
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json)
Hash identifier: +16j/qFifmmdvI/oa+G4Ra3u6NTH/GDxyFj7faY30Qw=
Subject key identifier: 12:AB:2C:4B:03:C2:4F:B8:D8:1B:E9:8B:53:B9:88:EE:23:FC:A5:88
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
Manifest number: 2BDD
Signing time: Tue 22 Sep 2026 15:29:27 +0000
Manifest this update: Tue 22 Sep 2026 15:29:26 +0000
Manifest next update: Tue 29 Sep 2026 15:29:26 +0000
Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: 7I6+e90X/Yjw8sabwAktTY5r4itpbLcV7Lap/LCgc3s=)
2: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=)
3: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=)
4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=)
5: 2AAD212086FE11F194514C90ABEE528E.roa (hash: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11315 (0x2c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Sep 22 15:29:26 2026 GMT
Not After : Sep 29 15:29:26 2026 GMT
Subject: CN=6ab29ed6-daf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:97:ab:d9:c3:65:82:0e:5f:ff:0d:8c:dd:
c0:e0:f3:fc:40:74:17:2f:87:70:ce:f2:cc:be:68:
04:41:53:59:87:83:a6:8d:3b:07:e4:dc:7d:5c:19:
a7:8f:d5:81:be:ab:e6:e0:91:cf:74:79:be:71:17:
f6:cd:71:66:00:ef:38:8d:ba:0c:5d:54:19:f4:8b:
01:b1:ae:5a:7c:d9:72:52:92:04:60:f6:84:9d:bf:
5d:00:66:bd:9f:87:86:1c:b4:67:da:f9:0b:12:eb:
c9:11:67:4e:f3:57:48:53:c6:0d:85:0c:98:d3:95:
06:11:f3:37:81:8c:6b:98:3d:ff:64:0c:32:dd:56:
a6:a6:f3:26:28:56:8d:cb:83:83:d9:7e:68:5f:3d:
b8:0e:d4:f1:60:4c:53:51:80:23:dd:dd:98:12:bd:
d7:2e:59:f5:9c:b3:e6:ac:e4:8d:6c:3d:40:56:e1:
aa:72:38:48:c9:88:64:eb:89:9c:9e:d7:e9:d7:be:
9b:cc:e1:5c:a3:3a:42:21:99:92:32:23:00:8d:c1:
43:28:8b:e0:2f:31:51:cd:81:e9:17:4f:05:7b:c3:
3e:32:4a:0e:20:ed:88:be:2c:71:9e:c0:61:12:be:
65:b0:f1:f9:19:29:88:82:6a:46:b2:fd:09:5d:af:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:2C:4B:03:C2:4F:B8:D8:1B:E9:8B:53:B9:88:EE:23:FC:A5:88
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:f7:5e:b2:52:74:a8:25:ad:d5:fe:e0:74:6d:56:d4:dd:
cc:3e:bf:57:1c:99:2f:31:29:d1:72:69:27:bd:8a:60:13:3f:
8b:c2:af:ef:d3:c8:f8:45:29:52:7c:e6:29:42:9c:0e:66:62:
4f:b9:1d:55:fa:28:e8:25:19:02:8c:2d:f1:e4:2c:bf:f4:6d:
7a:91:5c:a8:fb:a9:86:c0:0a:6b:75:af:59:6f:8f:72:37:f4:
e7:d8:6c:de:3e:a2:95:3f:7c:ae:c6:2f:8a:27:23:1d:7f:ac:
a1:77:bc:80:77:3f:33:bb:ee:f5:b0:f5:4e:ae:f6:1b:87:c9:
eb:26:96:d8:f1:86:a7:d5:5b:7d:ad:c1:0e:b7:3a:a0:17:dc:
ac:bf:b8:86:4c:bb:8a:99:bb:a0:ff:37:e9:aa:76:03:ff:3f:
5b:9b:71:da:9f:18:fc:9c:2c:ca:49:c8:bd:b6:16:bb:82:03:
23:2b:83:f4:ca:19:e5:7c:64:90:a6:b1:25:3d:2c:e2:8f:37:
ee:7d:65:3f:8c:94:43:72:5f:58:fe:20:2f:a7:6d:f5:4d:ae:
50:14:06:45:3b:e2:7e:45:20:3c:13:18:fe:77:b4:a3:26:77:
40:24:69:dc:83:b2:fa:db:2d:d1:18:34:79:46:69:c5:77:e9:
84:d0:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:58:17 2026 by rpki-client