
$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier: icHm1EC/vOu3L2wTlnm3drJxVDrQF/eigTm7sFc+vT8=
Subject key identifier: E9:57:41:D9:42:BC:B9:9B:43:34:BB:69:7A:4D:BB:23:2E:46:BC:C6
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0F98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number: 0F84
Signing time: Sat 18 Jul 2026 17:33:26 +0000
Manifest this update: Sat 18 Jul 2026 17:33:26 +0000
Manifest next update: Sat 25 Jul 2026 17:33:26 +0000
Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: T2WZyhLkyiuGwMu8OamOJHBdZ5OZMzXoHNHcbdXdzq4=)
2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 17:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Jul 18 17:33:26 2026 GMT
Not After : Jul 25 17:33:26 2026 GMT
Subject: CN=6a5bb8e6-0999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:ce:3d:d0:0f:d6:48:b1:12:84:54:68:fc:
59:93:bc:81:1d:ad:be:8a:b0:39:5b:8c:93:6c:77:
7a:51:c3:95:60:bf:94:e6:de:b7:06:ec:bd:30:9e:
bd:59:5e:2e:9f:02:eb:a6:14:1a:1b:02:9b:a6:24:
23:a3:4e:a3:fb:45:25:f4:f5:9b:be:c2:1c:d7:16:
db:7c:a2:fc:52:5e:7b:71:8f:e0:50:3f:e9:2b:f7:
3b:f7:5b:83:eb:a4:79:37:a5:45:b4:f0:4a:1e:31:
aa:08:45:56:2a:d4:b5:cc:3a:07:96:31:c1:4d:3b:
87:4c:f2:41:de:1a:e5:84:ed:f3:26:c2:ca:41:89:
0e:13:03:d8:04:b5:aa:0d:b7:20:4f:81:10:5d:bb:
dd:06:6b:fd:9a:c0:90:20:20:02:79:dc:56:4a:34:
0d:b1:47:b6:03:01:69:38:25:2b:49:0b:38:7e:ec:
4a:0d:40:0f:0c:3b:43:c0:15:d5:c0:0a:80:01:a3:
95:9a:d9:3c:20:be:d6:f4:3a:65:7e:f0:d8:44:cf:
4e:fb:75:ac:ee:da:5f:ca:8e:20:c1:0d:f6:1f:84:
55:a7:f3:00:38:ab:f9:9f:36:15:9d:e7:95:60:03:
13:50:be:d7:5a:97:62:ea:a5:df:f7:db:a7:db:01:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:41:D9:42:BC:B9:9B:43:34:BB:69:7A:4D:BB:23:2E:46:BC:C6
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:64:49:46:02:e4:24:25:40:e5:7d:59:72:4f:f6:20:27:
ea:59:b5:bc:48:1d:4f:c6:4e:2f:7b:b7:ed:5e:89:03:23:47:
7c:ab:0b:fc:7a:ee:e0:c4:c3:1b:70:af:ec:49:b3:f4:50:e7:
9c:63:42:9d:4e:ed:95:7f:85:1a:9a:f1:d6:19:b5:02:fc:11:
18:72:53:d6:1c:8d:10:5e:f7:07:e9:12:05:91:2a:a4:85:ce:
0e:a4:f4:02:bb:6d:3f:49:05:6e:8a:a9:4f:0e:6f:0a:df:f5:
58:c9:53:d6:23:a4:d2:bf:0f:02:d5:b2:4d:68:9f:25:fb:ae:
95:f2:9b:d5:f2:1b:6a:0b:f4:b6:14:50:81:2e:a0:c2:9a:7b:
a1:23:26:82:a4:b1:6a:2b:9d:c9:96:2b:93:56:18:19:66:a3:
4a:ad:17:92:2f:51:6f:e5:4b:6b:ab:bb:9b:9b:ff:3f:96:73:
20:79:0c:10:06:cd:ca:a1:35:1e:20:41:d6:fe:af:b9:ed:0e:
fd:c4:34:98:64:75:4b:bc:66:df:a6:64:e0:47:e8:5e:19:b2:
56:79:32:ee:a7:a4:bc:1a:9b:9a:d8:65:14:eb:5d:7f:04:0a:
d2:94:1d:93:fc:d5:73:5b:86:e4:aa:3e:73:b7:1f:f1:e4:1e:
6d:d4:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:54:26 2026 by rpki-client