
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: Emc1USbzUKcY4agfDmj4o3N/MOV29r2kYhOe6sGoMWo=
Subject key identifier: 79:84:A2:C1:6F:39:1E:10:13:A8:BD:4B:97:E4:5D:05:AA:D0:D9:F6
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 02E9
Signing time: Sun 27 Sep 2026 01:24:40 +0000
Manifest this update: Sun 27 Sep 2026 01:24:40 +0000
Manifest next update: Sun 04 Oct 2026 01:24:40 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: R7l6r9h3eNySVKc6GZvUDFbkUD87c1zGW8HPpv3SLuc=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Sep 27 01:24:40 2026 GMT
Not After : Oct 4 01:24:40 2026 GMT
Subject: CN=6ab87058-772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:e0:ed:8c:55:62:cb:28:1e:eb:4b:20:07:
1a:14:11:08:48:4d:2a:87:5f:4e:05:f8:ed:ba:98:
44:52:42:4a:42:9e:4f:c5:68:ae:77:31:00:73:ae:
4a:33:3f:d9:92:9c:0e:cc:2f:6d:30:22:4d:a3:31:
4b:f7:e8:d3:a4:48:3c:e1:e2:fe:8d:e7:da:99:c7:
93:1f:b8:46:8c:d1:50:21:54:e8:70:d2:72:79:bb:
0c:b0:9c:79:3d:73:6e:84:32:e1:30:51:a2:b9:76:
63:4a:ac:1f:a3:fd:68:b4:7f:01:25:d0:fe:52:f7:
f5:2c:f8:44:9f:c6:d1:98:db:5e:24:fc:5a:6a:4f:
f3:9f:67:9d:4e:57:f8:08:96:88:2e:7c:fb:54:22:
17:e9:06:c2:7e:02:6c:16:de:82:fb:9a:bb:e7:28:
1e:b5:1d:2f:cc:7c:90:96:64:aa:18:e4:40:25:9f:
5c:c7:25:8c:a6:93:71:31:4a:2f:e4:a2:b4:60:82:
c0:bb:03:b0:0e:5a:de:ea:e7:df:0f:1a:c3:84:19:
aa:7d:7a:7e:71:8d:93:de:f7:74:47:57:36:5b:27:
22:a7:6c:0a:91:1d:ce:fa:e5:32:ac:32:0b:c9:c2:
d7:d2:95:da:34:1a:2f:a9:a3:1d:c1:22:3d:c9:dd:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:84:A2:C1:6F:39:1E:10:13:A8:BD:4B:97:E4:5D:05:AA:D0:D9:F6
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:7c:6f:bf:64:18:63:aa:89:f1:bf:a8:69:67:58:54:43:
62:d2:91:12:58:d9:ac:a6:3a:6e:f7:3d:ce:e2:c0:7f:fd:c8:
f0:cd:22:9d:aa:af:e5:67:b0:44:11:2a:38:67:f1:3e:54:e8:
d4:bc:88:6a:a1:2e:09:f6:e4:a7:6f:82:d1:a4:6f:72:bf:c8:
47:26:35:a0:c9:17:25:5f:8b:02:86:e8:a2:c3:21:d8:6d:0f:
17:95:ae:c4:bd:d7:82:ce:63:0e:32:42:e2:fc:e8:91:16:71:
fe:25:00:e5:44:6d:03:56:b1:fd:b1:a0:9a:59:cd:6a:89:e5:
b4:d8:eb:1f:91:dc:38:7e:8b:86:25:20:4c:fd:6e:1d:22:8b:
69:20:d0:84:38:8d:cb:28:c1:c4:9c:d7:7f:37:f8:d1:73:e6:
5b:9c:87:e9:03:b8:82:33:d8:e1:b6:fe:77:9d:42:fa:49:56:
f5:50:da:dc:b9:62:c7:ee:52:50:07:b6:91:7b:1a:93:17:6d:
5e:aa:a2:26:d4:b2:b6:a7:3b:43:e2:bc:a1:17:56:99:01:0a:
b5:d1:c4:e3:d0:a3:fb:98:88:e1:3e:e1:23:77:30:8e:27:00:
f6:c6:3e:f9:33:07:42:8f:f0:2b:44:5c:a1:bf:f3:a4:3c:53:
c9:47:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:59 2026 by rpki-client