a:5d:29:27:52:
fd:77:54:8b:be:80:bf:f8:27:3d:44:c8:ee:9d:64:
88:7c:2c:56:15:82:c8:f6:3a:98:51:8d:39:22:18:
d8:12:a0:dc:f8:79:7a:8a:dc:0f:76:9c:ff:1d:40:
49:3c:91:27:35:29:5b:a4:ab:ed:3e:f9:48:f5:86:
1d:8f:6a:5a:02:0b:25:f5:b1:e2:ab:ef:97:11:e9:
99:64:95:fb:6c:5d:9d:7b:85:da:47:59:14:3f:03:
1c:b5:20:c3:c4:ad:31:0e:fd:a2:96:dc:e5:8a:25:
fc:0f:d5:56:61:8c:71:e5:27:d0:64:63:d5:d9:99:
2c:63:d1:8b:e8:cd:f8:5e:ee:c1:9b:83:71:da:e2:
c4:bc:c1:e2:36:67:cd:c6:95:4c:79:d3:e6:ff:a8:
13:27:1b:5b:a2:7b:5a:5f:5f:a0:39:3d:d0:e0:a6:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:FF:3C:93:6B:43:C6:22:F4:3A:1C:6A:AC:C4:20:F3:30:21:70
X509v3 Authority Key Identifier:
keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:31:93:f5:8d:3c:59:d9:da:7d:ea:c1:26:43:cb:db:cb:53:
5b:a2:f3:e0:dd:1f:c3:b6:86:61:f0:3b:ab:86:19:bb:63:52:
fb:b5:4e:7a:35:1d:20:b1:68:5f:31:75:e1:7c:16:32:11:e5:
1d:2d:40:41:89:d9:31:8e:1a:96:a2:0d:6d:4c:cb:25:d6:76:
4d:37:b8:80:79:8f:e7:39:24:a1:77:3e:af:55:39:ec:03:77:
ba:ca:01:87:e2:39:3a:e9:9f:1f:bc:d2:b0:55:f9:fd:5f:84:
00:1b:a0:1d:e4:01:8b:c2:a4:70:bc:51:06:3f:c2:89:dc:5f:
50:d7:5b:22:d8:5d:6b:df:a5:c0:a0:28:d4:99:f9:22:90:af:
bb:cf:42:ba:8c:74:d7:9f:30:9f:fd:14:13:c4:83:3f:71:6c:
fa:d5:38:8c:93:be:fc:4e:ce:00:e9:57:67:a4:76:e3:84:ef:
a9:3c:2c:02:99:27:69:8c:fc:a0:d8:4e:a5:88:c0:69:73:e4:
1d:fd:e0:b4:a1:c7:09:4a:93:fa:6a:49:2b:15:33:42:01:ee:
bb:73:4f:b1:29:26:84:07:25:5f:4b:99:ef:fc:96:20:0f:69:
5c:93:fd:9b:69:10:1f:72:78:e1:4a:fb:d5:a4:e5:e3:0c:47:
0a:34:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:27 2026 by rpki-client