
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json)
Hash identifier: HEj2iSNa61XQKvGfpF1Mq4hIJ55nklyMWWwjk03QiGY=
Subject key identifier: 86:A3:94:B6:01:CC:AD:23:C5:56:75:9A:73:4F:08:AC:4B:B4:A7:83
Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Certificate serial: 0E06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
Manifest number: 0DF8
Signing time: Wed 22 Jul 2026 18:03:28 +0000
Manifest this update: Wed 22 Jul 2026 18:03:28 +0000
Manifest next update: Wed 29 Jul 2026 18:03:28 +0000
Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: NLgjtXOMEkxFEbEhZcHPlnXcUCjH+erqm0aUGWo1MSc=)
2: 3CB0977C608811F1B5BB4F7F6F47A888.roa (hash: obvUvp1oAFlcd8oLgkACJL5wq5dkzfXfQHSgoe/uzAw=)
3: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: x6WdVTtqXyzo1or27OKiZdwiQ6/5q3EEmbhvmI/FqvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Validity
Not Before: Jul 22 18:03:28 2026 GMT
Not After : Jul 29 18:03:28 2026 GMT
Subject: CN=6a6105f0-52be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:49:58:45:27:12:96:ac:c7:f8:12:cb:de:
c6:64:45:67:75:8d:fb:ae:1c:ff:63:1c:79:da:2b:
85:b8:98:04:4d:d9:5d:2a:45:6e:c6:7e:a9:bf:5a:
53:fb:7b:f9:3e:df:dc:f2:ac:31:14:de:b3:ac:ad:
54:39:3f:0a:46:9b:bb:76:a8:ea:1b:ef:2a:01:fd:
fe:83:37:d3:53:97:83:10:5f:98:98:c2:a3:66:10:
8b:33:f0:d8:c6:6c:32:17:29:57:61:83:e8:bf:69:
c0:cf:ff:d2:15:66:8a:c2:1e:a3:03:8e:14:18:e0:
04:ff:f4:24:78:0f:a5:54:6b:5c:aa:39:e3:13:2e:
90:89:7c:08:37:07:4a:32:ae:e3:24:a1:84:7b:f7:
f9:23:36:e5:35:27:7c:45:63:a9:b1:e3:6c:66:3b:
9e:22:17:0d:a0:94:4c:d1:2a:16:e3:be:7e:0f:e4:
0e:ce:a3:c9:4e:7e:82:48:c8:90:02:99:45:49:f7:
07:48:a1:b1:bf:27:ea:66:f4:e9:5e:7b:7f:7a:9a:
ea:32:88:12:9d:a5:39:bb:55:98:90:d5:56:c5:81:
39:31:a2:9b:6f:15:a6:5b:8d:8f:17:91:78:b6:c5:
04:b2:d9:5d:8b:bf:00:01:35:dc:55:40:4e:fc:d8:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:94:B6:01:CC:AD:23:C5:56:75:9A:73:4F:08:AC:4B:B4:A7:83
X509v3 Authority Key Identifier:
keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:b4:b2:b1:cb:45:d1:ae:72:bf:da:65:32:bd:cc:88:ac:
93:43:25:8a:00:3b:d0:f4:00:77:28:94:56:88:79:cc:2a:84:
9d:79:0e:fb:c0:2e:62:69:62:ac:8e:c1:0d:55:c9:a1:ba:ad:
4e:24:ea:b6:8b:b2:00:09:80:9b:51:d1:0e:d5:82:9a:09:21:
36:93:d9:c5:31:02:df:00:a3:a3:c4:2a:a1:2b:7a:06:3f:b2:
49:40:31:6a:b1:61:bf:fa:ec:54:b4:2d:08:fd:b3:9f:ac:ac:
30:88:da:ac:2c:bb:79:60:16:83:50:f4:67:a7:52:ce:a3:0d:
6f:c9:fb:d1:b0:b6:0d:59:fa:3f:09:28:3c:fe:ab:58:eb:f7:
0a:3a:c8:a8:09:43:06:9d:a3:6e:fe:c8:bd:6d:eb:c3:4c:45:
81:62:78:77:c5:1b:79:fb:5d:b1:0f:4b:b1:5a:3f:08:8d:87:
ba:bb:89:ef:b8:e5:1f:f3:2e:17:7c:ca:34:9d:07:60:85:c3:
d3:05:cd:bf:af:f6:a1:08:fa:8e:8c:94:6b:57:15:e3:37:bf:
c0:9d:0c:ff:9a:a5:e5:48:c2:bd:33:ce:24:86:0d:91:38:c0:
6a:d8:31:3f:cc:2e:f0:ae:69:84:8e:11:2d:39:ee:98:28:72:
7c:ae:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:13 2026 by rpki-client