
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
File: _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json)
Hash identifier: btHPkYfH1MZ3P7gaFHPlnEVuVT04k0txANM7cPCyl78=
Subject key identifier: 12:21:99:4C:A7:54:8A:9D:86:C7:53:A8:4C:C2:51:6B:A8:E7:D0:F2
Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
Certificate issuer: /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
Manifest number: 57
Signing time: Fri 17 Jul 2026 09:28:41 +0000
Manifest this update: Fri 17 Jul 2026 09:28:40 +0000
Manifest next update: Fri 24 Jul 2026 09:28:40 +0000
Files and hashes: 1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: jvnCTHZWi38VrL1DFOlYMJP2xoLFTBfVnphhaHZd/bk=)
2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Validity
Not Before: Jul 17 09:28:40 2026 GMT
Not After : Jul 24 09:28:40 2026 GMT
Subject: CN=6a59f5c8-bf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:21:40:3f:b2:88:e1:9a:ab:25:6b:0d:5a:
13:05:97:73:ff:c6:fd:eb:75:d8:7f:49:7d:1d:ff:
bb:d0:fe:60:e3:e0:e5:6c:4a:fa:e4:96:de:58:0c:
c2:8f:4c:75:91:6d:52:6f:a0:9e:9f:73:28:37:ad:
8c:83:be:6a:98:e5:16:09:90:3b:4e:34:97:dc:7e:
6b:7b:29:08:08:da:24:c2:45:59:97:64:84:c2:d7:
bb:b1:6d:36:34:01:7a:a6:6d:e7:a1:58:68:7d:27:
84:7a:75:d2:75:5c:77:b7:85:23:45:e4:ff:70:79:
74:7d:a7:64:52:6b:97:a7:58:b8:fe:92:cb:54:a6:
fb:ba:f0:94:0c:eb:e0:43:3b:8f:29:07:f1:79:8a:
2a:8d:81:cf:0e:e3:b0:0c:d2:81:61:93:15:41:bc:
a0:be:cb:56:a3:96:5f:24:8b:0a:f8:ce:5e:05:b0:
01:d6:da:14:bc:fc:23:72:30:8e:a0:a0:c0:3e:ae:
41:f1:32:f4:21:00:0d:65:c1:84:8e:53:84:21:9b:
a5:24:ac:0e:9e:47:c5:38:f8:38:f5:b9:2e:ed:82:
7f:63:49:78:1e:40:3f:65:3d:57:ec:ea:14:37:6a:
8e:eb:3f:dd:4d:33:c6:ec:db:6b:c4:78:c8:d6:5d:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:99:4C:A7:54:8A:9D:86:C7:53:A8:4C:C2:51:6B:A8:E7:D0:F2
X509v3 Authority Key Identifier:
keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d5:66:f7:cf:68:83:a1:d1:92:bc:72:39:56:f9:b7:a4:1b:
8e:74:61:19:13:77:ad:3c:bf:32:7c:52:36:03:9a:40:f5:42:
c0:00:61:be:59:cd:d7:c6:35:29:d5:53:5d:32:5f:ef:cf:aa:
34:db:05:95:56:53:40:fc:d1:3f:0b:bf:49:20:45:bd:b3:90:
f5:4c:17:ed:b8:61:ff:a4:65:1c:fc:cf:4e:91:fb:a4:a6:35:
df:19:89:4f:e4:c2:49:43:8c:81:0f:87:56:0e:a7:69:22:a1:
ce:a4:ef:81:eb:ec:83:f8:bb:21:1d:36:ee:d3:65:fc:36:c9:
9f:9d:4c:99:8d:d7:f9:17:b2:54:7b:37:24:88:65:6d:47:6b:
b3:cf:5c:04:7f:2c:ab:17:4f:f1:33:76:a3:a5:43:f8:f3:c4:
15:4a:f8:05:0b:10:40:da:22:92:00:3c:c2:8c:23:5b:4d:f9:
32:5e:b7:77:5f:97:c4:32:49:f2:48:45:b1:ac:2c:2c:25:96:
11:c6:d4:01:23:cd:d2:65:d8:ff:2a:fc:59:82:8c:26:bf:cf:
16:a5:7a:b4:f2:c4:6a:c2:f3:10:36:ce:b8:f4:33:31:76:5a:
6e:79:e4:84:53:21:f8:3c:e2:9a:8d:62:2d:30:63:d8:bf:26:
71:c9:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:05 2026 by rpki-client