
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier: JQa9QM7vKKrrPBHMq24KyIZI3oG1vykx3Mii7n66zU0=
Subject key identifier: 6D:D1:78:F7:25:01:BA:5F:DB:00:AF:17:D0:7E:79:32:81:8D:94:DE
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number: 0864
Signing time: Wed 22 Jul 2026 21:30:05 +0000
Manifest this update: Wed 22 Jul 2026 21:30:05 +0000
Manifest next update: Wed 29 Jul 2026 21:30:05 +0000
Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: v7iJgXAdSaAkYR/w8uFLSzBPQeIjGtfYWlcqBrw+4UU=)
2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Jul 22 21:30:05 2026 GMT
Not After : Jul 29 21:30:05 2026 GMT
Subject: CN=6a61365d-1071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:a7:63:f9:39:5c:43:3c:6a:7b:29:c7:aa:
bf:f1:bc:a2:f2:ba:a0:07:ea:dc:02:46:e0:89:6d:
ea:fe:d6:ab:91:3a:3a:f4:f0:11:fb:b4:d0:a9:d3:
2b:b2:c2:b0:1a:f0:2c:6d:f7:c6:2e:02:94:85:e0:
ec:f3:76:0b:fd:84:22:34:88:9b:d9:e9:f1:4f:13:
60:26:34:59:7d:86:89:23:8b:c7:4f:04:0b:6c:89:
60:1b:7a:51:6f:b6:b4:50:db:00:f3:d8:f0:0c:e2:
40:89:2f:1c:d6:a7:10:8f:76:79:90:7d:2f:58:f5:
a9:17:f2:3b:83:4e:be:3d:d3:a9:3a:b4:30:e8:ae:
a5:40:57:d5:b9:a2:03:9d:fa:15:64:a6:1e:8c:ba:
ba:f0:32:da:ed:b9:f4:e9:fc:7d:9b:b1:42:4c:77:
cb:2b:d9:b0:ab:5a:bf:64:70:1e:b2:0a:10:99:32:
d6:e9:d5:98:19:65:43:d4:12:11:ab:4b:bb:44:82:
02:75:cb:b5:3d:2f:f8:75:4b:b1:0a:fe:38:c6:11:
03:c8:71:6f:9c:b5:27:76:83:ff:4a:4b:93:d7:e3:
32:4b:92:0e:9c:a2:44:d9:8a:f6:e4:2a:c5:c2:9d:
f9:f8:1f:d0:6f:d8:ef:bd:c2:af:93:d6:b4:24:20:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:78:F7:25:01:BA:5F:DB:00:AF:17:D0:7E:79:32:81:8D:94:DE
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:33:79:26:33:21:32:1f:62:44:02:19:12:0d:23:44:64:49:
97:9d:57:43:e2:87:be:d8:9e:9f:b7:78:65:27:a0:f6:44:ba:
6d:2d:39:2d:34:45:db:cc:60:a2:4f:1c:16:d1:d2:8a:69:9f:
ab:d5:21:8c:bf:93:f8:e2:25:76:3f:e2:8e:08:f0:af:f0:e0:
3b:5d:b1:dc:3b:a8:32:cf:e9:c9:1a:b5:3b:38:48:01:e1:fc:
ab:9b:ce:7a:18:28:65:c2:c3:14:d3:12:b4:23:8c:dc:5a:01:
f8:56:55:cf:a8:cd:bf:26:20:5e:e2:76:88:5a:bf:4d:36:10:
14:39:1c:45:9d:db:f8:d6:2b:7c:2b:9f:c6:84:ee:8e:f8:54:
0d:56:ae:1c:ad:cc:75:3a:cc:c0:cd:22:7b:c3:df:d6:7e:1e:
4f:6e:b7:65:9b:b3:c7:34:15:b5:61:ba:c9:6c:59:6d:b1:46:
38:21:3b:b7:31:61:aa:3a:24:53:0c:ce:e8:83:d9:50:ec:3f:
f4:ab:06:80:b0:bf:fc:47:27:7d:52:95:da:5b:38:93:30:19:
bc:fd:dd:f2:eb:c1:96:c6:15:d8:ee:ff:f8:67:c7:a3:bc:91:
4d:2e:0e:b5:66:00:a2:f9:c9:de:4c:9b:56:f9:13:a8:d9:49:
49:59:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:52 2026 by rpki-client