
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json)
Hash identifier: m//inErVy2l2fv335GjaXUlC8a8arjZ0lwOJym4FZX8=
Subject key identifier: 42:C7:90:CF:78:42:89:1C:A8:E1:FE:B1:FF:85:4F:35:99:EC:10:93
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
Manifest number: 01D6
Signing time: Thu 23 Jul 2026 04:58:37 +0000
Manifest this update: Thu 23 Jul 2026 04:58:37 +0000
Manifest next update: Thu 30 Jul 2026 04:58:37 +0000
Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: Qy/l5JNJvmKgKK941bfMTreycLSlLFHIXVkkaEpKvso=)
2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: 4Xxfcn9vWAxmFmsir9WaEVwPirqEsxparkquZplonJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Validity
Not Before: Jul 23 04:58:37 2026 GMT
Not After : Jul 30 04:58:37 2026 GMT
Subject: CN=6a619f7d-2315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:70:23:26:12:f6:97:04:9c:56:e8:5b:9c:
da:eb:87:70:06:ac:ab:fc:8d:fb:45:a9:7b:bd:49:
fd:c8:c5:cf:37:51:cb:f4:29:3b:59:22:8d:b1:fa:
c5:ec:64:89:3e:89:92:95:59:51:86:5f:3b:9a:ad:
0a:a0:bd:ac:c8:eb:01:87:fa:72:56:c2:20:1d:65:
a0:a0:ad:91:dd:61:b3:26:9f:a0:be:b3:c2:11:ca:
30:46:5b:ee:9f:e8:97:52:23:6b:23:23:2f:69:7d:
4b:60:f5:a5:50:19:d0:d4:70:d5:91:9f:bb:71:59:
50:52:fb:55:17:ec:0f:49:94:aa:46:70:5d:7e:6b:
4e:96:e7:70:42:3b:0e:c3:54:31:b1:2e:09:94:fb:
5a:45:84:98:b7:77:48:14:2d:18:c4:6d:ba:ef:0c:
99:f6:87:50:17:c7:ab:14:83:c6:2f:0f:ab:dc:b9:
4a:6c:8b:7d:3a:a1:42:66:36:a7:93:62:49:e8:f2:
cc:f2:f0:71:a0:c4:40:79:9e:7d:08:a2:89:e9:a6:
8d:ad:01:44:7e:35:f0:ab:d9:3f:37:03:06:f6:e8:
7d:21:c7:e5:32:04:0a:0e:95:3c:ad:17:24:15:7d:
5c:83:82:ee:cf:f8:dc:90:5c:64:19:46:8b:77:be:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:90:CF:78:42:89:1C:A8:E1:FE:B1:FF:85:4F:35:99:EC:10:93
X509v3 Authority Key Identifier:
keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:00:51:0b:c7:a6:c9:0c:7d:f6:66:ca:b2:22:eb:54:3f:
37:35:a6:c0:5b:d1:d4:5b:ad:b8:cd:d0:28:82:83:df:ae:a8:
1e:f3:30:c5:92:7d:0b:83:af:95:1b:e8:cb:70:57:b2:8d:40:
11:aa:ff:1e:9e:cb:ee:49:0e:19:0d:f5:3d:50:e5:09:fa:14:
b1:6a:82:74:b5:cb:28:b4:41:40:9f:e6:50:ad:ec:f8:9e:58:
86:32:53:a1:f5:33:cd:14:be:62:71:bb:c6:6c:5c:f9:d1:cf:
c8:d4:66:c0:75:0c:1f:09:8e:4c:34:fe:a8:65:0a:83:78:b9:
52:16:e3:54:cc:7d:87:67:de:6d:0f:3b:11:eb:d0:ba:6a:16:
15:c8:c7:e6:65:f1:13:74:c7:b9:e0:68:97:64:c6:36:5c:9e:
cb:b5:e3:a7:60:fb:ce:c8:3c:ce:41:fe:a8:9d:7e:f3:a2:67:
e2:88:1c:00:59:65:75:d3:5f:34:54:48:5d:e8:06:80:1a:57:
cd:0e:59:53:fc:24:24:17:b0:65:f9:66:18:7d:75:ed:83:87:
7a:66:19:7a:3e:1c:7b:06:4b:d4:35:e0:3a:60:6b:de:c1:27:
d0:da:25:eb:cd:5f:81:e7:65:01:9a:20:f5:07:5f:75:09:f4:
c4:86:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:35 2026 by rpki-client