
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier: zHaYIQFj9bYgO93PNBAoNf1ICq1tPbhIerq4uEdawMQ=
Subject key identifier: 37:E6:45:2D:ED:E2:EA:44:A3:18:15:05:4B:C6:F5:58:74:6A:6E:F5
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number: 01C9
Signing time: Fri 17 Jul 2026 04:47:35 +0000
Manifest this update: Fri 17 Jul 2026 04:47:34 +0000
Manifest next update: Fri 24 Jul 2026 04:47:34 +0000
Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: xO/vnxdeAD+AfkOLEx2khHQp71XgkC4asGeRTuicB2w=)
2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Validity
Not Before: Jul 17 04:47:34 2026 GMT
Not After : Jul 24 04:47:34 2026 GMT
Subject: CN=6a59b3e7-4c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:92:6e:5d:35:e1:dd:a2:39:ce:f0:38:05:
b4:14:b0:0e:d7:d5:14:03:e1:72:89:21:eb:13:03:
2b:b3:b4:9e:21:79:b1:cd:09:a0:07:23:91:bd:01:
dc:e2:23:22:49:b1:79:7a:30:24:69:c9:c0:1d:02:
9b:c9:bb:74:1b:74:33:27:f0:b6:41:4d:3f:5a:90:
ea:f6:b9:09:d2:63:2d:b5:ba:cc:f8:15:16:5a:49:
1d:ff:26:02:1b:32:67:2d:20:d8:28:d1:54:1f:38:
6a:b6:1c:60:b3:f8:12:4d:ed:eb:e7:ba:ed:28:37:
c4:e9:53:92:5d:a3:c4:ab:ed:70:0b:26:8e:3b:55:
dc:23:4e:5a:97:99:7a:57:b6:af:bb:f0:5d:3a:6d:
cc:d4:14:8c:1a:b2:c0:dc:39:00:50:1e:7c:25:92:
64:7d:d5:ac:42:76:77:f1:67:ba:a4:3b:59:fc:9e:
42:c5:6d:a2:d5:c7:6c:d3:39:68:e5:9d:00:4a:b5:
58:57:df:08:8d:b3:53:ad:e8:c1:10:2d:e0:c8:dc:
e8:2b:c4:54:b0:64:3d:33:29:0f:36:56:ab:ab:c4:
22:45:af:ac:45:ee:a3:62:db:bd:ce:51:e9:f5:72:
9a:90:78:f5:df:f0:b7:c5:38:bc:74:70:d3:52:89:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:45:2D:ED:E2:EA:44:A3:18:15:05:4B:C6:F5:58:74:6A:6E:F5
X509v3 Authority Key Identifier:
keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:63:3c:5e:75:ae:16:a3:b1:72:77:b7:45:eb:38:52:a6:
aa:8d:56:23:d6:23:0e:a4:32:46:14:c9:e2:94:9f:9d:e1:58:
ec:df:71:8f:d7:59:06:a6:78:cd:7b:50:03:11:a2:b4:38:4e:
a2:a8:46:93:f9:52:71:4c:bc:a2:6e:39:12:92:c2:cd:d2:53:
18:f5:bb:76:19:a8:de:cc:db:57:d7:77:c3:dc:9d:dc:36:a5:
35:7b:d3:77:4d:da:7f:34:ee:c2:9e:e4:12:17:48:40:b6:9e:
81:31:1c:69:68:d2:6d:6a:81:5f:b9:46:6c:ed:97:e1:44:67:
d0:81:d7:84:a5:9c:ab:bf:77:84:e9:09:a7:75:76:20:11:09:
79:1d:f7:e1:b0:03:e1:c9:52:8c:da:96:7d:94:90:73:48:08:
5a:3b:d8:5e:38:36:85:67:c6:10:6a:b6:dd:e4:b8:d3:5e:38:
5f:20:b1:af:b0:75:8e:c2:1f:13:8c:45:8c:f2:cb:3e:e9:7d:
a5:f5:45:20:ed:fc:e1:02:49:71:33:7a:d0:23:d6:5c:83:32:
28:0f:21:11:41:dd:a3:5c:98:5a:9d:96:5b:c3:73:44:5b:60:
4a:02:d4:e1:bf:53:b6:ac:c4:46:cf:a2:70:d5:95:f1:79:b9:
61:ed:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:40 2026 by rpki-client