
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json)
Hash identifier: tvMTzGcLqzBZJk5mfVxhrA89HnHYKjwfqWWAnJplGKM=
Subject key identifier: 30:4B:92:84:DC:6E:45:42:36:5C:F4:E8:D4:1A:50:6C:36:54:BF:8A
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
Manifest number: 0279
Signing time: Thu 23 Jul 2026 03:12:18 +0000
Manifest this update: Thu 23 Jul 2026 03:12:17 +0000
Manifest next update: Thu 30 Jul 2026 03:12:17 +0000
Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: WsGKLmINPRDEQK600l/XZkWmdGYLa8FNuKfzkBC2nZo=)
2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Validity
Not Before: Jul 23 03:12:17 2026 GMT
Not After : Jul 30 03:12:17 2026 GMT
Subject: CN=6a618692-c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:ac:49:99:b8:f4:43:a0:25:2f:a8:59:2a:
f0:ff:76:06:24:d9:e5:0c:95:e9:9b:6b:e7:ca:1f:
e9:15:73:90:8a:30:d7:fb:cf:2c:1c:fb:e0:f4:d7:
bf:ec:5d:6e:e4:8f:c0:fd:2f:90:64:cc:d7:24:b0:
09:cb:d6:72:09:d4:a8:f5:11:87:ae:34:10:4a:9d:
4b:c4:ed:d6:f9:fa:6f:3a:72:d4:f0:8b:83:79:6e:
d0:94:30:2f:8f:7b:75:fb:2b:c8:37:62:e1:ae:a4:
60:a3:94:3d:21:f8:3d:17:e4:e1:8f:da:a5:fb:ae:
24:a8:a8:81:91:69:08:19:50:39:8b:7f:bd:e4:5d:
16:8e:37:32:92:dc:2c:e1:aa:d0:ee:cf:5d:1d:cf:
37:43:5d:84:e3:66:92:e2:1b:8a:e4:39:94:6d:b8:
67:ae:bf:db:0b:30:30:19:4c:91:48:72:0e:14:7a:
67:94:4e:c0:2c:4b:59:c3:d4:11:e1:e0:00:58:a8:
18:09:0f:42:07:bb:2c:19:f1:9d:5d:5c:55:30:f8:
84:88:bf:27:2b:d8:a2:6f:e8:9d:18:d9:a4:a7:14:
08:fe:e6:a0:20:46:db:4a:3a:73:55:45:6c:05:df:
9f:d6:5c:54:bc:1f:d8:5c:72:23:8a:c6:52:40:69:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:92:84:DC:6E:45:42:36:5C:F4:E8:D4:1A:50:6C:36:54:BF:8A
X509v3 Authority Key Identifier:
keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:9c:ab:33:d3:58:4c:a2:41:1a:f7:b4:d4:20:ab:c5:06:
cb:d6:e9:a1:39:92:72:74:b7:75:dc:e8:10:19:23:13:f5:e6:
6b:8e:88:b1:e7:7a:fc:5a:f7:1e:22:50:b0:e3:67:ac:30:cf:
61:c5:7c:1d:f0:38:94:7d:6f:7c:f4:d8:50:f8:99:7a:80:14:
74:df:29:f8:19:d6:f1:d4:ed:5a:5e:5b:90:02:01:9f:36:50:
e0:4b:b5:d3:e3:85:51:bc:65:e9:e5:60:b0:86:4e:33:0e:94:
05:a1:f7:95:6c:8b:d9:a3:33:7c:01:f5:3b:a2:86:0f:61:ba:
7c:35:c4:ab:29:78:36:41:3d:92:1a:03:77:d6:25:9e:34:a7:
f5:12:5c:45:83:be:d7:ea:68:cb:01:aa:c4:ee:73:14:a2:f5:
d5:dc:90:65:3f:13:ed:3b:bb:5a:c7:17:b8:59:94:8a:03:9b:
fa:bd:9a:8c:84:21:69:4a:22:28:db:06:4b:f5:a4:ce:86:03:
29:5c:9e:57:d7:0b:e1:10:7e:dd:b9:35:4a:e9:fb:8f:2c:40:
e3:4b:21:76:ed:14:72:2f:ee:9a:a6:7f:30:f0:2b:8d:e4:ba:
54:bd:97:65:00:0f:b2:68:a2:69:84:97:6f:d1:dd:58:2f:f2:
37:24:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:44 2026 by rpki-client