
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: vNaQbkoshjp3HUPSNy739Uhgp3uo50PE0hcrm+tln70=
Subject key identifier: CB:4F:13:68:FA:95:74:32:BD:E8:B5:5B:09:83:1F:6E:D2:D0:95:0B
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 07C0
Signing time: Wed 22 Jul 2026 22:07:31 +0000
Manifest this update: Wed 22 Jul 2026 22:07:31 +0000
Manifest next update: Wed 29 Jul 2026 22:07:31 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: rfM+x4tz4PivFXh+NUBwnSpPstgie8eLGLzCnZJ3RmQ=)
2: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
4: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
5: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
6: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Jul 22 22:07:31 2026 GMT
Not After : Jul 29 22:07:31 2026 GMT
Subject: CN=6a613f23-6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:6d:5d:0a:83:e2:e3:f5:ed:f3:ba:4d:3f:
74:9a:9b:6e:f7:99:84:87:d4:2d:bf:a1:4a:52:d8:
e7:45:10:a9:d1:e6:ca:5d:69:3f:25:83:35:bf:16:
6c:65:0e:12:08:66:75:97:33:c9:a4:c2:5e:dc:e5:
6a:2e:a9:4d:7f:d8:a9:3a:ab:eb:e3:14:1f:41:1b:
d2:8a:70:eb:20:98:b0:d9:5f:0b:65:dc:93:b7:bc:
0a:e5:39:8a:7e:cc:c7:a0:85:57:e7:52:4f:a7:3f:
96:20:9c:5f:23:77:1b:ab:ac:1f:dd:87:aa:b7:b0:
6d:6f:c6:0c:9b:2d:25:82:42:b6:e9:53:8e:05:e6:
fc:d1:8c:7e:69:ab:f1:10:bb:45:17:64:f4:33:db:
ec:a0:c9:c1:d8:8c:79:3a:27:c9:3d:b2:a5:06:35:
0f:3a:95:c4:d9:48:9d:2c:42:cf:e0:20:d7:38:20:
35:ba:52:b6:d1:c2:53:b5:02:fe:df:45:ad:6a:f0:
76:00:eb:c2:d1:95:29:4e:b3:01:86:11:b5:e0:e9:
3e:0b:99:36:97:1a:ff:70:f7:ab:97:64:33:51:77:
de:df:c0:78:79:bc:63:00:56:2a:54:35:ab:c3:fd:
1d:68:03:e0:cf:75:54:16:cb:95:29:d7:1b:d0:4a:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:13:68:FA:95:74:32:BD:E8:B5:5B:09:83:1F:6E:D2:D0:95:0B
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:0a:94:a7:1f:27:ea:22:0d:cc:c8:62:b4:ee:65:b8:1b:
2b:e0:d0:a6:54:43:9e:28:bb:0d:c8:95:c7:6c:a0:12:cc:69:
80:b9:2e:95:15:19:f4:f0:96:35:54:ad:bd:e8:d0:81:d8:2d:
cf:5e:55:3c:0c:f0:67:3e:07:00:32:2b:97:24:bf:17:82:77:
64:ec:a6:9a:47:d9:56:10:e9:55:63:50:97:7f:35:e2:52:b5:
04:87:17:6a:80:27:70:4f:10:3a:42:b8:6f:55:cc:af:99:67:
4b:85:ac:80:5a:7e:f9:db:32:81:72:1d:7b:53:4d:6a:36:6b:
cc:eb:26:d8:72:68:4c:d5:94:50:0d:4d:14:af:0e:05:21:c2:
54:68:30:1a:44:0f:ae:43:92:0c:fa:7a:b0:4d:5f:cc:57:97:
d5:86:2c:c5:9b:b6:7a:d9:b0:1e:d0:b5:0e:db:a3:e8:69:98:
56:65:a5:4b:38:03:d9:75:89:84:10:34:35:fb:86:24:74:90:
d4:da:f1:db:0a:a5:8c:4d:71:2e:e7:31:26:15:53:09:ca:6c:
09:56:62:7f:da:0a:be:68:d8:30:46:ee:c4:8f:6c:ae:75:ec:
b0:7a:d0:d3:39:4b:62:fe:02:12:d6:84:8b:13:70:34:75:b8:
61:e4:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:08 2026 by rpki-client