
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier: 6LLhF4IihifoQiy+N2dqKTUY7eQ2W1FFVgbcSMj6isI=
Subject key identifier: D2:ED:FC:90:E8:0C:70:00:26:66:78:A1:B4:8F:D9:8F:E4:81:9C:75
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 23A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number: 2320
Signing time: Wed 22 Jul 2026 15:55:18 +0000
Manifest this update: Wed 22 Jul 2026 15:55:18 +0000
Manifest next update: Wed 29 Jul 2026 15:55:18 +0000
Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: jHcV+Gjq2AdjbEEaSUBWlqc22hxYhM0AvHK8mcgheFo=)
2: 007F2494585411F192FCAD7CB9833773.roa (hash: xHSN/5VXM9FybISBlJ/UROWiMLQHMMCa7pw46pb3EWg=)
3: B77C6462487411F1984AD6F3A8833773.roa (hash: RddRSM+tZhwgqkgFCGkOz9Gfn0He2cvwXMCg9NReMjo=)
4: A44814E8EF8411F087F172675F6F56BC.roa (hash: FAPPLKPyuVPEstzxKhq8xMCTFyCQPBtS0uf8CxBtLms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9121 (0x23a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jul 22 15:55:18 2026 GMT
Not After : Jul 29 15:55:18 2026 GMT
Subject: CN=6a60e7e6-a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:41:0f:d7:00:7a:b5:95:57:46:32:c1:20:
47:ac:f2:2f:6f:1f:25:ff:d6:63:d2:62:3d:bb:24:
8e:6c:19:97:3f:2c:e3:15:5e:cf:e0:9b:49:84:bb:
08:ab:2c:19:cb:31:88:df:79:65:8e:22:69:7a:6e:
06:ac:dc:dc:57:f6:5d:ba:d9:f6:3f:46:78:f2:51:
e2:87:7f:94:23:b9:02:e8:83:fa:ca:08:a6:d3:b8:
3b:92:6f:96:6e:93:1c:24:11:f7:82:b4:b4:4f:87:
be:c2:38:d7:d8:2a:39:be:f1:2b:a9:56:48:f6:35:
3f:34:01:7d:ba:79:66:33:44:90:47:b7:b2:84:ad:
b0:0b:d9:8b:8d:88:02:31:02:0e:e5:73:3c:bf:c1:
38:83:38:4d:68:90:cb:e4:f9:5b:f7:41:7f:af:eb:
77:ec:4b:09:07:78:f8:e4:99:66:00:42:15:7e:37:
04:f8:b6:3c:1d:5b:e0:1f:da:7a:2f:6d:7f:a5:2c:
15:3d:8a:7d:0d:61:b3:50:7b:1c:fa:2a:e0:6e:39:
b9:51:df:5a:02:39:37:9c:85:86:30:e1:a8:74:bd:
23:e4:af:84:5e:d9:f1:ed:0e:08:96:e7:7a:6d:7d:
44:1e:e5:4c:d5:d8:33:dc:c5:58:f6:23:16:a0:91:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:FC:90:E8:0C:70:00:26:66:78:A1:B4:8F:D9:8F:E4:81:9C:75
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:42:63:72:ed:60:af:a4:02:6a:57:1b:9f:c9:67:f8:eb:0e:
f2:81:78:e6:db:17:36:aa:4a:26:b4:91:65:07:7d:de:af:5a:
11:9b:5d:66:62:89:bb:91:e2:02:8b:3b:7c:41:be:5d:34:5c:
3f:01:04:e1:94:bd:06:e3:26:69:c7:dc:4c:e3:10:f1:9a:a2:
ff:df:6c:c7:ef:b6:9d:52:29:7b:ad:32:19:2d:ed:65:18:e6:
68:66:3f:30:7a:71:05:01:e2:e1:75:08:4b:60:3d:9f:7e:0d:
ef:d9:88:be:49:5b:11:63:77:e4:d0:34:8e:fa:85:06:f7:6d:
ba:3b:60:e7:1b:2c:69:ff:17:97:01:d6:96:f5:1f:85:37:c8:
d0:81:24:12:a1:21:be:89:68:d5:85:ce:da:4a:b7:19:c2:f2:
ad:bf:c4:35:7c:86:9e:8f:c1:6f:84:d7:f1:28:8f:e1:85:47:
44:73:f3:0a:e2:20:e1:41:2e:b4:8b:2d:66:80:63:90:db:4b:
71:42:04:d2:ff:b6:ba:49:18:83:1b:f9:d3:29:7f:38:1c:b0:
3d:0c:42:9b:ac:16:27:1c:c8:2b:6c:c2:43:15:2e:8e:ca:bd:
69:a8:e4:ae:22:f8:91:30:c5:3b:f8:26:e4:ac:5c:09:00:37:
5b:bb:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:27 2026 by rpki-client