
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier: 3VNCszgQQ3MFL4wZjgCW6Tbd4cbNjLxSXUqLnxBtiH0=
Subject key identifier: 54:32:78:35:FA:84:07:AD:D5:86:8E:75:39:B2:85:B8:FA:20:8B:D9
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number: 0D12
Signing time: Wed 22 Jul 2026 18:33:21 +0000
Manifest this update: Wed 22 Jul 2026 18:33:20 +0000
Manifest next update: Wed 29 Jul 2026 18:33:20 +0000
Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: rrPFC5Xyt5QRTPHOPjdmuxXmWwp9SyjDPYldSkQ9TNU=)
2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: YO/LHGpdZrKxxuw5Nj9V4zkQvWAz2/rqA3ybBI8prVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Validity
Not Before: Jul 22 18:33:20 2026 GMT
Not After : Jul 29 18:33:20 2026 GMT
Subject: CN=6a610cf0-9663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:3d:ea:42:5d:c8:bc:63:36:39:2f:16:b2:
a1:2b:2c:b3:6d:bd:41:ba:f8:6d:dd:61:45:16:ed:
48:15:21:a9:9c:1a:8d:df:ea:06:22:54:d5:de:64:
fa:8c:bc:2f:3f:1c:5f:2b:00:89:29:8b:61:b7:dd:
d3:79:77:fc:35:44:86:ce:10:64:49:ec:28:b3:84:
ed:44:e8:cc:7b:53:1c:02:2a:c8:a3:e5:a5:d9:48:
23:8b:74:d5:cb:0b:bc:bb:4d:9e:80:31:e3:e2:39:
48:be:80:e8:59:f4:59:ce:a3:77:f1:2f:d5:f3:b6:
7d:4e:07:9e:48:1c:01:b9:09:11:19:1d:ae:e0:94:
07:74:8e:75:0f:25:2c:a0:56:04:29:fb:f4:a3:08:
6b:ff:24:cb:96:7c:91:ee:b1:37:af:58:7b:c0:4b:
70:3d:a8:67:5c:98:eb:bc:80:1a:da:50:83:8f:8b:
e4:50:ac:1d:61:a1:62:1d:97:d6:78:9c:1e:4b:52:
b2:2d:02:06:9b:09:ad:05:e9:76:e3:63:d4:d4:57:
62:0a:2b:70:16:17:a7:00:52:c4:46:36:f8:b3:cf:
b1:db:da:ed:58:a2:7e:2b:39:f5:6a:f8:51:fc:79:
9f:7a:6e:9f:00:a2:38:71:af:6c:bd:44:13:e6:b1:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:78:35:FA:84:07:AD:D5:86:8E:75:39:B2:85:B8:FA:20:8B:D9
X509v3 Authority Key Identifier:
keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:35:7c:7d:4c:c5:e0:ef:84:4a:78:dd:51:a2:d7:31:57:0e:
76:b7:eb:c6:93:48:8c:0a:76:01:8b:9a:8c:b9:8b:c9:04:95:
22:e0:6b:b5:36:b4:7f:bf:52:c3:d9:4a:4e:bb:07:25:19:21:
3e:02:95:de:5a:a8:a2:c8:6b:11:ba:89:9d:e3:05:a2:f3:c6:
96:3a:59:a8:c5:98:11:7f:ea:8a:f4:69:41:29:79:5e:31:fe:
e0:4c:8d:f0:b1:6a:1d:e3:b9:ca:46:3e:99:9d:2d:71:d1:93:
4c:11:11:4f:88:34:0f:85:2f:c6:25:b3:1c:04:7d:bb:39:60:
9b:37:95:48:66:46:3f:bf:84:dd:cd:ea:ba:38:0b:38:db:68:
81:46:76:94:19:0a:f6:30:0d:06:08:e5:ae:99:af:bc:08:8f:
cd:eb:e2:ce:96:a6:81:22:2c:91:1c:89:20:09:88:83:e9:50:
f9:18:42:35:31:bf:9f:55:f4:a6:6f:b7:14:bd:67:fa:3f:9b:
50:2a:27:87:3a:18:8e:6e:a9:36:0f:72:b3:68:4e:ea:47:c2:
b8:72:8a:4a:6d:a9:8d:88:76:6d:55:41:e0:31:7b:18:60:f2:
7e:89:25:41:ab:75:cd:99:d0:45:cf:5e:d5:61:07:c1:ca:21:
d1:95:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:58 2026 by rpki-client