
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: nhwDHO3JKcHAAZxZXZjh94TE5dvJwSYOfxXAwbSroDk=
Subject key identifier: D9:12:B6:35:0A:71:AC:24:C0:B3:2E:D7:1D:9C:75:CD:CA:54:B9:38
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 0155
Signing time: Thu 23 Jul 2026 06:47:02 +0000
Manifest this update: Thu 23 Jul 2026 06:47:01 +0000
Manifest next update: Thu 30 Jul 2026 06:47:01 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: an3dvn67zU8q/oIA4JofTTBrDm/zZoFhr07yxgbMAe0=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Jul 23 06:47:01 2026 GMT
Not After : Jul 30 06:47:01 2026 GMT
Subject: CN=6a61b8e6-122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:96:7d:f8:c2:44:f3:e6:28:8a:79:8e:72:
11:16:21:8d:51:c6:36:1c:9c:be:42:16:19:6e:da:
dd:e0:d2:36:a7:39:a0:de:54:a5:a7:73:21:47:35:
72:04:70:67:ea:88:1b:0f:cb:d5:43:72:b7:b7:d6:
62:73:98:af:c4:4a:33:67:60:9a:51:d4:d4:35:7c:
19:fd:59:1f:46:01:1d:df:52:9c:12:ba:d8:be:11:
cf:18:79:c2:00:4d:15:34:10:c0:43:52:78:a3:f9:
78:6c:c7:fe:b6:3b:de:49:d1:e7:24:f1:ff:4c:73:
1d:80:b4:34:19:34:05:f7:f1:43:ec:e9:cc:2f:e5:
14:e6:ec:a9:a8:08:2b:53:fa:4c:91:f2:f8:a8:3a:
c8:49:94:38:b8:6e:c2:1d:84:13:89:e4:c9:0e:da:
53:50:8a:06:3c:1b:40:3b:9b:32:f4:9e:49:8b:dc:
52:45:dd:36:b2:9c:d7:7d:dc:65:65:94:fb:bd:91:
fd:39:e8:85:13:6d:94:92:07:57:38:25:19:02:7c:
2e:7f:f7:6c:e3:cc:0c:99:9d:69:07:8f:8d:38:ac:
96:cd:47:f2:b2:f5:4c:30:a1:ad:c9:79:07:fd:7b:
64:dd:12:7e:22:d8:ee:54:0e:25:fa:d4:97:73:fc:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:B6:35:0A:71:AC:24:C0:B3:2E:D7:1D:9C:75:CD:CA:54:B9:38
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:e6:c2:af:d0:90:dc:09:1c:5d:91:7d:d2:3c:5e:00:9f:
cb:04:d5:26:40:a2:12:53:2a:8c:1d:dc:a7:ff:a6:55:bc:36:
86:d5:49:97:cf:eb:39:06:60:11:38:3b:d7:f5:b0:33:32:d3:
fd:7f:21:aa:b7:24:53:c8:4a:d3:6a:e4:7b:04:ae:d1:10:69:
5a:d0:34:df:cc:31:64:89:87:91:b0:fc:88:12:af:7c:f1:4f:
cb:a9:13:e5:14:bf:e3:af:c3:cf:fb:7a:ec:e6:24:e5:5b:39:
49:f9:36:f8:81:fc:ba:ec:0f:1e:6e:3f:0d:17:17:2e:f0:01:
62:55:b4:f6:3b:b0:f6:c1:14:66:26:db:37:bd:9d:8a:ec:88:
b7:61:0d:0e:0e:a0:a0:49:7c:9b:95:aa:f2:bc:7c:4d:e2:b0:
68:ef:05:7b:04:03:75:a4:98:4c:2a:5a:fd:a4:82:8b:f9:75:
50:75:9b:c6:e5:85:1c:9c:2a:0b:62:0b:15:33:1d:dd:34:9b:
f8:95:a5:90:6a:2d:79:04:fa:bc:a7:89:f4:fd:f6:19:e2:bb:
a2:cb:78:a9:48:6a:5b:a5:5f:38:4e:59:21:c8:3f:d0:40:9a:
e8:3c:b9:3a:a7:c7:84:76:78:6a:70:4d:54:f7:ea:93:33:cd:
d7:fc:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:21 2026 by rpki-client