
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json)
Hash identifier: FR4U+V2hDrdEdwqqlaVjzRwoBKMJtS71l5TikqRX7ro=
Subject key identifier: 1D:88:2F:D8:DD:CB:19:3D:46:4D:91:70:63:16:D7:42:65:2B:45:B4
Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Certificate serial: 0A6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
Manifest number: 0A61
Signing time: Wed 22 Jul 2026 20:03:44 +0000
Manifest this update: Wed 22 Jul 2026 20:03:44 +0000
Manifest next update: Wed 29 Jul 2026 20:03:44 +0000
Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: v4S/If+hHWH7JZxAKqZcpSbJfuFw6EDJyPDfbx3X6zI=)
2: C07738FE9F4511EB88EBCA76C4F9AE02.roa (hash: AksdzM4PbXGL/XcGvbH1UmcYB82GNXMH4wOGUwrHV60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Validity
Not Before: Jul 22 20:03:44 2026 GMT
Not After : Jul 29 20:03:44 2026 GMT
Subject: CN=6a612220-92c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:d4:2d:e9:95:a9:90:41:da:77:6f:51:36:
4d:3b:7e:05:05:99:1c:2e:fa:31:20:77:ae:0d:c2:
02:29:df:f7:47:c1:56:57:7f:f2:b0:29:a3:1c:c8:
6e:f6:fc:4d:64:8b:17:db:c6:38:b6:39:2d:94:c4:
d4:e7:08:90:be:6e:ad:dd:67:97:0c:58:84:b7:82:
3b:8d:ef:91:32:ae:fc:71:02:64:7b:77:b7:ac:92:
c1:99:4f:14:8e:a8:a2:cd:cf:be:5e:29:4d:77:45:
05:1e:31:10:ab:d2:b8:01:15:ac:1c:f5:15:cb:99:
1a:16:56:b8:4a:38:3b:7a:7d:03:f1:01:da:cf:1e:
5d:71:c0:ae:ff:7d:c2:10:9d:0d:9c:3c:8f:eb:fa:
ad:cf:f3:d4:c0:ef:a7:a6:99:d5:ca:98:ab:92:14:
e4:ca:b3:50:46:a0:0e:3d:27:56:1a:01:1f:7c:6d:
f8:64:89:9e:18:3b:58:76:26:65:49:91:cf:20:65:
61:e5:f3:c0:e2:bc:fe:c4:40:e9:3e:c1:c6:08:d2:
a6:66:ae:a2:13:95:03:15:28:dc:ad:67:6c:a2:5c:
fa:b8:98:95:63:f5:9a:6e:cd:11:74:c6:f3:79:a5:
09:a6:58:7a:e4:d1:8f:c2:c1:9c:6d:89:dc:23:37:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:2F:D8:DD:CB:19:3D:46:4D:91:70:63:16:D7:42:65:2B:45:B4
X509v3 Authority Key Identifier:
keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:6e:e7:14:69:20:96:14:ba:b9:1b:65:92:57:39:79:21:fa:
b5:f4:9e:77:ff:f3:59:6e:9e:72:27:9f:85:bc:dc:97:58:c3:
95:a6:53:48:81:38:83:d9:3a:8d:d6:a4:e0:6c:ef:d4:fe:de:
9c:ff:3b:1d:49:52:10:6f:56:db:6f:b5:52:50:21:6e:07:a1:
eb:16:11:94:96:10:f5:16:a0:9a:13:1c:f3:ed:c0:71:cc:58:
89:84:d1:64:3d:65:d0:05:2d:0a:aa:1c:a3:94:bf:cb:a6:5a:
83:d3:c6:56:60:1a:e0:45:09:35:c0:11:bd:85:cd:ad:a9:fb:
0d:97:06:52:10:bc:3e:47:ab:1d:2d:25:e8:39:4e:f7:05:b5:
11:fa:2b:fb:87:66:a1:ea:e7:0b:29:08:76:a0:83:e2:83:78:
04:db:71:c8:39:c5:57:b3:78:33:12:3e:06:4b:70:19:f5:9b:
39:14:a0:f0:5d:61:c4:ab:ec:ad:bc:11:87:3e:51:67:ee:7a:
e2:18:70:d5:5a:52:b0:13:38:13:dd:8c:dd:29:c9:60:5a:ed:
73:86:48:7d:5a:7f:5d:30:e2:8f:4d:28:60:e7:58:e8:7f:90:
00:17:8e:6b:8a:bb:f6:2f:01:f0:17:57:0b:45:33:a8:8d:29:
1e:e5:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:02 2026 by rpki-client