
$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier: DfjJqRSvkVJjxQZKecDDe9a/K5KxESQH8fFcgP2E5js=
Subject key identifier: 2D:DB:BB:9E:59:72:C4:0F:6C:69:FD:F9:75:D0:AC:ED:96:7D:EE:3F
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial: 0B57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number: 0B4F
Signing time: Wed 22 Jul 2026 19:33:23 +0000
Manifest this update: Wed 22 Jul 2026 19:33:23 +0000
Manifest next update: Wed 29 Jul 2026 19:33:23 +0000
Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: MdwTKAU4JbmqO3SryYG44FEMMmPLBRsdvk4f4Nt2xPQ=)
2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Validity
Not Before: Jul 22 19:33:23 2026 GMT
Not After : Jul 29 19:33:23 2026 GMT
Subject: CN=6a611b03-5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:19:43:97:f5:2e:20:f3:f3:34:d0:fb:ec:
0b:50:27:53:38:28:ab:bc:6d:eb:fb:79:87:9c:ba:
76:a2:24:b9:74:9a:25:dc:44:fc:07:28:dd:8a:4f:
ae:12:22:95:ad:4f:93:db:0b:3f:5e:89:de:f4:2e:
61:fc:e7:06:29:ca:39:cc:27:1b:e7:39:50:1b:ea:
13:0c:9e:81:13:8e:c2:4c:5f:4c:c0:09:b7:51:08:
99:8d:24:86:59:96:db:22:57:f3:ff:02:f0:dd:c8:
bf:6e:aa:3d:0a:da:01:42:71:ff:0c:19:b2:cb:09:
be:4b:03:a4:56:a7:33:73:07:1c:ac:b3:62:c5:3a:
31:73:a6:73:fd:5f:01:59:9d:79:03:e0:59:ea:88:
25:cd:ec:ae:1b:75:06:7a:58:ea:8b:29:40:80:1e:
11:f9:df:8b:3d:ca:5a:c5:68:08:ec:df:a9:b9:0a:
4e:ca:a9:01:0d:dc:84:2a:62:0e:f7:c6:89:f0:ec:
d9:2d:5e:cd:e2:5e:d2:20:d0:06:f0:e0:35:1a:87:
ff:91:e3:5d:4a:7f:53:76:f5:a4:5a:7a:15:89:59:
7c:c5:bc:5e:c8:1b:54:27:96:35:d5:9f:07:99:2e:
7f:a0:a4:02:ff:6b:4a:96:1d:b6:3d:f7:5c:0a:11:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:BB:9E:59:72:C4:0F:6C:69:FD:F9:75:D0:AC:ED:96:7D:EE:3F
X509v3 Authority Key Identifier:
keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:f5:45:e8:b2:65:b3:ae:ef:8f:05:0f:42:c8:57:92:2b:
49:04:94:73:be:99:68:d2:55:6c:97:bc:6b:0d:c2:e1:4e:a8:
f7:d4:b2:27:3a:2c:da:bc:f4:8b:49:62:52:8d:59:b2:96:a1:
17:03:d6:3a:df:8b:d3:1c:0d:1b:a1:eb:00:da:4e:4a:e7:ef:
40:44:80:e6:a3:57:f7:9e:67:7c:29:6a:3b:32:26:ca:5e:72:
6b:18:58:65:f5:cd:f3:03:7d:1b:5f:03:4d:d0:45:60:c2:27:
87:a6:fb:42:ed:32:a8:be:4b:72:49:ef:7c:e1:3c:b4:dc:a1:
90:83:22:f5:3e:6d:03:ae:09:0b:43:82:5c:a9:f0:1e:1c:2b:
1b:7f:cd:49:2a:f2:98:4f:14:16:09:aa:e8:33:a6:df:cd:01:
4e:ec:2c:32:2e:63:e8:b8:aa:39:16:01:30:3a:71:3a:5a:36:
3b:58:c0:b4:af:e8:e1:64:09:d6:95:f7:53:81:32:4e:ae:a3:
96:c1:96:28:e6:72:bf:ac:01:4f:ef:96:4f:85:f1:c3:5c:fc:
a4:2e:d3:44:63:e9:58:f8:fa:25:79:4b:d4:9c:4d:22:12:1a:
01:f8:bf:23:d1:da:cb:84:9b:f1:1c:2e:fd:03:ea:52:1d:20:
4f:69:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:33 2026 by rpki-client