
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier: CwCF4VGnjlBaWM9P61GV6G2omZmTqj642AnTEu+93Tg=
Subject key identifier: 9A:CF:9D:58:51:16:A8:98:58:98:C1:92:54:0A:EB:3C:CC:E5:80:32
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number: 027F
Signing time: Wed 05 Aug 2026 02:58:09 +0000
Manifest this update: Wed 05 Aug 2026 02:58:09 +0000
Manifest next update: Wed 12 Aug 2026 02:58:09 +0000
Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: EBdecgdpFHIPXbvZ6+FbuHM+Lm4zu85e1ummg3dw2J8=)
2: A21C38148A7711F1AB794FA34311F970.roa (hash: MgmaY4WXVm0HStO9rP6clArnD5jB26XfguusZC63Eq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 02:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Validity
Not Before: Aug 5 02:58:09 2026 GMT
Not After : Aug 12 02:58:09 2026 GMT
Subject: CN=6a72a6c1-54d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:4e:de:95:98:e0:c3:25:56:d4:38:ab:fe:
87:0d:e3:4e:0e:24:6f:4a:0a:4b:1e:52:c5:72:dd:
79:45:61:d6:91:ba:6c:9c:94:0d:ac:f1:a3:c9:2b:
f3:16:67:47:71:7a:bf:fc:e7:b9:8e:8e:aa:4c:63:
29:5d:f7:db:58:e8:76:28:a2:82:bb:49:7b:a0:43:
70:26:a5:00:48:75:7d:9b:f2:83:bf:45:db:9b:01:
e4:4a:de:2c:3b:27:b4:39:cf:55:35:4d:bb:c7:fa:
76:71:b7:d1:bc:8f:c5:ea:4b:38:ab:ac:b0:10:da:
b6:aa:bc:6e:36:a0:54:ff:dd:ef:97:57:08:83:4e:
9a:14:de:71:27:30:95:0d:af:8a:b1:22:8a:96:be:
28:65:8e:13:be:dc:02:7a:b2:90:c8:5a:45:e0:b2:
5f:22:83:54:43:ba:21:1b:fa:dc:ec:fb:4d:23:5c:
a2:bc:a5:ce:4c:e0:9a:81:80:5b:f6:2a:0d:10:84:
52:e3:44:96:ad:02:ea:37:c0:11:c1:61:d1:3a:5f:
16:bf:06:1e:0d:a2:cb:fc:9e:19:ca:28:36:8a:b7:
93:ba:1c:d9:d2:d4:ed:b1:36:f9:9c:67:87:6f:2a:
9d:1a:ba:0f:28:f4:15:46:c9:33:94:4b:49:a0:ce:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:9D:58:51:16:A8:98:58:98:C1:92:54:0A:EB:3C:CC:E5:80:32
X509v3 Authority Key Identifier:
keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:a3:b9:de:00:0f:54:0b:d3:26:3d:5f:11:c8:8d:b1:0f:
b0:25:9f:6e:3d:5f:44:54:21:f4:7f:20:0d:e6:d8:66:11:32:
12:6c:70:18:e7:fa:9d:e9:07:ed:7d:88:6e:dc:37:4e:be:c1:
38:e1:e5:a6:45:4a:ac:80:1d:df:af:85:9d:b9:9c:7d:88:51:
80:ee:ff:93:56:7b:1c:8b:68:4a:97:cb:25:48:23:8c:eb:da:
8d:e6:06:6a:9c:aa:4f:3b:4a:22:bf:dc:97:c3:6c:81:55:33:
fb:88:86:74:ae:1f:a8:cd:8d:5c:c6:b4:d5:33:c0:b6:2e:8b:
52:0f:7d:03:48:96:63:36:87:9b:a8:d5:0a:8f:cf:9b:06:c0:
c4:8b:12:f0:05:b0:58:34:7b:13:80:0b:16:1d:d6:12:ea:0a:
3f:1e:39:fb:b5:d0:57:cc:72:0f:70:e4:6d:aa:5f:13:8c:a5:
ba:c2:a9:fb:ea:3a:a6:11:8f:32:b5:89:df:11:a8:7a:37:df:
50:2c:74:35:45:ef:5e:43:fe:11:fa:36:ba:e6:2b:08:ed:d5:
e4:5d:5f:17:52:e5:08:01:9e:64:a6:fb:de:39:0c:9b:21:c7:
34:69:b5:75:27:0f:55:c0:b6:16:ec:5f:dd:bf:21:5d:81:b9:
27:b4:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:20:32 2026 by rpki-client