
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier: 2ZQYboZloJRnGbO3hwDp4YOF+4dGFAKsxPJ0fusW6qU=
Subject key identifier: AE:0E:BD:33:64:E0:46:2F:A9:8F:25:03:33:70:26:45:98:15:45:D5
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number: 66
Signing time: Thu 23 Jul 2026 10:14:13 +0000
Manifest this update: Thu 23 Jul 2026 10:14:12 +0000
Manifest next update: Thu 30 Jul 2026 10:14:12 +0000
Files and hashes: 1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: p2OIu5IocPp6aye2g+vIhGVoEeQRHFKK4YJ4ag0WW1g=)
2: 9DA60E087F3311F19D56764D8FA30FBC.roa (hash: Rt7PW/6uZ7cjq9gkzwDvAa35BI5KobAOVV29frmx7Uo=)
3: zIMBcS1h5k28JbgzmDO5wNcLsFw.asa (hash: A/o2qus8suyWDW6SSANxsLf7P5fJxtS5SMGCcpBavQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Validity
Not Before: Jul 23 10:14:12 2026 GMT
Not After : Jul 30 10:14:12 2026 GMT
Subject: CN=6a61e974-19cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:a1:03:f5:ed:2a:f4:94:d1:dc:df:6a:0d:
bc:05:cf:2a:2e:cb:37:04:87:e9:0d:58:7d:be:a4:
f8:01:b8:9b:67:df:9f:95:2b:3f:28:e0:6b:e5:96:
8a:a7:4a:8c:1b:8d:82:0a:3c:ec:c1:7d:e4:65:5d:
ae:57:14:a4:e5:c1:08:8c:a7:3d:99:44:e6:fb:94:
69:57:46:f2:3b:2f:b6:6d:f4:88:d9:06:c7:e8:3f:
4e:55:69:c1:54:ad:09:1c:47:c0:8f:4a:50:6a:99:
ff:5d:dd:61:eb:70:56:63:31:93:f0:c7:e2:a6:58:
0d:c5:9f:43:14:1c:b7:ac:d0:c7:56:14:6c:35:11:
9a:78:87:05:f2:43:71:c4:d1:d1:a6:79:9d:b7:bb:
a7:9e:1f:f4:25:2e:4e:57:a5:e7:23:2f:4f:b5:65:
7b:0e:88:f1:d8:a8:93:ac:86:1f:01:88:7a:ea:9d:
b6:fb:c7:e0:f2:8d:02:25:b0:ed:8c:31:35:d5:16:
4f:96:7e:eb:d7:49:fa:b8:36:a2:f1:54:bb:4e:2a:
e3:c6:4c:3c:d3:be:c5:68:cc:1f:4e:f0:37:30:25:
ee:26:9c:9b:a1:bb:68:36:76:d3:0d:fb:20:36:42:
cc:3a:75:9c:ae:68:a0:04:64:6d:30:57:33:ea:80:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:BD:33:64:E0:46:2F:A9:8F:25:03:33:70:26:45:98:15:45:D5
X509v3 Authority Key Identifier:
keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d7:68:bb:71:e4:d4:e4:37:b9:cc:11:6c:47:5d:b3:55:73:
ee:f8:b2:b9:38:ac:24:44:a7:39:46:7b:46:f5:c9:3f:fe:24:
ac:2a:5e:c2:85:7f:0a:55:a3:f6:c0:66:af:c1:84:b8:87:85:
f5:1b:20:9a:3b:d0:54:df:8a:f9:8b:49:3f:4d:fe:9e:59:08:
36:b7:fc:8c:32:bd:60:2e:42:4e:13:6f:a4:2b:33:c1:16:9b:
c9:44:be:aa:e1:7d:1b:ed:ca:d4:02:53:ee:c2:03:18:dc:61:
17:38:58:a6:0c:38:eb:b0:94:aa:99:76:08:bd:bb:27:f0:96:
b6:c6:9d:ba:e1:97:f4:3a:51:0a:d9:af:5b:b0:6f:76:c4:f0:
21:6e:0d:9f:64:53:3d:0e:70:31:36:d9:71:5c:24:16:c2:94:
cc:4a:04:ba:18:ee:02:d9:35:f8:ee:2f:b7:36:fa:cd:2b:82:
4d:82:31:73:fc:03:db:99:b7:da:b5:c4:e8:dd:ea:b7:d8:3c:
f6:c9:78:b0:4a:dc:25:8a:20:a7:f6:dd:f8:9e:01:b0:0a:47:
a8:9c:bb:06:52:73:91:77:42:2a:15:d6:80:b2:f5:5d:f1:a7:
ec:b3:6c:50:78:37:56:1a:e4:36:a0:52:cb:57:86:51:20:a9:
9c:43:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:00 2026 by rpki-client