
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier: qoy4PJV8VwufVsKFNVON2/NGPQResbXJC1TtyhIcP/c=
Subject key identifier: C3:C8:40:92:D0:85:AE:C6:FF:1B:D2:6D:D8:4B:56:49:85:D9:E2:2B
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number: 016D
Signing time: Thu 23 Jul 2026 06:18:00 +0000
Manifest this update: Thu 23 Jul 2026 06:17:59 +0000
Manifest next update: Thu 30 Jul 2026 06:17:59 +0000
Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: ITwDfKUMGxH2/aQWZk+gKDUyhu47uXTNjwEdigHG3zg=)
2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=)
3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Validity
Not Before: Jul 23 06:17:59 2026 GMT
Not After : Jul 30 06:17:59 2026 GMT
Subject: CN=6a61b218-a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:9b:60:14:f5:bd:71:63:8e:0c:7b:dc:66:
75:f6:c2:70:50:95:40:4e:33:36:92:0e:01:7c:eb:
8d:27:3b:34:d8:fc:83:89:58:4c:ef:d9:27:6b:19:
ed:4a:0c:a0:34:f6:9b:14:37:b6:d9:fd:79:51:5d:
fc:fa:c0:d6:9e:74:76:3e:94:b5:d9:e4:c3:2d:0a:
4b:ab:79:19:d0:95:a1:ce:c2:32:e7:bb:93:0a:54:
a4:34:c7:97:c2:95:71:f2:f9:43:5a:d4:a6:c9:d7:
26:17:06:9a:93:1f:ae:54:d6:46:78:95:5f:ae:3b:
e3:56:71:a1:33:da:42:8b:05:40:05:de:16:df:ff:
9e:74:77:31:d6:9e:fe:c5:8d:10:9e:14:5f:e7:5b:
ff:fb:c1:02:14:97:1b:67:37:6e:53:3a:eb:f9:3e:
c3:99:16:fb:25:ea:44:cc:5d:e0:e6:8e:70:5d:e0:
bc:0d:18:d6:7c:c9:cf:26:a1:e9:07:d0:fc:21:39:
29:72:88:9e:91:db:a3:0c:62:ef:9e:99:8a:70:c7:
5c:c1:17:4d:4f:96:26:2f:4e:d0:c0:2a:6b:78:45:
ab:cb:9a:f2:e0:24:89:70:2a:c5:e2:ff:8b:87:48:
b5:23:84:5a:c2:6c:d2:04:9d:8d:b8:8c:f4:b1:45:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:40:92:D0:85:AE:C6:FF:1B:D2:6D:D8:4B:56:49:85:D9:E2:2B
X509v3 Authority Key Identifier:
keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:8c:72:6a:cb:aa:51:77:13:0c:05:56:ef:9d:6f:4c:22:
06:3e:6b:07:b3:96:96:7c:be:81:7c:af:83:cb:d3:e9:a1:c7:
b6:37:89:13:ce:50:be:89:4f:58:6f:55:10:3a:35:a5:ea:bd:
15:b8:cb:5e:8c:53:f0:64:5a:62:29:86:95:4c:a2:e3:05:68:
60:24:98:68:e6:22:4a:5a:4b:3e:86:54:1b:59:81:b0:ea:71:
ce:64:76:69:41:0b:e2:ea:18:6a:34:27:d0:c1:a2:8d:3f:7e:
4e:36:af:b7:5c:94:7e:98:b9:b2:bf:89:38:42:78:0f:fa:71:
69:50:c6:b1:47:62:a6:39:0d:f3:ae:df:a7:6f:27:f2:1c:e5:
f8:1f:9d:81:c4:8e:bd:31:7c:a1:58:d8:7b:56:17:15:93:6d:
24:e8:a0:0f:0b:7a:c3:e1:64:0d:68:f2:96:18:9a:05:68:ba:
02:20:8b:db:19:5a:e1:ac:5c:12:a2:8f:e4:ff:60:a1:19:be:
e5:64:47:ac:c0:e0:fa:5e:b0:4f:4a:af:b5:91:75:b4:42:e6:
40:4b:ae:c9:37:71:7c:16:67:3d:98:e6:c2:ea:e5:d6:b9:6c:
57:74:af:c4:91:d1:00:02:6e:49:37:11:a5:3d:6b:1d:85:c3:
d5:cf:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:30 2026 by rpki-client