
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json)
Hash identifier: n4IUbi77NWq5b1LVaJicEzFovhJHk2MmOlFVexsPPx4=
Subject key identifier: 1A:80:18:5A:BB:92:8D:48:00:D9:22:9A:0C:BF:63:4B:3D:0D:99:62
Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
Manifest number: 90
Signing time: Fri 17 Jul 2026 05:10:09 +0000
Manifest this update: Fri 17 Jul 2026 05:10:09 +0000
Manifest next update: Fri 24 Jul 2026 05:10:09 +0000
Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: OtkXN0+udq3LHGcdgRKZa5rLg3LiG/697ZAjh37N6oQ=)
2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Validity
Not Before: Jul 17 05:10:09 2026 GMT
Not After : Jul 24 05:10:09 2026 GMT
Subject: CN=6a59b931-b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:21:5c:b4:54:90:5f:61:80:2a:81:1d:e6:
aa:23:8b:00:f1:9b:8e:74:d1:a3:2c:52:c1:9e:8f:
ed:32:f0:2c:e7:6a:67:86:26:4e:fc:78:96:c3:08:
f9:99:df:f8:8f:69:19:9d:0b:02:8b:03:9e:6b:4a:
c3:88:b2:73:85:e9:41:93:d6:dd:f8:e9:6f:f4:e4:
28:d7:ed:90:67:cd:f5:96:7f:bc:46:24:18:65:bf:
2c:ff:89:8d:82:f9:3f:97:59:66:a7:67:14:31:a0:
b1:c2:8b:0e:46:6e:f1:24:47:36:99:39:15:11:8b:
f5:7a:b3:7b:3d:37:2e:20:86:e3:b8:40:57:3f:77:
59:9f:71:ba:6d:09:02:68:11:35:79:06:38:f3:53:
d1:9f:76:c5:5a:ce:89:81:37:8e:0c:b8:dd:92:d1:
1b:26:30:ad:40:40:9c:85:6b:24:20:82:25:59:ab:
88:fe:94:b8:a5:18:a1:aa:31:02:62:75:37:7a:29:
10:f8:8d:1d:7e:bb:80:87:3a:f5:41:bf:22:96:65:
14:b0:37:65:4d:30:56:76:e1:67:7c:84:39:13:4d:
28:bc:52:50:4f:a6:0b:0e:3d:3e:cd:16:5f:9c:8a:
65:26:fe:72:56:70:89:8f:bd:39:9c:ba:56:d9:74:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:18:5A:BB:92:8D:48:00:D9:22:9A:0C:BF:63:4B:3D:0D:99:62
X509v3 Authority Key Identifier:
keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:d5:f5:b0:53:c7:ea:84:d5:4e:80:f2:81:06:2d:96:81:
ff:02:62:55:87:40:21:a8:a8:56:47:1f:ad:8d:3b:8c:c7:7c:
74:4e:40:08:38:fa:b4:01:19:59:01:93:d5:c5:ae:d3:8d:07:
11:1a:48:74:a6:6a:b0:9a:f5:46:18:a2:09:92:9c:1f:21:26:
f4:a5:ad:de:00:a7:f1:ca:27:9b:b3:41:44:09:7c:e0:9b:b4:
93:51:20:76:64:76:c6:5f:51:9d:da:45:d9:5c:37:26:d1:26:
02:a5:11:d7:ca:77:9d:4f:72:43:0f:47:99:cc:a8:de:3c:74:
a2:3d:22:53:33:2f:57:ce:14:62:dc:ef:f3:41:c6:b1:9a:49:
f8:0c:7e:d8:e7:c2:1d:d3:9f:9d:31:8e:62:96:8c:6f:09:f9:
9a:8d:86:93:a9:8a:10:4c:97:6d:a8:64:1f:ce:ae:82:a3:59:
e3:5c:41:c2:8d:b9:19:a9:d8:5d:9d:fe:67:4a:cd:d0:69:a9:
4b:7c:a6:80:b9:ef:11:42:95:bf:6c:1d:f7:7b:29:4d:08:8d:
1a:47:96:17:1f:24:f2:34:4f:9c:5a:07:c7:0b:94:0d:62:58:
7c:a2:59:8f:2b:9e:86:e2:33:d2:de:9c:56:66:17:c1:70:58:
e7:20:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:26:56 2026 by rpki-client