
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json)
Hash identifier: l5wX1ZnbMnEGwD5wNKlg6kh8batMVfva339uCUsQpNM=
Subject key identifier: B9:5C:E4:57:E0:59:51:B9:A3:FD:C2:A9:39:25:8B:B8:E1:FD:C9:83
Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
Manifest number: 93
Signing time: Thu 23 Jul 2026 09:18:02 +0000
Manifest this update: Thu 23 Jul 2026 09:18:01 +0000
Manifest next update: Thu 30 Jul 2026 09:18:01 +0000
Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: /HZWIV+FBZwvQKyL0K6GjD5tC9SAcx0tN5nZb6cmk2I=)
2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Validity
Not Before: Jul 23 09:18:01 2026 GMT
Not After : Jul 30 09:18:01 2026 GMT
Subject: CN=6a61dc4a-ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:af:9a:bd:92:88:71:00:22:c9:b4:06:82:
d4:e5:35:32:bd:5b:6a:3a:cc:8f:2b:ba:37:f3:c3:
97:70:5a:13:d9:0b:f3:44:5b:5b:ae:59:12:db:e3:
33:74:5d:88:75:0b:1e:88:10:32:b7:b5:f8:36:db:
db:fd:30:1c:79:d3:30:ec:74:ea:79:bb:e9:79:b1:
ee:30:45:ce:b3:05:b8:4d:84:95:12:73:12:db:65:
e0:89:e3:b1:1e:07:b2:42:8e:fc:e8:51:1c:f6:32:
23:bf:2d:7c:b1:f0:33:67:0f:89:86:2c:a5:99:fe:
be:06:d9:17:4b:17:a0:3c:38:fa:f0:c1:75:94:0b:
92:3d:81:55:5e:c3:b5:f7:36:14:9e:91:d7:88:ae:
c3:8a:f2:fa:30:70:43:65:79:c7:f5:72:68:8f:35:
6d:40:c8:dd:fc:4a:91:cd:6d:35:86:ff:73:1b:a2:
12:9f:67:4b:90:5a:e3:30:8f:36:00:1d:d7:8e:70:
5c:54:16:f3:0b:4d:20:6d:12:2e:a2:1d:b6:25:a7:
f1:b5:99:d2:61:29:f5:2f:bd:a3:22:15:e1:58:8e:
15:c8:46:b5:87:37:f0:fa:b5:37:95:e7:d4:ea:6b:
59:0c:2e:0d:07:fa:d1:72:a0:1c:13:30:72:89:09:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:E4:57:E0:59:51:B9:A3:FD:C2:A9:39:25:8B:B8:E1:FD:C9:83
X509v3 Authority Key Identifier:
keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:a1:65:8c:9a:b0:06:8e:d2:fa:59:5d:8f:96:4c:d6:77:
ef:55:d7:ad:02:86:48:6e:72:3a:03:31:53:8e:c3:1f:cb:a5:
38:ce:5c:cf:29:98:b9:20:13:1d:5e:64:6d:58:e8:ff:09:ba:
f3:ef:75:b3:41:26:8b:58:81:22:af:18:72:50:7e:7e:ae:b6:
ab:3d:b9:a8:b0:6a:14:2a:59:94:ed:0c:cd:35:6f:f9:82:de:
ff:6f:6d:97:00:28:3b:20:85:e4:59:67:48:7e:4b:66:60:40:
29:81:5c:59:14:df:49:2c:34:4d:c4:a0:82:3b:c1:bd:cb:db:
0f:4f:21:80:1e:11:c2:c3:df:24:6f:93:66:a5:3a:51:c3:77:
98:98:ca:ba:1f:c6:33:05:64:7b:ca:f6:37:1a:da:30:6b:e7:
49:d2:22:61:7a:14:16:33:b0:38:f9:8b:c8:d8:5a:8b:0d:1b:
f4:12:a4:04:40:10:cf:db:1f:df:59:06:08:e2:d7:d3:ef:50:
98:ea:34:9d:28:a4:81:06:53:40:ea:bc:9b:18:93:26:1c:43:
89:0c:f0:48:01:ed:70:94:2a:1b:26:d3:79:55:30:23:a4:04:
ec:4e:a3:fb:98:e2:a8:0b:1d:3b:da:d4:7a:b2:6d:00:1e:10:
59:7f:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:58:10 2026 by rpki-client