
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
File: rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json)
Hash identifier: /ZSwfFX20bDIf+8bWBNAThQScyc0qLrLUpeyvzQoBxI=
Subject key identifier: 0E:04:0E:17:46:47:47:2C:1E:63:F6:74:99:C5:E7:FA:16:D4:64:68
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Certificate issuer: /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
Manifest number: 54
Signing time: Thu 23 Jul 2026 10:14:23 +0000
Manifest this update: Thu 23 Jul 2026 10:14:22 +0000
Manifest next update: Thu 30 Jul 2026 10:14:22 +0000
Files and hashes: 1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: mLN+Pc7Rwc7PjJ2Wy3JK4ctowoIxVXC1VcHVEbYymmU=)
2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Validity
Not Before: Jul 23 10:14:22 2026 GMT
Not After : Jul 30 10:14:22 2026 GMT
Subject: CN=6a61e97f-c623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:8d:87:0c:90:16:cb:66:a4:30:6e:98:1f:
55:fb:74:f4:8e:95:68:9d:65:ba:9f:f4:f6:9c:b2:
b8:4c:6d:4f:2e:87:bf:b3:69:46:3b:0f:6f:fe:cc:
0a:54:5a:1e:d8:09:af:9e:00:7c:d6:9c:30:ad:7c:
6c:53:8e:0e:29:93:7f:23:7b:11:3c:dc:16:d7:b1:
f6:dd:69:fd:07:d6:b3:b4:26:bd:73:68:83:a4:8f:
b9:9d:e6:5b:9c:bc:1a:87:19:93:ee:d3:a0:bd:59:
1f:89:fe:08:de:2a:1b:ed:ce:20:00:af:f6:dd:55:
31:fd:5c:b0:e0:a9:31:1a:79:52:f5:08:c0:30:c5:
9a:36:f9:af:64:d3:a7:1d:5f:8f:dc:1a:49:f0:07:
a6:0c:cc:f1:8e:fc:69:7a:cb:a6:e8:99:2a:9a:b4:
42:44:34:84:78:33:23:bd:ed:dd:4c:fa:f3:5a:37:
1c:87:d8:64:bd:ce:e6:94:a2:51:c7:44:b1:6f:06:
5e:c9:d2:82:27:d5:29:ee:05:5b:d1:54:69:e3:bc:
cf:32:f4:d2:29:c5:bf:b8:36:c2:25:95:9c:34:17:
95:45:84:07:5f:ed:4d:a7:ba:57:87:ec:54:f3:eb:
49:81:56:02:c9:47:2b:4c:87:cb:db:80:d2:78:17:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:0E:17:46:47:47:2C:1E:63:F6:74:99:C5:E7:FA:16:D4:64:68
X509v3 Authority Key Identifier:
keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:c4:4d:78:42:08:7a:bf:ba:2c:29:53:ef:66:01:77:5f:
be:a8:d9:aa:0e:3a:82:b6:44:52:f7:43:2e:84:95:bf:d1:75:
39:ac:77:a2:6e:c4:3a:89:cb:78:2b:18:b5:76:fb:07:5d:b7:
5f:fe:3c:9b:77:bf:4d:77:60:36:59:ab:0f:52:6d:23:ff:69:
8e:ce:b0:dc:95:1e:4b:e7:e1:30:f1:8f:81:1c:a9:78:01:54:
78:34:a8:d9:c3:6b:37:4b:e1:20:b4:f3:e7:81:bb:6e:2e:04:
b1:0e:59:07:b2:bf:e0:d5:ae:ef:51:2f:4c:ba:d3:34:8e:f6:
65:86:1f:3b:8c:82:2f:e2:9b:09:28:70:af:01:c9:5d:49:07:
ad:c7:e9:86:cf:d8:06:d4:d8:0b:00:1a:e9:31:b2:dc:2b:5d:
e2:82:4f:6b:08:40:63:41:f7:07:86:de:f1:93:e2:0e:3a:ca:
ff:4c:7f:7c:36:1b:01:b6:1b:45:0f:b4:d3:1b:ab:84:8b:11:
25:e6:63:65:29:95:ec:d9:22:b6:62:a6:a3:f7:3c:b8:80:bf:
ba:98:60:8e:21:30:09:b6:2f:0f:6c:f0:77:d5:b3:36:c1:54:
1f:99:f4:0f:1d:ce:33:08:75:77:e6:98:75:5f:63:86:d6:6c:
5f:1e:9b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:06 2026 by rpki-client