
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File: MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier: NMK/RhazbeX6J8hdgnHtcr9p2ZtMTyv3rCI+aAWdVSQ=
Subject key identifier: BB:3D:CE:98:27:8C:DA:68:42:9E:FD:BD:87:39:9B:DE:23:BC:AF:21
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer: /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number: 64
Signing time: Fri 17 Jul 2026 09:17:02 +0000
Manifest this update: Fri 17 Jul 2026 09:17:02 +0000
Manifest next update: Fri 24 Jul 2026 09:17:02 +0000
Files and hashes: 1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: kj9nCCRlwqtvZ8tXLTnerVYHDi7FmRciR5P4Ug72MBA=)
2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Validity
Not Before: Jul 17 09:17:02 2026 GMT
Not After : Jul 24 09:17:02 2026 GMT
Subject: CN=6a59f30e-587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:c4:a1:63:8e:16:59:d1:69:1b:87:ab:4d:
30:95:aa:eb:10:a7:ef:5e:00:82:51:5b:a5:a0:91:
87:92:6c:b8:ce:9a:f1:de:29:bb:eb:d2:11:6a:f6:
a8:51:1b:e6:b4:1e:5a:cd:1f:d2:ae:19:9f:33:43:
d9:c2:4f:f7:32:ed:4d:bd:ad:ba:4e:04:3d:37:ce:
f3:a6:8d:b7:93:1c:e7:f0:47:d6:82:bc:2e:85:5c:
4b:c9:cc:82:4a:3d:44:12:4b:a7:a9:31:0b:2d:f4:
12:c0:fb:7f:af:10:4e:e3:67:80:69:9e:4a:c4:1e:
95:c6:7f:fd:b6:8b:45:bf:1d:78:17:7c:d8:d1:99:
28:e8:58:a0:f3:7b:6d:23:5c:15:36:d9:f1:da:1f:
33:ac:82:6f:92:75:2b:ac:ab:79:bf:f7:ab:20:1b:
1b:96:4a:f1:69:ec:a6:c3:c8:34:ac:46:53:e9:a2:
1b:c5:ea:ed:2d:d4:26:f2:8b:36:bd:76:42:af:06:
3d:f6:6b:e1:65:fc:c0:87:b1:80:22:8d:77:7a:1e:
5a:0b:60:a5:5b:b4:ab:db:5c:2d:3f:ee:5e:04:27:
50:75:76:ff:20:0b:68:4b:d5:ea:8f:64:04:f2:0c:
02:4a:7b:c9:f1:0b:7f:2f:b0:64:55:e4:c7:3c:b7:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:CE:98:27:8C:DA:68:42:9E:FD:BD:87:39:9B:DE:23:BC:AF:21
X509v3 Authority Key Identifier:
keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:0a:19:45:da:54:fe:8f:80:1a:aa:6a:a8:db:e4:d5:1e:f5:
78:7f:3b:0e:b6:75:af:68:4e:bb:8a:b8:dd:d9:00:35:7b:b0:
76:f8:96:b6:3d:9b:17:5c:14:31:fe:94:4b:75:db:df:fb:62:
ad:3f:3b:45:58:8b:a4:93:1b:04:93:4b:ba:32:c4:5d:48:46:
90:61:cf:13:7d:07:f5:ce:77:fd:05:71:cd:bd:48:dd:71:a5:
36:f1:52:c4:b3:c2:ca:5e:f0:48:43:84:94:77:8f:a2:b0:1e:
6b:bf:a1:c5:d0:ab:93:2b:7d:a3:8d:b1:16:7b:d9:e2:73:a8:
20:a5:5e:e3:3a:fe:3e:69:f2:00:6c:1a:89:ed:62:f6:57:bf:
4d:0e:d9:5a:9d:27:ee:0a:67:50:8b:0f:53:70:3d:7d:c6:d3:
20:c9:f0:c4:9a:7b:9b:12:ba:93:26:48:95:e9:d0:f4:03:65:
b0:08:b7:45:d4:1a:53:4f:87:d2:a9:0f:aa:d6:e4:a5:32:f5:
0d:9b:31:ed:42:7b:ef:9d:2b:f3:08:0e:4a:33:28:fb:2b:12:
d1:4b:6d:80:ec:74:20:db:2d:b3:4f:ba:3d:02:c8:d2:9e:02:
d2:36:c0:b8:d6:cb:d4:03:da:05:99:9f:d4:f9:53:ca:b4:3a:
14:b6:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:16 2026 by rpki-client