
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier: rdvqCiA8omsNwJ7AkEZd/qDXmllWWKhHRR+T6XRQvgo=
Subject key identifier: 7B:E5:92:4E:04:9D:90:11:49:47:6B:87:E7:59:21:B0:AF:4A:95:AB
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number: 060D
Signing time: Wed 22 Jul 2026 23:35:23 +0000
Manifest this update: Wed 22 Jul 2026 23:35:23 +0000
Manifest next update: Wed 29 Jul 2026 23:35:23 +0000
Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: ZNIZ3nCzpAfJvQYgGI5UbEm+ij/ixBsqXKO/OFvsLL0=)
2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: oGgE9YL0l71OjqSUI9CCSHMTmtmqHzEUM2urYheCFM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Validity
Not Before: Jul 22 23:35:23 2026 GMT
Not After : Jul 29 23:35:23 2026 GMT
Subject: CN=6a6153bb-1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:05:5b:0a:2b:c2:d9:95:60:6d:b0:55:f5:
6c:47:93:b6:32:89:35:c4:e7:dd:d1:1e:37:b4:c6:
32:72:fd:45:c6:7b:84:54:58:26:0d:14:54:a2:8e:
00:4f:09:3d:22:aa:6f:56:e8:68:8e:da:3a:07:00:
e7:0c:3d:6b:80:6c:54:a9:95:97:8d:04:72:73:43:
f1:11:5f:a4:84:59:57:38:3b:5b:2b:a3:41:b4:47:
68:93:98:3b:1f:b5:11:7c:ec:93:24:16:7e:43:3c:
bc:8f:5d:d8:71:af:0d:d2:e1:f7:2f:0d:db:5c:5f:
e3:5e:53:1a:ad:84:3b:9a:10:61:b5:53:d5:99:cc:
25:90:6e:47:8e:5f:4c:5e:57:97:89:1f:62:dd:2c:
67:5e:35:73:6f:24:0d:fe:d1:98:2c:bb:06:fe:06:
a7:f0:b3:6e:a5:31:27:b1:83:e0:15:e4:c1:2e:40:
19:06:f7:fb:76:aa:e7:5d:fc:bc:d3:19:07:3e:b9:
1a:f8:85:7f:13:54:dd:d9:20:57:ea:37:21:ae:e2:
bf:76:bd:eb:c9:d0:af:61:25:c3:da:04:f8:80:21:
a5:cc:7d:a9:79:30:cf:af:ef:25:67:4c:e8:d0:f1:
d9:8f:12:ee:09:19:54:cb:86:f8:de:bf:b4:cb:39:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:92:4E:04:9D:90:11:49:47:6B:87:E7:59:21:B0:AF:4A:95:AB
X509v3 Authority Key Identifier:
keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:cd:85:d0:de:c3:ff:e5:e6:2b:4c:f1:b1:61:b3:a7:62:
9b:dc:41:2b:ca:bf:62:a2:74:0a:b2:a9:87:ac:95:d3:64:c2:
b6:12:7b:b1:da:2d:02:e4:f2:6f:91:95:70:2f:d1:14:02:22:
56:6f:07:37:e8:a1:1a:e1:f3:6c:21:8d:a6:e5:93:ea:50:f0:
3b:b2:a6:00:dd:a4:aa:9d:35:d5:e0:9b:a9:8c:cc:59:0f:32:
ed:fa:a2:e2:d2:ef:17:bf:42:22:f6:31:a9:6c:65:03:24:4c:
f3:f1:6b:5b:bc:32:fc:43:80:4a:25:e4:01:21:5e:b2:2f:7d:
09:5e:26:fd:ba:b1:d3:5e:de:24:13:42:10:6a:f1:43:8c:1c:
19:08:21:2c:be:c1:17:bb:29:c3:10:cc:40:9f:48:a3:8d:55:
56:3c:55:da:50:b3:e7:42:23:b5:03:5a:b1:bf:fc:f7:d3:46:
0c:29:9b:8a:e9:05:26:b7:86:a7:ab:5e:36:17:b3:3f:12:db:
ce:61:e0:a5:cd:ae:62:32:d5:9e:aa:f0:92:99:7f:03:a4:17:
0d:1d:42:d9:17:3f:7f:88:23:c4:17:49:45:10:69:f7:6d:d1:
4c:2f:60:c3:cd:d0:f4:d6:7e:0b:81:37:42:55:97:9e:ea:08:
06:c4:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:44 2026 by rpki-client