
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier: 2Lhb9tWhzKbEwFaRF3UkNG0DlrV0h8Y0VQo/vVaYri4=
Subject key identifier: 7D:F6:E6:F8:F8:C5:42:08:0E:98:A2:61:8B:61:F1:94:20:FC:E7:CB
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number: 86
Signing time: Wed 22 Jul 2026 18:18:08 +0000
Manifest this update: Wed 22 Jul 2026 18:18:08 +0000
Manifest next update: Wed 29 Jul 2026 18:18:08 +0000
Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: o6kREa2pMv3j6KHDvyk0H/TCdeJ3I9VR13UAYd/xQRc=)
2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: 5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Validity
Not Before: Jul 22 18:18:08 2026 GMT
Not After : Jul 29 18:18:08 2026 GMT
Subject: CN=6a610960-780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:a9:73:b6:ab:3b:12:a3:e5:21:d7:67:a2:
99:4b:6e:1b:a3:a1:03:87:b1:cc:d1:4f:96:ea:d6:
72:11:84:22:05:a1:5d:9c:ec:c6:fa:78:92:cd:49:
45:26:7b:b1:f8:6d:8c:10:17:82:b2:25:9e:26:21:
94:45:fb:46:c9:d0:b6:0a:5b:f3:4c:cc:52:b4:df:
c6:75:1f:ac:92:16:47:bd:0f:db:ea:40:c2:cc:e6:
2f:d2:04:b6:3b:d9:ff:69:d1:24:03:e3:37:ed:7f:
b3:a8:4a:22:6b:e1:ec:5d:5a:7a:f0:74:e8:7d:59:
6c:35:dd:fc:0e:72:36:db:c4:5a:42:44:cd:0d:6e:
17:2e:c6:5d:47:87:14:dd:c6:2a:ea:c4:81:62:50:
22:e9:1c:b9:ca:e1:7d:3d:c4:c4:fe:23:63:c9:b4:
06:73:c8:04:c6:4e:0f:31:18:27:54:15:f6:fc:67:
32:e5:af:93:cb:79:40:cd:f5:f5:c3:58:ad:fe:77:
a9:24:39:63:3e:2a:69:24:19:83:0c:74:4d:a4:e5:
5a:de:9a:2d:31:8d:b8:ad:c7:b0:b5:f4:42:62:62:
bc:15:d3:88:1c:20:79:f0:0a:55:8c:5f:c6:0e:7b:
76:a1:cb:51:bc:1e:92:3e:04:ab:ee:a3:52:41:94:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:E6:F8:F8:C5:42:08:0E:98:A2:61:8B:61:F1:94:20:FC:E7:CB
X509v3 Authority Key Identifier:
keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:29:02:24:0d:80:02:15:ae:3b:c5:47:d8:94:a8:f5:cc:
1e:7d:44:f8:97:10:61:fb:45:d0:cd:86:dd:f4:6d:8f:15:be:
71:84:93:f6:69:c4:cf:c2:ed:c3:e4:24:31:e3:d7:3d:b3:93:
38:c4:cb:f6:f3:64:d7:8b:a3:ac:6a:65:84:b9:a8:b8:04:0d:
e9:04:f3:66:1c:67:ed:64:f1:73:9e:36:89:07:b9:01:0d:9d:
11:f2:bd:0d:44:1e:91:83:1d:8f:0a:bd:9b:52:5d:cb:9d:3a:
8c:2e:ca:5a:f5:88:0b:4e:de:31:38:70:1f:0a:d7:86:8b:00:
7e:f9:1b:d7:fa:a1:4f:6c:34:1f:4f:ba:e1:15:fd:26:ce:dd:
e1:44:ab:e1:2e:29:6d:19:15:8f:47:57:f2:5f:5f:97:22:02:
96:2e:c8:77:95:ea:86:d2:b3:37:33:70:41:a5:49:09:2b:b2:
c7:c9:46:66:b1:d6:49:92:45:1a:bd:6e:1c:00:b6:e3:a4:5b:
fd:7a:f2:ff:34:bc:40:45:f0:47:28:39:3f:42:b3:f5:87:da:
06:dd:a6:2d:31:b1:71:9f:ee:06:c9:74:e7:92:a9:b4:ed:50:
8c:12:33:fc:e5:82:8e:b9:ef:87:16:a8:43:e1:c3:9f:2a:d9:
5c:d7:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:47 2026 by rpki-client