
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json)
Hash identifier: 0UN3Rhu7Lne4Qt85QVUgcwRKFRhDE2zIblsrqdIwDeI=
Subject key identifier: A2:21:70:A0:77:8D:20:A5:30:A0:35:D8:C7:D5:5A:DB:15:9F:1B:D0
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
Manifest number: 2B
Signing time: Thu 23 Jul 2026 11:35:44 +0000
Manifest this update: Thu 23 Jul 2026 11:35:43 +0000
Manifest next update: Thu 30 Jul 2026 11:35:43 +0000
Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: jdV4Y+tMxy5jgws1HvlBSvqiIgUKx6PoyC1iiAk/RYk=)
2: A6F2C5C2491F11F193C776FB9E833773.roa (hash: TIPSpd8GDTa/HiS4PdTYKDX+P5DkBR89f8e9l36/XBU=)
3: A66886B4491F11F193C776FB9E833773.roa (hash: xXcNcDHlNzFBW5kniWXaJCDFIU93zgQzDwb/xuMFxAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: Jul 23 11:35:43 2026 GMT
Not After : Jul 30 11:35:43 2026 GMT
Subject: CN=6a61fc90-5f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:60:22:0a:3a:e0:7f:9d:f9:93:5f:65:1d:
08:52:83:7c:3f:83:ec:55:62:65:f3:89:3e:63:57:
18:d2:b6:c6:e6:cb:95:53:ab:0c:3b:ef:82:4e:07:
ea:65:ff:ec:20:fb:41:64:c8:86:d5:ff:93:3b:32:
88:95:f4:c5:e2:dc:dc:c4:1e:d9:90:cf:43:ff:08:
64:50:09:03:05:f9:ef:21:4c:43:ef:5b:3c:43:e9:
f5:b9:2d:9e:ef:9b:98:67:a7:cb:31:82:6a:4b:80:
4a:8d:69:63:1a:2d:69:80:9e:58:64:e6:ea:14:29:
0c:a0:44:2b:bd:22:db:4c:ec:95:e9:d1:61:59:37:
8a:69:26:aa:92:59:13:ba:e7:06:4b:33:58:eb:46:
fb:9f:83:8f:7f:ac:b3:67:76:13:b2:b6:51:64:c2:
cb:13:0a:87:92:59:20:b6:93:7d:5a:1d:47:05:84:
82:aa:7d:97:e0:7b:5a:85:dc:f9:63:35:8a:3a:76:
66:0a:c1:f0:90:13:5b:9f:57:f8:f2:c0:9e:a2:64:
f6:da:4e:e2:53:88:0a:da:7e:e2:4f:9a:bc:b9:46:
95:1b:2a:c4:18:01:8b:14:72:e5:d5:2d:11:41:16:
b4:fc:a4:d7:7a:36:7f:1d:5c:4c:22:05:c1:39:4f:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:70:A0:77:8D:20:A5:30:A0:35:D8:C7:D5:5A:DB:15:9F:1B:D0
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:a5:66:8b:45:11:ff:46:f4:b1:21:67:78:7a:91:a8:59:
e6:0a:66:a8:9f:b0:ee:d5:ba:38:53:68:42:43:b2:26:ee:4f:
f2:a4:b9:dc:dd:0b:b3:dd:7a:f4:d9:27:d1:a3:79:28:1d:bf:
f8:92:c1:cf:fb:0e:a1:fb:f3:d1:73:77:8b:e0:bf:8d:16:7a:
95:41:d0:c2:71:67:18:d0:b8:75:c8:3b:bb:2f:82:b6:c1:27:
47:73:c8:ef:33:5c:07:a0:b2:b3:ef:7c:44:79:f6:7b:ed:1b:
84:8d:17:b6:a6:25:60:41:4b:d0:7f:2d:a2:c7:3f:95:76:ed:
9b:b4:b2:5e:5e:91:6c:0e:41:f4:fd:73:46:af:f5:3e:55:11:
27:57:c1:93:13:32:6a:8f:03:5f:9a:23:e1:13:58:c8:f7:3c:
ae:56:17:0d:93:7c:d2:65:31:b2:79:fb:13:cf:2c:d0:c8:eb:
25:77:c3:5a:6e:4f:29:00:2e:cd:e7:d3:58:1b:09:a0:e8:3b:
1d:34:96:be:26:83:a3:88:23:44:68:d6:b8:20:ca:57:1e:2a:
14:2a:cb:a8:93:bd:f6:60:26:01:b8:65:f8:4e:10:27:ca:1d:
ab:d9:73:f8:9a:db:07:81:20:12:d1:11:08:1c:4b:71:13:7d:
3c:ee:1a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:59 2026 by rpki-client