
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
File: rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json)
Hash identifier: /m6wITbyc5lYBFh2F9RW+sJKuJzmj4AP+/fvnaJ79MI=
Subject key identifier: D7:22:FE:93:E8:73:86:4F:66:11:46:9D:8F:D1:BF:59:C3:3E:D9:2B
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial: 04DE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
Manifest number: 04D7
Signing time: Tue 21 Jul 2026 00:11:26 +0000
Manifest this update: Tue 21 Jul 2026 00:11:25 +0000
Manifest next update: Tue 28 Jul 2026 00:11:25 +0000
Files and hashes: 1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: gQiXHYyg+TW10yY0YessNNSK0lqMWwh5AYlqQtcw+jY=)
2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: c5g1rHsWNxDvIouk1n/dGRhPWzbyhhfN9823sucQoSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Validity
Not Before: Jul 21 00:11:25 2026 GMT
Not After : Jul 28 00:11:25 2026 GMT
Subject: CN=6a5eb92e-a9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:8c:01:89:8c:93:e5:e4:cf:f4:11:43:97:
ef:86:25:8f:40:c9:76:3a:bd:a1:54:ea:9f:83:50:
a7:ac:13:66:2a:8c:a4:52:e3:f8:41:7e:ba:e1:b0:
18:7b:bd:45:67:57:4e:d6:83:84:d4:3b:bc:52:25:
65:b5:14:97:fe:b3:61:7a:6a:bf:26:fe:64:10:12:
d4:fc:43:e0:a3:86:97:aa:b2:a6:ca:4a:69:49:e9:
73:d9:e4:9f:46:6a:64:d8:7b:41:2b:08:83:33:32:
7a:de:ca:0c:01:da:c9:9a:7c:3c:37:0e:05:f0:5c:
4f:d6:13:90:e1:e5:a2:59:41:56:b5:ed:1f:b7:f8:
3b:d1:86:db:3d:53:86:a4:4e:40:84:15:20:63:bb:
62:f9:52:5c:10:7e:3d:3c:77:03:a9:51:e0:1d:bb:
d6:df:d7:fa:d3:a5:56:fb:c6:4d:bd:c3:13:0d:76:
a3:7b:85:b0:c7:53:ea:3d:80:7a:ff:59:0c:ba:78:
53:b1:01:8a:b9:0a:c5:06:bc:72:08:35:5a:6b:3c:
9c:45:f4:f4:56:60:6b:d0:63:91:f8:03:56:8f:e4:
e2:d4:2c:c0:3e:53:bd:2a:53:67:3d:48:d7:b4:c4:
03:e9:21:3c:df:79:18:03:a9:13:3e:b1:86:f3:24:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:FE:93:E8:73:86:4F:66:11:46:9D:8F:D1:BF:59:C3:3E:D9:2B
X509v3 Authority Key Identifier:
keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:6f:68:05:ab:0b:58:53:47:5c:73:da:10:f7:f5:12:c4:
6f:92:49:8e:8c:db:32:a6:c8:4e:44:4c:5d:a8:1e:ff:fa:37:
56:13:bd:46:26:7f:93:f6:79:64:52:dd:3b:49:e0:3a:b8:90:
00:49:75:0b:ec:61:c6:63:7f:20:1b:57:be:87:03:ea:29:68:
2f:25:1f:5e:16:9e:0b:30:9a:37:1a:da:d4:31:5f:c0:47:5e:
62:ce:41:6c:0b:15:8f:0f:25:24:45:12:20:21:77:7c:95:fa:
05:dc:78:8f:f5:50:9a:fe:6c:17:64:05:ce:f7:14:94:d6:04:
2b:60:19:4f:f1:fe:59:44:d2:0b:34:53:e1:cd:d8:4e:70:92:
0e:79:16:51:cc:b3:de:c0:cf:ff:f9:08:4e:02:dd:5f:ce:4a:
d9:63:f2:d9:d5:95:cd:00:7e:71:d1:bf:97:24:ef:c9:a6:f4:
4a:a2:12:24:96:3c:15:49:9f:09:76:5d:75:ca:53:4c:d9:ed:
c2:36:0f:67:60:91:df:91:fb:fa:de:7d:7e:c3:5c:7e:46:ba:
b9:d2:12:e8:b4:5e:10:fc:49:a9:9a:be:64:49:d3:e8:f0:04:
c7:00:9e:57:83:cf:42:79:77:52:33:7e:06:84:51:12:ee:62:
b3:1c:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:53 2026 by rpki-client