
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json)
Hash identifier: UU9Ta5bmfKUOjqu/p+MO3DIAFkTJAL60pIBPIRqCueY=
Subject key identifier: 7C:69:18:19:48:BB:B0:AF:6A:2C:0E:67:C5:76:CF:8E:91:A0:FE:3E
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
Manifest number: 02BE
Signing time: Thu 23 Jul 2026 02:31:39 +0000
Manifest this update: Thu 23 Jul 2026 02:31:38 +0000
Manifest next update: Thu 30 Jul 2026 02:31:38 +0000
Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: nqXZhsNNM+7uBDnx9PRwMNG8NpKYUZw2HcHXOsK/KGI=)
2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=)
3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=)
4: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
Validity
Not Before: Jul 23 02:31:38 2026 GMT
Not After : Jul 30 02:31:38 2026 GMT
Subject: CN=6a617d0b-d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:3d:3b:b6:cf:ec:11:70:5e:dc:09:d9:12:
eb:91:65:bc:97:34:7f:2d:e9:a4:da:5b:cb:2d:b9:
0d:1c:5e:c7:3f:6e:c6:ff:18:2a:de:c6:c7:f3:eb:
58:d1:7f:2b:74:fb:59:5e:eb:42:31:e2:cc:8a:d1:
95:9f:14:4e:46:21:df:74:51:16:f6:0e:b7:ba:23:
f3:37:99:fc:db:ce:5a:79:12:f4:51:a9:4b:a1:1f:
02:8c:d8:88:ec:16:6e:13:9a:e5:96:9d:91:df:b6:
da:d9:ce:cc:02:03:fd:c3:69:43:c9:9b:10:ed:e3:
ab:7d:2c:d6:2a:bc:ab:47:b3:51:37:a9:7f:b4:87:
9d:76:3f:e8:20:74:61:76:e6:55:60:98:66:2d:21:
77:49:a4:6f:df:54:ee:9d:13:04:20:c3:e5:1c:07:
58:c7:9a:3f:1b:77:b1:4a:be:39:84:de:4b:86:95:
b7:2d:39:a9:1f:6e:2d:5e:21:d8:ab:84:84:77:9f:
cb:e4:46:75:fb:67:02:53:45:3c:34:77:4e:bf:67:
d6:82:fe:22:cd:db:cc:5e:ed:88:b8:c4:9c:f6:1c:
2c:1f:34:5a:23:5c:cf:bf:04:61:62:72:51:e5:26:
62:ce:f3:ce:fd:02:d0:02:04:87:13:90:f9:b3:56:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:18:19:48:BB:B0:AF:6A:2C:0E:67:C5:76:CF:8E:91:A0:FE:3E
X509v3 Authority Key Identifier:
keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:e7:11:5a:52:ec:39:7f:4b:3a:48:eb:82:f8:15:c6:a0:d8:
93:b3:d7:2f:8c:d6:27:9b:c5:77:ef:9b:70:6c:3e:df:45:9b:
d1:bb:13:ec:79:33:3d:73:ba:3d:7d:86:95:e5:46:fc:1a:d5:
76:82:62:f8:cd:f5:91:5d:69:34:31:b1:38:43:55:64:a9:87:
4f:ee:36:01:aa:bd:45:f5:04:b5:63:5f:f4:f2:60:a0:46:33:
f1:93:91:ba:54:e0:af:ce:1b:53:9c:cc:f4:db:eb:62:3b:62:
dd:c7:34:8f:a3:a7:44:09:0e:47:b0:11:4d:50:4f:da:38:14:
ab:2a:ea:fe:fc:b6:63:ba:39:16:4f:c6:8c:3a:0a:99:b7:c6:
a8:be:91:a2:83:a5:c2:55:a5:9d:42:30:20:e9:c8:31:c7:0e:
0d:d0:56:ba:3e:5e:76:bc:d7:b0:df:e7:34:d8:42:54:24:c6:
b8:2f:c3:37:60:17:79:2c:8c:48:60:d7:dc:44:3a:26:c9:af:
4a:56:c4:3d:99:37:24:85:b9:d9:11:d5:c8:e1:95:c2:9e:bf:
3a:95:d1:54:3e:46:1d:10:e4:56:cc:88:be:dd:8f:5d:5b:83:
e8:3c:41:5f:b9:e0:e1:5b:c2:64:f9:d6:6a:97:2f:f0:37:96:
ad:cb:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:03 2026 by rpki-client