
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: GtLNDq6qxbWjnzU/DVd+t9nd+TRLtGG4Er8UAFoo0to=
Subject key identifier: B2:8C:33:05:F9:DC:D2:4B:D2:F3:4B:A5:A3:99:99:65:87:9D:58:A8
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 0437
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 042F
Signing time: Thu 23 Jul 2026 01:09:58 +0000
Manifest this update: Thu 23 Jul 2026 01:09:57 +0000
Manifest next update: Thu 30 Jul 2026 01:09:57 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: Xxasoowrp38/hJj3Uk4GcjR/TAoSzb8iKJh+s0bW1kE=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Jul 23 01:09:57 2026 GMT
Not After : Jul 30 01:09:57 2026 GMT
Subject: CN=6a6169e6-865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:48:7a:a9:c3:1f:79:4f:cc:26:d3:71:72:
3d:72:7f:86:7e:99:b0:f9:aa:60:9c:0d:22:8d:27:
5f:1e:44:7f:2c:c1:4a:cd:d1:9d:7b:01:b4:33:09:
b3:07:6a:b3:1d:84:82:3f:0c:aa:e8:90:fb:b8:d9:
ff:c2:a6:42:8d:fc:ca:2d:6e:cb:92:55:3b:71:71:
e5:a8:50:e8:73:fb:cf:8f:63:b4:a4:35:5f:f5:e8:
27:7c:3e:ee:11:4c:50:f7:c8:5a:a5:37:68:22:81:
55:57:63:9f:21:fb:b2:95:1f:6d:38:b2:a4:31:c8:
97:86:e8:12:a2:ce:e7:b9:46:cf:e9:de:c6:76:22:
c6:3b:69:50:10:b5:ee:8b:92:ad:af:d9:1f:a4:1d:
b4:79:13:f0:83:d1:b7:a2:cb:ec:f5:d7:b3:ec:8a:
c7:b8:e6:11:36:6e:51:de:a4:f2:10:e6:93:ca:e0:
63:c8:2a:24:3e:ec:ed:aa:65:b8:15:3b:74:ad:5e:
87:84:9f:aa:6a:a9:5e:b1:4f:f1:e9:a0:97:77:31:
79:78:52:79:ea:c4:c2:1e:dc:ef:ee:85:04:89:b0:
7c:6f:e0:6a:80:ce:81:e0:bf:37:32:4a:dd:29:c4:
ae:77:bb:8e:35:4d:23:fb:3e:4c:7e:87:bd:47:66:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8C:33:05:F9:DC:D2:4B:D2:F3:4B:A5:A3:99:99:65:87:9D:58:A8
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5b:ec:b0:ca:53:f4:16:07:94:7c:4b:8a:b6:56:a9:7a:fd:
5b:47:30:29:06:a2:8a:33:ea:74:a7:66:66:69:13:d8:67:46:
4c:1e:0d:d7:9b:b2:02:fb:7f:c9:5a:fb:1e:92:f9:71:d0:54:
f3:85:1a:0c:31:27:6b:65:7f:05:3e:6f:11:b5:b6:1b:8a:41:
73:2d:6d:fe:b4:9e:69:aa:64:6b:75:8b:9a:94:ac:f7:93:a0:
23:e8:8a:a0:a6:07:18:89:1c:ee:a1:f5:97:a2:8b:4c:30:1c:
3c:9a:20:d6:98:cc:a5:5a:54:3a:64:a7:21:df:c1:24:d2:7c:
2f:9e:87:78:13:ef:31:4e:67:a3:16:89:c2:03:8e:cd:e8:33:
18:9c:79:ca:51:9d:33:7e:32:c5:84:85:03:0d:32:62:09:cb:
42:c7:03:17:20:d0:a0:1c:9d:c6:21:0d:12:f0:f2:e6:a0:b3:
d1:a1:8e:a3:c6:5d:27:17:9a:10:79:98:f1:22:c1:f8:16:44:
e5:83:d8:0b:aa:6c:2a:03:35:15:a3:95:0e:89:5e:92:b8:d9:
83:b4:ed:e9:32:b7:ef:2e:5a:2d:bd:02:e4:b2:0e:2c:af:f9:
d2:32:65:4e:ae:e4:44:58:45:65:37:00:3d:2f:a4:f5:a3:c4:
6c:dc:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:20 2026 by rpki-client