
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier: Hq3sTNx5+pTkSGQY5JzPr0SRrUY2oteLw0FCuk4CuG8=
Subject key identifier: D8:8A:C8:F4:8F:76:6C:16:C1:10:18:14:78:62:91:DE:80:44:07:6D
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number: 0988
Signing time: Wed 22 Jul 2026 20:27:34 +0000
Manifest this update: Wed 22 Jul 2026 20:27:34 +0000
Manifest next update: Wed 29 Jul 2026 20:27:34 +0000
Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: R6hXfA/vRZnOCNxId+fVG4EbJbeU+D9984jvGShbsno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Validity
Not Before: Jul 22 20:27:34 2026 GMT
Not After : Jul 29 20:27:34 2026 GMT
Subject: CN=6a6127b6-1c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:25:c0:f7:06:fc:3d:53:2d:e2:38:25:4b:
af:de:f4:e7:96:85:99:10:dc:f0:85:0a:73:4d:15:
b4:30:be:79:28:cc:60:8c:f0:9d:cc:35:b6:f0:22:
04:22:fc:8c:3e:d0:a7:46:54:bd:f9:fd:cd:c4:bd:
79:5d:0f:02:19:4b:e2:74:52:ff:2b:33:0d:b0:8d:
77:91:17:7f:8c:bd:f5:79:c5:78:5f:01:b2:67:fb:
24:3e:9b:18:2f:02:17:70:bd:23:83:1b:68:5f:43:
1e:b2:03:2a:13:32:07:ee:2d:b8:89:32:09:92:c6:
56:48:31:cf:32:08:5e:fb:51:1d:89:e5:0b:06:c3:
4f:7d:5d:16:34:7d:49:22:f6:2a:d4:16:d7:3c:8d:
e7:5c:c3:27:b6:c5:45:6e:c5:e6:b3:50:6a:ad:55:
87:5c:ac:d2:14:0b:cf:ac:e5:49:c2:56:df:75:f4:
b0:0a:29:cf:7e:77:73:a3:a7:37:ab:05:37:ae:43:
1b:dc:6c:65:57:bd:74:9a:ff:d2:df:3f:97:49:6c:
bd:1f:2a:cd:4f:cb:d3:fe:9d:c4:38:89:da:10:f0:
e1:dd:0a:e5:07:13:be:2c:25:b5:62:b6:ef:a8:e6:
41:0b:4a:b2:1d:f1:84:e9:c0:a6:1e:12:40:7d:b4:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:C8:F4:8F:76:6C:16:C1:10:18:14:78:62:91:DE:80:44:07:6D
X509v3 Authority Key Identifier:
keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:98:00:f1:63:51:2c:19:3a:67:3b:88:6c:70:86:80:d6:
f7:b5:46:64:df:52:87:48:bc:cd:2b:52:bd:42:11:21:f1:fe:
d9:c9:b9:56:e6:b9:3a:a7:9a:7f:05:a8:97:ce:f4:bd:16:14:
d6:33:cd:a4:04:a4:66:2e:7a:f4:d3:01:d1:65:25:08:18:7d:
37:7d:b3:67:b6:cb:05:0c:5b:54:f0:07:c1:fc:51:dd:93:41:
fc:d3:86:dd:80:b7:0e:bf:9d:37:02:d3:b4:76:97:1a:76:15:
c9:71:18:9f:83:f7:e9:f6:24:49:33:14:42:02:2d:17:c3:2d:
eb:14:c1:78:9c:11:37:a0:c4:76:cb:bb:fd:93:02:f4:a4:74:
21:63:56:00:2e:52:32:33:1e:67:ea:d9:94:ce:7f:2f:ec:ea:
8e:74:cc:c5:ea:37:25:cb:f8:cb:7a:11:29:7a:1d:7b:9e:f9:
5f:d4:a7:df:6f:b2:05:81:9c:62:80:75:99:54:ba:81:41:63:
c5:e1:a4:71:61:bc:d9:1e:f0:51:24:14:02:be:f0:03:5d:59:
f8:96:e4:8b:15:16:db:5a:10:0d:34:41:11:e1:98:7b:20:be:
63:69:2e:23:bb:7e:09:58:07:28:b5:41:d7:74:9b:a3:b6:15:
e5:74:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:09 2026 by rpki-client