
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier: +kICYmF/vXcKbIos/hQc5EAtCPs1SepP9vRndpAj5bs=
Subject key identifier: 3E:87:6B:99:50:5B:BD:85:27:0F:C7:28:73:9C:17:88:6B:7B:5C:F8
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0D4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number: 0D3D
Signing time: Fri 24 Jul 2026 18:23:39 +0000
Manifest this update: Fri 24 Jul 2026 18:23:39 +0000
Manifest next update: Fri 31 Jul 2026 18:23:39 +0000
Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: H3/hBw1Prw76gsaNC1/pb0eXMwq9eB35dzKC4WWU4C0=)
2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Jul 24 18:23:39 2026 GMT
Not After : Jul 31 18:23:39 2026 GMT
Subject: CN=6a63adab-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:bf:29:15:57:0a:16:49:d3:71:f9:76:6c:
27:0b:a2:1a:b8:82:8d:86:db:31:63:12:77:f4:60:
0f:44:26:6e:08:e2:8d:ef:d2:34:62:1a:fb:c3:5d:
6a:b0:28:41:33:41:07:50:34:0f:d1:5f:57:1a:d0:
47:9e:f2:58:31:8e:ec:3a:d6:bd:4e:82:1a:c1:d1:
c9:3d:9f:24:28:8d:83:b9:6d:6d:1f:31:6b:8e:a9:
1a:15:d8:04:a6:b4:e3:b7:38:8b:2b:75:3c:29:dd:
f3:b9:a4:ea:7f:31:25:c6:c9:50:ef:e2:8e:72:9a:
7d:3b:0f:b8:3b:b0:aa:db:f7:d0:fc:87:80:04:42:
4c:92:f9:76:31:74:53:64:46:6c:14:af:20:63:05:
fe:2e:a9:7d:18:86:83:ec:8a:cb:98:10:59:a1:01:
95:cf:45:48:dc:b3:cd:15:c3:d8:0a:82:d8:95:54:
cd:14:aa:c5:0e:9b:eb:85:5d:f9:38:69:f6:ac:2e:
7e:ae:99:e2:cb:2f:9a:87:cf:40:20:76:f4:f9:67:
54:7a:5f:78:61:c2:d5:f8:c5:5d:e1:28:c0:0f:ab:
71:81:96:9f:0b:60:f3:f9:bb:26:6f:8f:fc:22:1c:
87:d2:e0:d5:cf:08:61:d3:30:e9:83:c9:5d:d7:03:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:6B:99:50:5B:BD:85:27:0F:C7:28:73:9C:17:88:6B:7B:5C:F8
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ef:62:3d:34:b5:47:93:62:dd:d4:dd:ec:56:d7:a9:07:65:
06:04:d4:84:6d:ec:56:d6:08:7b:ed:d4:a5:5d:16:fa:12:e8:
dc:3c:2f:35:c5:7a:0d:47:ce:08:a7:ca:5a:a2:79:b9:ee:8b:
dd:4d:b6:49:3a:50:a0:30:18:06:25:b3:05:64:1d:c5:a6:3f:
3d:cb:5f:a7:a7:5b:f1:dd:ed:ba:af:0e:02:92:f6:20:1c:d7:
e0:6e:d0:2e:9b:4e:a0:9a:e3:e9:4b:9a:e7:37:86:1e:35:6d:
d6:e7:58:8a:0f:23:75:a4:a6:b4:ca:69:28:43:76:0d:0a:d4:
b8:58:ce:ab:de:6e:a2:bd:29:9f:71:8a:36:f6:8e:be:3c:e3:
63:53:d0:39:34:0c:49:c4:c1:b2:54:c9:2a:43:c9:09:72:e9:
1c:4b:1f:fe:c1:03:4f:ed:a4:80:eb:64:04:b5:41:7f:11:96:
2f:2c:56:c5:05:b6:ea:16:cf:9d:4e:d8:ef:2f:f0:85:bb:30:
df:d0:ff:40:56:ab:6e:c9:4e:58:5c:96:87:36:1f:b7:06:07:
36:62:24:8a:2c:12:09:61:69:0c:df:6a:9f:57:ac:cd:fe:4a:
c1:95:df:9f:4b:fc:14:5e:db:37:56:57:33:99:62:88:5b:ea:
56:ad:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:34:06 2026 by rpki-client