
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier: xOVFx1y5LGoMQd5xCcV2ggSCngxYb3UIwg6hMvWR9/g=
Subject key identifier: 93:5A:A3:78:18:60:7C:78:F2:D7:D1:79:3C:1F:61:B3:16:47:73:1C
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial: 0DC2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number: 0DB4
Signing time: Wed 22 Jul 2026 15:37:24 +0000
Manifest this update: Wed 22 Jul 2026 15:37:24 +0000
Manifest next update: Wed 29 Jul 2026 15:37:24 +0000
Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: yRNA/h+NXQ8oNVDCCm4WLnpVIlPCrQrAcGWulzRpY1k=)
2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Validity
Not Before: Jul 22 15:37:24 2026 GMT
Not After : Jul 29 15:37:24 2026 GMT
Subject: CN=6a60e3b4-fd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:59:83:06:75:ad:86:52:44:2c:0c:b9:73:
62:19:ee:88:ee:6e:b0:9f:6b:97:a6:bc:f5:e6:62:
f5:70:cc:3e:a0:c0:46:61:a9:f5:34:87:85:b6:57:
de:ef:59:d5:c7:4d:75:e5:fb:24:b3:5a:92:10:ae:
8f:5f:aa:1f:d5:b2:33:e5:ff:10:92:ba:78:65:23:
0a:0b:22:9e:4d:53:8c:c2:3a:e6:ff:21:82:13:9f:
be:dd:44:06:08:9b:13:88:82:1c:8d:f6:82:3e:aa:
e5:62:07:ca:a3:f7:ae:a4:32:10:7d:e4:ec:88:f0:
d2:ca:7b:62:61:1f:dc:d4:65:e1:47:47:34:52:b9:
2f:7a:7e:d6:61:1f:41:3f:4d:29:a1:25:dc:92:02:
2f:fe:00:e5:49:41:bb:da:d3:23:59:52:b2:81:fa:
87:bc:25:ac:f2:79:85:cc:93:0c:3d:da:e4:d2:c4:
53:25:aa:f5:8c:52:ef:6f:cd:eb:32:4e:0d:e1:8b:
8e:75:10:b4:a0:2b:4f:9e:3c:69:09:e0:27:c9:a6:
89:b5:af:c6:48:d5:21:ba:41:00:39:10:9b:2d:64:
49:31:ba:05:a2:b1:32:59:60:ca:42:8f:6b:21:a9:
40:18:e3:82:8e:da:50:50:44:ad:a3:21:0b:a0:51:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:A3:78:18:60:7C:78:F2:D7:D1:79:3C:1F:61:B3:16:47:73:1C
X509v3 Authority Key Identifier:
keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:87:cf:ca:f9:c4:be:76:aa:a5:11:2b:77:61:24:e8:f1:fd:
91:45:09:5a:41:cd:02:c0:a6:ee:4a:16:af:0c:7e:37:6e:d0:
31:7a:37:b1:ff:fa:bb:63:3c:2b:9a:b6:1b:27:8c:dc:50:53:
35:e2:c4:5a:49:fc:10:67:40:c4:c5:87:95:01:7f:a3:51:f1:
4b:59:42:e5:8d:57:44:8a:1c:b3:20:5b:ca:8f:2c:7b:7d:a2:
f4:70:42:9a:ed:b4:60:e7:93:a0:93:5f:93:b4:6b:a7:ea:73:
a3:96:11:0e:5c:c2:6f:ea:5a:ab:36:18:8b:2e:c4:de:b3:e3:
5b:4e:92:4c:6e:4e:90:ec:c2:29:93:10:19:96:1d:52:3c:25:
cb:09:81:33:88:c8:ea:fb:eb:6a:e2:04:7a:78:03:a7:75:1c:
0c:10:03:4a:f3:73:95:36:82:27:49:6d:5a:87:a9:97:d6:cf:
1e:17:e9:35:f6:22:4f:08:52:c1:ad:e5:36:8b:0b:d9:2a:30:
19:b4:f7:8e:45:82:6a:2a:b6:f9:06:11:38:15:42:ba:5b:b6:
24:50:b0:b7:b9:82:41:fa:68:57:ee:a6:86:ff:59:7c:98:18:
7d:a6:a9:68:90:2c:2c:b0:d1:d5:50:86:0b:72:6f:a1:c4:fe:
2f:0c:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:52 2026 by rpki-client