
$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File: dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier: zALGjHjzbmCX9VgXDAq7u2h4xazxYyUERQK1b66ln70=
Subject key identifier: 8F:8D:E9:C4:CD:33:9F:32:2A:33:65:22:48:7A:AD:24:E9:24:03:7A
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer: /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number: 84
Signing time: Thu 23 Jul 2026 09:40:39 +0000
Manifest this update: Thu 23 Jul 2026 09:40:38 +0000
Manifest next update: Thu 30 Jul 2026 09:40:38 +0000
Files and hashes: 1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: oXKaLAEd+4zSvSY9etus6fSjfr7Im7O08wZS9BW7k/A=)
2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: o1fiXCjFDXjKshZmXjJ558GbsN9d78xYw5aDtUQ+m18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Validity
Not Before: Jul 23 09:40:38 2026 GMT
Not After : Jul 30 09:40:38 2026 GMT
Subject: CN=6a61e197-d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:68:e2:77:aa:6b:b2:27:dd:74:91:37:1f:
66:f3:3e:6e:25:48:a2:3b:74:52:b0:d1:91:fb:44:
d5:d3:1b:e6:4f:10:ec:20:97:fd:e1:d9:02:54:34:
ad:3c:03:8a:8e:36:65:24:c0:e8:a6:4e:24:92:2b:
17:6f:de:35:1a:90:a3:a6:15:8c:db:f4:34:b7:cf:
0a:02:fd:20:2c:f5:62:91:6e:c2:46:4b:df:86:2f:
fe:95:29:89:79:70:bf:10:17:5a:c8:82:16:a8:d3:
1c:ed:c7:f2:97:70:b2:aa:ad:cd:4e:3e:b5:1b:6e:
6f:16:31:ec:4c:59:c2:5a:04:74:e6:6c:37:e1:f7:
9f:38:93:03:95:4b:80:b9:7c:24:02:be:e4:c9:90:
f6:96:09:f8:ab:ce:9a:35:87:a2:a3:39:65:57:dc:
81:f3:f0:be:6c:0c:8c:ae:17:e8:55:ce:d0:0e:c5:
14:c1:5b:b4:04:04:ce:fa:cc:12:c1:cb:c9:78:91:
8c:6f:5d:34:46:b7:4f:91:de:ac:f2:1b:9c:9f:e8:
96:76:fd:ac:a0:a5:3e:c2:55:16:9d:26:f8:0d:11:
41:18:e5:fd:b6:26:2a:1e:01:51:db:2f:3d:e0:a1:
20:de:99:b6:b7:d4:72:8e:b3:05:f8:d5:90:58:0e:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:E9:C4:CD:33:9F:32:2A:33:65:22:48:7A:AD:24:E9:24:03:7A
X509v3 Authority Key Identifier:
keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:d7:34:1f:ad:bf:f1:6d:b4:06:62:b3:9a:fd:9d:4d:8f:
83:ff:2a:c7:52:bc:d0:3f:19:39:91:9e:7d:51:3c:d1:06:70:
a4:8f:b4:d0:5b:15:2f:a8:7f:82:53:69:3c:d1:6c:19:e3:43:
cf:3b:f8:a2:36:4b:bb:7f:94:00:a9:94:06:04:b2:30:d6:12:
02:d5:95:04:b4:3c:96:6e:e0:dd:5a:c2:bb:b7:18:15:d3:c6:
af:45:d1:f6:9a:b2:ca:36:8e:64:46:59:90:30:df:f9:44:d8:
01:de:0b:60:3a:ac:6f:da:15:96:4a:a2:65:19:4e:ad:5b:b3:
dd:b3:3e:a5:b0:4d:47:e9:c1:4b:ab:a6:2d:c2:2f:c9:a6:2e:
81:a1:dd:5b:97:b9:b5:52:7b:8f:af:52:ba:f7:a8:ee:72:ef:
51:89:5a:94:c6:05:54:e7:b5:50:0c:7f:18:86:50:10:6c:ff:
af:cf:79:09:24:c1:46:ac:8b:3b:66:14:d3:d0:5a:06:73:5e:
07:94:db:e6:05:cd:59:c3:d0:bb:1c:68:43:cc:e1:8b:0b:fb:
63:17:c0:79:53:c5:31:6b:80:4d:ae:5d:58:17:9d:d9:a9:7f:
be:64:37:31:7f:1f:09:74:e8:22:af:a6:71:d0:9a:45:52:10:
9d:fd:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:17 2026 by rpki-client