
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier: upQ2/Nx7AQkVUtqwfsb/CPaRNcj7F7H53/IvGJqqMU8=
Subject key identifier: AA:01:B2:6B:88:2D:AE:C3:F5:7E:5C:6B:9E:D6:FA:22:F1:3A:2D:9D
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number: 0DFE
Signing time: Wed 22 Jul 2026 18:07:07 +0000
Manifest this update: Wed 22 Jul 2026 18:07:07 +0000
Manifest next update: Wed 29 Jul 2026 18:07:07 +0000
Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: Z9Zbwqq7BpfsAIZkhF0/PMQiBjmRWVFkNysl1Vx8Tyg=)
2: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: ystXqmcXsJu+zcIezcCOloYKjrlcgYih0bHHJpAVghU=)
3: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: RuLZBRWd/+t6mmzM5XIVRxFhH72vtVTpt1H02OxGyCU=)
4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: xIQORAl53eQLWRRXQOIoiissQk7N3FpNzgw3AMp5Aho=)
5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: H2PKNA7ln5Tm1QO2PuY9P2UE8JnCTTe09zyZ/hYdcgw=)
6: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 1banGzm3MHHPGNLwGEl4a4TqEDqIBnphlYgtOeIrAtM=)
7: 938E408897E011EB8870DB29C4F9AE02.roa (hash: QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3660 (0xe4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jul 22 18:07:07 2026 GMT
Not After : Jul 29 18:07:07 2026 GMT
Subject: CN=6a6106cb-119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:ce:8f:b0:bc:ec:12:92:75:0d:96:a7:04:
e0:43:f3:19:ab:7d:5e:f7:31:d4:41:06:74:22:9a:
35:8d:a0:36:23:ee:c4:7d:69:37:1f:72:cf:37:70:
95:ca:42:59:8c:f9:3e:90:b3:98:98:d1:25:5d:d3:
f6:2d:ca:f8:c6:95:b3:fd:6f:82:c6:63:52:ba:5c:
b8:c8:ae:d5:fc:5c:7a:d2:e9:91:d9:bd:2c:37:ae:
56:a0:3e:7f:78:31:c3:d3:22:09:47:f8:0a:39:d0:
c8:3a:14:11:ba:14:a6:7e:63:e6:b3:b3:78:85:59:
d0:2c:57:da:19:3e:29:d3:3e:4d:fd:af:fc:44:09:
ae:16:c0:e4:7d:f3:59:06:b4:e2:a7:46:3c:2a:6e:
3c:0c:9f:98:75:c3:48:05:3c:66:4f:25:cc:ef:c7:
6a:c3:9b:75:4d:94:df:72:10:df:26:8d:06:01:b4:
69:3a:25:e1:30:cd:61:5e:0d:90:87:0c:be:d3:dc:
69:cf:dd:e1:d4:f3:b0:b6:84:4d:2d:29:d7:3e:59:
45:df:c6:89:25:15:fc:ce:33:4f:13:8a:56:ea:f9:
37:62:fc:a7:2a:3f:81:f5:89:55:9e:4f:d8:22:96:
0d:8c:e8:e0:23:ee:09:c0:21:15:da:c0:4f:db:60:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:B2:6B:88:2D:AE:C3:F5:7E:5C:6B:9E:D6:FA:22:F1:3A:2D:9D
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:fb:5e:ea:e6:50:36:d0:cf:27:a8:04:24:35:b4:00:39:
9d:14:d6:48:8d:9f:27:4e:df:d3:18:a8:56:68:6a:c7:44:49:
16:c9:58:32:9a:03:1b:b6:cf:b4:25:1d:d4:6e:67:17:b8:de:
17:89:f6:36:08:0a:ce:bf:88:6d:5c:71:37:a2:9c:4a:9b:8f:
24:09:fe:c3:df:76:f7:b9:c6:5c:7d:bc:90:e9:ac:52:23:14:
6a:1c:3d:b8:3a:f9:07:c4:1c:c6:a0:13:f3:12:6a:56:68:2e:
24:ae:5d:18:41:d3:5d:c4:5a:bb:fb:fa:0d:3d:c4:ac:fb:0c:
5f:73:62:e3:f5:56:f7:94:47:2e:f6:08:38:f2:ca:98:6f:ca:
7f:e5:6c:3f:9a:37:c2:43:8c:da:45:e1:b7:00:6e:87:b3:41:
c4:c4:df:0d:7e:21:f6:f4:f1:60:f7:72:ae:df:52:ab:84:97:
47:eb:b4:e7:8a:9b:76:73:b7:74:ca:6d:c1:da:ae:4b:cf:5c:
c9:96:58:6d:74:59:3d:99:0b:02:b9:f8:b9:0c:f1:60:5c:a7:
87:74:66:47:78:e5:10:44:8f:63:a2:d8:c9:6c:5f:e7:e2:86:
3e:3b:3d:a0:b8:12:b9:5f:77:23:cc:5c:85:64:d0:4e:36:99:
5f:1b:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:47 2026 by rpki-client