
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: amSS5MNU1CvENMX4qrWrVFJjxV7MJt+B8PWioY4Pi+I=
Subject key identifier: 0C:B8:A7:04:ED:7B:3B:AC:C0:C6:D3:9F:DB:7A:82:79:D5:66:96:B6
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 03A8
Signing time: Thu 23 Jul 2026 01:33:46 +0000
Manifest this update: Thu 23 Jul 2026 01:33:46 +0000
Manifest next update: Thu 30 Jul 2026 01:33:46 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: FAAv5+33LyJUqtyxwNSeVQg9++FRVrODjhg+meF3Apo=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Jul 23 01:33:46 2026 GMT
Not After : Jul 30 01:33:46 2026 GMT
Subject: CN=6a616f7a-d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:de:93:97:4c:98:d2:ea:51:4c:be:08:bb:
bc:46:50:41:92:77:cf:c4:ee:a6:4c:5a:27:f7:ec:
76:78:34:96:13:b8:14:d1:bc:d0:b1:07:32:69:17:
0b:c6:c0:b6:60:08:80:96:c1:22:15:ae:b6:3b:ad:
19:59:90:23:7f:cb:d5:4b:85:cd:03:35:39:f4:3f:
07:1b:08:e4:93:35:ae:22:51:01:db:dd:4f:64:78:
90:6f:ee:30:7d:b2:d7:e2:fe:7a:15:b5:c6:80:a3:
10:9b:e7:3c:0a:34:02:73:ba:0f:ba:9d:44:60:65:
d5:ad:c3:a1:16:20:b7:f4:b0:94:70:0f:28:b1:8f:
ce:ac:71:18:12:61:30:64:15:9c:38:b8:13:03:45:
db:6e:c6:5d:bf:6d:d0:fe:f7:41:35:b6:44:9a:bf:
ea:14:71:f0:c4:14:de:e0:d2:b2:c2:74:8a:7f:9a:
2a:17:90:e1:5f:7c:9a:04:85:b8:81:f0:52:a6:b9:
8d:b0:20:b8:d0:b2:de:f3:53:e7:34:92:3f:b3:36:
dc:ef:c4:27:35:22:fb:74:e1:22:25:86:eb:72:37:
ca:ce:50:94:da:5b:dc:d2:f4:07:f8:b0:7b:68:f1:
bf:15:29:ff:7e:bb:62:6a:fd:80:71:fd:96:91:32:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:A7:04:ED:7B:3B:AC:C0:C6:D3:9F:DB:7A:82:79:D5:66:96:B6
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:18:2f:22:26:80:af:df:95:64:09:89:fb:08:f5:77:8a:a7:
9a:d2:b5:ed:60:4c:28:33:4a:08:5c:ef:a0:0e:7b:ef:1f:9e:
3c:ec:c1:49:31:c5:4a:8d:cd:c5:a9:aa:09:3a:2c:2f:34:9b:
69:5b:c1:a9:9b:c2:c1:e5:12:5f:ba:59:d1:06:53:42:33:94:
45:9c:2f:8b:e5:ec:2d:00:94:28:15:37:47:91:94:0f:a8:59:
80:92:ac:79:71:cc:13:c6:29:82:bb:a9:cf:b6:ce:aa:de:87:
db:72:16:a2:f8:48:bc:f8:e2:a1:31:eb:dd:47:cd:62:da:3b:
6f:b7:c1:f9:06:4c:05:bf:22:0d:20:a4:f9:1a:92:83:7f:b4:
ed:a6:89:62:3f:36:c1:6e:4c:e0:cc:3d:26:3a:c3:da:90:2c:
29:51:54:bf:39:5f:f0:18:88:aa:df:c9:e3:b9:65:6f:ff:41:
50:5a:7b:a1:4b:e5:a4:b5:2a:ac:86:a9:b3:00:0a:44:b0:d0:
e6:48:7c:98:d4:02:93:df:b8:4f:0c:ca:c6:b3:a6:15:d3:98:
5d:ec:c2:d3:ab:bf:14:2e:c2:3f:78:40:9e:9e:b8:03:e7:67:
f7:e4:74:29:50:63:07:a5:fb:c8:2f:fd:39:d5:ac:e6:74:4c:
37:f6:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:49 2026 by rpki-client