
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
File: U150NDn0nPv9SODvV-b6fUsxGq8.mft (raw, json)
Hash identifier: L2eIb+KovzZBi0erAqoVbUdK8Fd3ttxJRPtPMoeTO7E=
Subject key identifier: 9C:AA:29:F8:EA:6D:30:DE:73:A5:6B:89:C9:F8:42:58:D7:64:74:33
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Certificate issuer: /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
Manifest number: 56
Signing time: Tue 21 Jul 2026 08:35:35 +0000
Manifest this update: Tue 21 Jul 2026 08:35:35 +0000
Manifest next update: Tue 28 Jul 2026 08:35:35 +0000
Files and hashes: 1: U150NDn0nPv9SODvV-b6fUsxGq8.crl (hash: yRR6VwJUb6de43CczAhr5yWC1fYY4/XwOb1tvc4lExY=)
2: 4FF63D680FE911F1BED32952083D8C67.roa (hash: L99vsE7QVMrcPtMmR6OsKMR7Y2Rb3mEx/QNb9KOL/Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Validity
Not Before: Jul 21 08:35:35 2026 GMT
Not After : Jul 28 08:35:35 2026 GMT
Subject: CN=6a5f2f57-10f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:36:8c:c0:8b:8b:33:10:95:1f:5a:45:7b:
f8:18:dc:de:69:56:76:21:06:e1:15:2c:9a:21:01:
36:3a:21:62:03:c3:06:42:d3:70:6e:61:a9:3c:5f:
96:c9:50:db:51:64:56:37:c4:80:06:cf:64:ec:6c:
80:69:55:46:bc:b0:b0:a3:b7:9a:62:70:21:4a:fe:
ac:40:f7:55:f3:57:6e:41:72:4a:2e:97:fd:39:6c:
c2:58:12:0e:45:88:4c:aa:61:f6:24:32:bd:6e:06:
a5:5c:e7:90:2c:ad:29:e1:58:96:74:58:d3:42:94:
32:5f:87:84:82:e6:5d:48:f2:cc:b7:c8:7d:ed:60:
1b:26:a4:1c:f6:0b:4c:8a:17:f1:85:2d:d8:64:04:
4d:7e:7a:65:5e:ee:bf:13:2f:11:b7:ad:73:a2:24:
8b:e9:f6:04:f3:20:a0:60:ef:6e:b6:10:9e:f7:76:
50:dd:40:10:80:e7:78:2e:65:c0:32:27:a8:c5:0d:
15:fe:7d:a6:f7:78:48:af:8c:83:f1:40:77:a4:d2:
a2:da:73:0b:a2:08:3f:5d:11:e1:79:36:d1:42:14:
55:01:47:4f:b3:83:6b:cb:8d:4a:fe:bc:43:4d:a1:
22:64:ae:f5:af:a2:53:85:af:6c:9c:1e:65:53:3c:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:29:F8:EA:6D:30:DE:73:A5:6B:89:C9:F8:42:58:D7:64:74:33
X509v3 Authority Key Identifier:
keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:7e:8a:f2:c6:64:49:57:6d:37:77:2b:0a:56:b1:b1:52:
4e:f1:2d:60:38:73:07:91:21:83:e0:07:c8:44:14:0d:7d:d6:
20:ec:f0:2a:4e:92:35:75:9d:6b:a4:2e:da:1a:06:4c:19:3f:
67:56:7e:bc:16:f9:1c:c2:55:d6:94:a5:30:58:af:4c:a3:b5:
74:6a:9a:4f:9e:36:53:1c:ac:d6:64:35:3e:a5:3b:7f:cd:02:
67:e5:b1:4a:43:12:21:45:a6:b5:50:a7:3a:da:a4:42:77:59:
82:95:a1:21:b6:e7:45:e4:e3:f7:f1:36:6d:ef:43:6d:eb:f7:
02:00:60:bb:bb:6b:f7:d3:90:7c:f3:69:32:ab:53:36:88:68:
02:7a:72:e8:4f:fe:b9:ea:0f:e0:89:bf:1b:b3:63:b9:5a:11:
b6:52:bc:bf:13:5e:09:b4:dc:73:86:1d:54:fb:77:95:91:5e:
22:df:b6:c9:9e:22:38:b6:6d:d7:4c:5d:e1:a4:b0:89:cc:42:
9b:c0:47:a4:88:f2:27:ff:6d:3f:97:ef:6e:3c:53:83:eb:53:
93:18:f1:16:0b:13:88:91:66:19:c7:7f:81:f8:91:81:ec:ba:
d9:db:e2:e2:42:1c:78:da:53:82:b0:e9:44:cc:4b:66:de:fe:
05:5e:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:02 2026 by rpki-client