
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json)
Hash identifier: jtksOijWWcLAywMBG/avw31ZvmWaieMrbCAHsqqo3hE=
Subject key identifier: A0:96:F3:1C:F4:7F:5C:0E:1B:C9:19:B4:E6:6A:80:CC:C3:D4:45:16
Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
Manifest number: 010C
Signing time: Thu 23 Jul 2026 08:01:40 +0000
Manifest this update: Thu 23 Jul 2026 08:01:40 +0000
Manifest next update: Thu 30 Jul 2026 08:01:40 +0000
Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: 1LNecmYpBYo29OLLS/BB9OrBhTsb9LHWR3j4EZU358g=)
2: 59136C26FFB911F09F6B6297696F56BC.roa (hash: /VCvroFhx6z1l88pSltO1q8+Wyrj5tu4h/G9D4tqaXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272
Validity
Not Before: Jul 23 08:01:40 2026 GMT
Not After : Jul 30 08:01:40 2026 GMT
Subject: CN=6a61ca64-bad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:d8:ca:ad:0e:9a:0b:fd:cd:65:c3:0a:d4:
13:2b:75:79:a8:b6:8c:cb:d8:d5:42:06:fc:38:3c:
49:fe:14:26:d4:a0:fd:a5:c5:3a:10:d8:c5:c8:87:
c3:f1:39:d2:20:eb:6c:41:51:0c:a2:62:92:2f:ab:
99:49:62:3d:e5:4e:87:f8:db:8a:16:7f:c0:b2:aa:
3b:81:b9:3c:d5:c0:ea:63:3b:43:19:a1:ac:87:e3:
de:d6:52:f2:d9:10:dc:e4:32:cd:ce:71:93:d8:a3:
5b:15:58:78:11:ee:57:6b:96:69:43:cf:14:48:61:
67:27:d1:c2:51:d6:1f:0b:34:b6:1a:4f:ad:7b:11:
3b:93:1c:6c:87:47:00:7a:b7:3f:81:60:66:7d:1a:
b7:9b:6c:49:e3:0c:a7:97:e7:fa:9d:8d:de:67:a1:
ad:4c:c3:54:6c:8f:2f:2b:dd:d2:ca:b2:8e:37:ce:
3c:02:fe:30:ae:41:30:6b:98:ad:a9:4d:4a:58:6b:
2b:bb:ec:b2:c9:0c:8c:07:d6:84:a3:9e:21:64:24:
8e:e4:a0:db:ca:dc:ee:f1:ee:0b:08:18:a8:be:da:
78:6b:a3:1a:8c:c8:7d:48:3b:dc:8d:16:b4:14:8d:
85:f8:26:0b:84:06:77:04:96:23:a7:3e:1f:91:4d:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:96:F3:1C:F4:7F:5C:0E:1B:C9:19:B4:E6:6A:80:CC:C3:D4:45:16
X509v3 Authority Key Identifier:
keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:31:f3:81:87:99:5b:02:6b:23:4a:55:65:35:76:41:d6:a2:
19:9f:c5:80:05:1f:72:1d:c7:f6:28:4d:25:c8:66:b5:48:9e:
dd:cd:1f:77:ff:df:01:e5:f4:f5:aa:e6:5b:a3:66:08:8d:a7:
91:55:87:48:2d:f1:4f:a2:cc:85:12:58:34:11:e9:f5:e5:9a:
3c:6f:b9:37:31:ce:a5:e3:29:af:88:c3:a9:40:bd:6c:71:7d:
d9:fc:e9:10:06:f1:3a:41:dd:a2:1b:74:23:53:67:03:67:6d:
03:2e:81:64:57:f1:a9:7c:b0:29:83:8d:92:a3:a6:87:53:7a:
a3:a5:2a:d2:4c:03:df:82:e5:5b:23:d4:79:1b:08:95:00:b1:
91:c0:9a:6c:ff:19:f1:08:a0:75:40:79:22:8a:3b:2b:88:43:
d0:13:73:75:d7:dd:ba:c1:9e:10:db:60:c2:74:c0:0b:f2:e0:
56:d8:95:8f:d5:fd:c0:af:ff:09:c0:98:a6:7c:0d:a4:f6:0f:
a2:70:e1:64:44:2a:24:33:35:e5:d9:d1:63:03:fb:fa:0c:d9:
fb:58:54:a2:7c:53:95:38:cc:7e:4d:cc:1f:d1:ef:c7:0e:36:
8c:c5:6d:ae:3b:b5:01:00:d5:7b:21:91:d9:aa:0d:5f:95:73:
30:2b:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:16 2026 by rpki-client