
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier: yo73N9iNRufiG55m8a+hzKYREszD5nUF2gtUy3jBIJ0=
Subject key identifier: A0:EE:BA:BD:E4:0D:8A:45:D7:7D:9E:5F:55:94:D7:FA:1F:03:D5:E5
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number: 01AF
Signing time: Thu 23 Jul 2026 05:30:29 +0000
Manifest this update: Thu 23 Jul 2026 05:30:29 +0000
Manifest next update: Thu 30 Jul 2026 05:30:29 +0000
Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: HoRaQ0VbgvKRY+tqlZ7JYirl9rS1aumkdznfLofB5Oo=)
2: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=)
3: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Validity
Not Before: Jul 23 05:30:29 2026 GMT
Not After : Jul 30 05:30:29 2026 GMT
Subject: CN=6a61a6f5-4f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:69:b1:cc:d1:e0:c2:56:05:5f:e0:26:79:
27:06:97:a8:0d:a9:5b:45:df:c5:4b:10:7b:4e:01:
36:09:48:75:af:6f:0b:04:2d:50:6f:1d:21:5f:48:
0a:a3:09:3f:ce:d5:40:4f:a0:cb:db:9d:97:43:1d:
90:71:0a:9c:19:1f:f3:f4:1e:0f:8c:92:01:ef:11:
d9:71:b3:20:62:b3:82:a1:fc:e6:2d:f8:97:fa:5f:
9f:42:92:eb:b8:e9:1e:65:1a:53:1f:0f:7f:9c:21:
8f:60:4d:7d:d9:a5:b8:69:04:6f:a3:59:e5:19:29:
10:fd:e1:00:92:2e:d0:1a:71:b2:fe:e5:12:18:12:
82:b6:cd:d4:11:1c:5d:c3:94:2c:a3:fd:56:47:07:
80:80:83:5a:f2:5a:af:93:d4:7e:29:62:cb:ad:9f:
aa:c2:51:09:f9:ac:af:1b:e4:0c:3b:3f:2c:5f:5f:
96:06:d6:a7:0a:67:ad:84:e9:31:f3:84:bf:5f:a3:
69:10:a1:4c:b9:49:2b:46:6b:91:db:17:77:98:53:
fe:11:b4:a0:d6:7f:91:7a:08:b5:1b:ba:22:ed:71:
c1:a3:b2:32:59:4b:2d:62:40:97:5b:fc:88:63:93:
dd:a6:e6:b1:88:db:44:3f:dd:32:67:5c:87:8d:4b:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:BA:BD:E4:0D:8A:45:D7:7D:9E:5F:55:94:D7:FA:1F:03:D5:E5
X509v3 Authority Key Identifier:
keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:d1:d7:fc:09:b1:b0:3c:c1:90:b3:f3:31:7c:cf:cf:39:
46:43:7c:d5:0b:19:8e:ec:71:93:b2:08:e3:8f:7b:2e:f0:06:
7d:c5:e4:66:33:5b:a2:25:53:33:b7:0d:7c:2c:20:bd:10:91:
4d:4d:69:17:a3:47:a6:56:d9:ba:5f:df:c9:a0:0e:72:ca:40:
22:e7:5f:e8:f6:8a:60:92:9f:e7:39:a6:25:35:f2:d7:12:b2:
92:65:bb:9e:ba:68:52:c0:38:4d:a4:d2:49:62:10:56:5a:09:
dc:3d:3a:2e:07:cb:67:d0:52:69:4f:f6:10:c9:23:1e:38:62:
b5:e1:18:25:9e:0c:d8:3f:31:96:14:ce:a1:14:1c:19:20:25:
1c:8b:ed:2c:48:b6:67:d8:02:f4:e1:18:07:ca:74:be:38:7d:
35:5b:e7:77:fe:ed:73:70:d4:4d:ec:ad:f8:5b:d1:ba:6a:87:
d2:84:dd:6e:3d:7e:d7:4e:ad:13:0b:ac:76:56:e7:14:00:a1:
b8:64:fd:3d:4a:a2:c5:3b:f0:d1:79:fb:f3:b8:51:8b:a2:2c:
31:ed:bf:da:1a:ec:7f:d8:40:79:c7:5b:94:f6:49:56:8a:7e:
fd:46:37:3b:77:22:41:c6:4c:d5:35:0f:67:36:68:84:1b:9b:
4d:32:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:02 2026 by rpki-client