
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
File: RnF4Q-fTSLOez3uSSVUB_jVQujw.mft (raw, json)
Hash identifier: mNG1bWvlDOm6oHfnQwuLpnu+uSJQWJASMGbgDWrWpa8=
Subject key identifier: E6:35:B1:42:5D:0D:83:95:A1:C0:56:62:4E:A1:71:99:E8:07:7D:79
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Certificate issuer: /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
Manifest number: 2A
Signing time: Wed 19 Aug 2026 09:29:29 +0000
Manifest this update: Wed 19 Aug 2026 09:29:29 +0000
Manifest next update: Wed 26 Aug 2026 09:29:29 +0000
Files and hashes: 1: RnF4Q-fTSLOez3uSSVUB_jVQujw.crl (hash: 718xyEMw5UqgSnSgdsjp8sMEl+6Lg/9vjDYFepMXR5M=)
2: g8XYHoulscOdIzPLr2d3D2E_Iq4.asa (hash: xRoqthOZmfDfJDQzpKsFdbAkLfGrB9YrhCDM68yWLys=)
3: 270496C06EC111F198F60F1C67A30FBC.roa (hash: JtKOBE4F8rwYsWTEwFLdbKDrbkNvr+908F7G3Dfu+ec=)
4: 0B73271E6BAB11F1817F09047447A888.roa (hash: xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=)
5: 83C1CE04704D11F1AE17E0CA6AA30FBC.roa (hash: +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=)
6: 27B6241C6EC111F198F60F1C67A30FBC.roa (hash: 1vqnDMCOkfAA0RhjR6F0sutamrJDfPdesHktqXu9g8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Validity
Not Before: Aug 19 09:29:29 2026 GMT
Not After : Aug 26 09:29:29 2026 GMT
Subject: CN=6a857779-adbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:2a:17:4c:32:f8:90:90:1c:84:f0:ac:7f:
70:22:3d:5f:8e:6b:95:d6:cf:e9:61:d1:1b:63:56:
f7:a2:27:d1:a0:c0:ed:a0:8b:f6:42:34:94:f0:ea:
93:88:70:1a:27:c8:ac:e0:d5:fb:30:86:e8:14:27:
66:2c:97:0a:13:fa:dc:a8:54:4e:89:9b:48:31:aa:
e0:37:7a:14:1a:1d:30:e3:0d:a6:c1:3a:a7:84:83:
63:e7:03:96:33:d3:58:6b:81:51:0b:09:9a:06:9f:
ba:bf:b1:03:9b:4f:85:16:c3:e2:0b:83:f7:70:ee:
25:54:86:0a:4f:3f:1d:66:bb:81:09:66:e1:a4:39:
5e:07:cb:32:9b:90:33:60:3e:55:6f:60:82:a5:8d:
c7:0b:bd:5c:17:ac:e6:0f:f5:b1:97:ab:36:d2:af:
32:8a:0a:77:53:82:d4:dc:c5:8f:92:f1:e0:17:23:
32:0d:32:25:34:b3:40:3a:8e:3c:99:91:bd:5d:50:
40:7f:cf:88:dc:9d:25:a3:fc:d3:3b:be:78:9c:34:
fe:7a:ba:2b:5d:02:ee:20:9d:df:b5:7d:d8:83:e9:
70:4f:e1:af:15:4c:4b:2f:bb:7a:f4:11:48:de:96:
8c:35:9f:2e:72:86:d0:80:04:04:77:cd:0a:1a:2e:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:B1:42:5D:0D:83:95:A1:C0:56:62:4E:A1:71:99:E8:07:7D:79
X509v3 Authority Key Identifier:
keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:c0:e9:ea:da:0a:f1:ae:92:0d:15:c5:ef:b2:be:07:d7:
56:32:76:95:8c:e6:f8:3d:8f:79:1e:87:27:f8:26:89:b7:1d:
f9:64:62:d3:ed:dc:bd:81:62:2e:d5:a6:0e:58:6f:eb:9d:45:
de:98:b5:87:98:68:e9:15:46:73:d2:49:57:91:dd:eb:a8:5d:
1d:7b:7c:e6:56:f3:34:77:3f:7b:5d:95:c8:2f:29:80:66:5a:
d3:87:76:e8:aa:cd:f7:d6:67:4a:49:6a:b3:84:8e:4b:8c:c4:
28:d1:6e:2b:83:85:58:19:ef:33:16:f6:78:a4:8a:67:e0:be:
a4:47:98:cc:e1:41:12:9a:f1:01:00:42:c2:04:4d:28:ad:09:
ee:85:3f:fc:24:ff:67:e8:c8:1f:60:90:0e:8b:27:c2:4b:65:
32:4c:c2:2d:d5:45:56:af:78:c6:21:ed:42:07:77:ad:83:47:
8e:c0:aa:de:68:02:5f:95:0b:b2:da:a6:f4:90:2c:b0:b1:76:
b9:b8:79:e1:d4:e4:e5:6c:95:0e:08:45:ec:06:c2:ab:63:e2:
82:32:af:09:69:d7:44:46:8a:ce:8d:7f:e9:3d:07:99:a7:44:
85:9a:32:47:2d:d0:f7:91:9d:1f:6c:92:80:d7:e4:df:44:02:
ea:4f:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:00:59 2026 by rpki-client