
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: wa90eQEJAWd82V80XDZ7RLFDcKPK4VIovTqzDDYbXs8=
Subject key identifier: 7A:6F:22:41:68:58:87:7B:D2:30:37:8C:9D:A2:FA:76:74:41:C3:29
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BC5
Signing time: Thu 06 Aug 2026 15:31:12 +0000
Manifest this update: Thu 06 Aug 2026 15:31:11 +0000
Manifest next update: Thu 13 Aug 2026 15:31:11 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: XsK4teWA83dV9mLL/jlTQPPe1yTfAz+rqm3ChDGXT5c=)
2: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
3: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
5: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11291 (0x2c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Aug 6 15:31:11 2026 GMT
Not After : Aug 13 15:31:11 2026 GMT
Subject: CN=6a74a8bf-4aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:92:a9:a6:a2:7a:ec:89:33:3e:60:4a:cb:
fb:70:a6:b0:2e:a7:d8:21:25:b3:66:6b:74:fb:09:
27:59:b3:ae:e3:6b:fe:c9:db:e5:ed:8e:a2:31:b0:
fe:77:88:a9:8e:46:2b:79:1d:f4:53:ce:fb:c3:87:
ac:f5:9f:c3:1b:43:b0:7e:68:28:ff:ca:32:a8:2e:
81:a6:d6:e2:a4:0a:e5:1c:85:4d:01:f0:c6:43:8f:
cf:78:a5:0e:f5:7e:a8:f8:ba:30:c0:f2:23:24:d5:
28:c5:69:68:47:42:5d:d5:a0:0d:12:02:a5:07:65:
b7:a6:f3:0e:86:75:63:07:c3:5a:1b:0f:20:69:e8:
62:ae:8b:c5:0e:66:6d:90:db:0c:86:09:98:d5:6c:
51:e5:39:af:83:dc:1e:da:79:a3:c9:db:44:02:ad:
ad:1f:f5:7e:c5:c4:6a:90:1c:a8:4f:46:61:4c:ca:
cb:84:fa:70:cf:9f:6f:4b:bb:7f:13:c9:57:50:2e:
3a:d0:8d:dc:6c:5b:88:33:49:11:bd:26:80:f2:7e:
75:00:a3:91:16:d9:8e:cc:81:4c:f4:dc:c5:35:70:
46:73:78:a2:0c:65:52:33:12:cd:31:ac:e0:9e:79:
fe:92:c2:e3:3f:eb:5c:40:0f:42:ee:f6:76:1b:3f:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:22:41:68:58:87:7B:D2:30:37:8C:9D:A2:FA:76:74:41:C3:29
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:32:1f:df:d6:8b:00:b9:35:9e:11:eb:32:a8:81:57:5e:31:
3c:45:22:6b:95:64:7c:f2:db:4b:ee:43:85:3a:2d:a6:3d:f1:
20:ce:16:ab:89:9f:c6:ca:2a:80:32:e5:eb:a4:b1:72:77:5b:
84:bf:73:30:01:3f:78:e8:6a:ff:e0:ab:79:95:37:57:ae:19:
d7:05:d7:3b:67:2c:5f:b1:e4:b9:2a:f3:ca:4f:9d:40:a3:ac:
ce:8d:6f:83:f6:1f:86:f8:f8:57:2d:32:32:b0:d5:f0:34:76:
0a:4e:60:1a:c5:61:93:95:13:63:1f:1b:37:8a:03:b1:49:b8:
82:73:bc:48:ac:3d:bf:39:b3:ef:02:2d:a2:f2:66:82:34:3e:
ee:89:a8:0e:e2:fc:62:2b:bd:7e:dd:df:6e:05:f8:8d:97:3b:
e7:6f:a8:a1:47:d8:af:90:a0:e5:52:90:59:6f:3a:d3:89:8a:
06:1e:e3:6c:13:8b:a0:96:7b:11:d4:52:92:5c:24:e5:47:ba:
c3:51:a6:d7:3b:7a:9e:c7:a5:f5:3a:f8:71:05:3f:7f:71:79:
07:f1:18:94:48:95:79:e6:5d:1b:4c:5a:25:4e:fe:68:f1:0c:
a0:5a:67:29:0d:7e:ab:88:4f:ef:74:57:1c:ec:0c:24:cd:f1:
a0:1d:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:34:14 2026 by rpki-client