
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier: PJVgIzmWeFF9Wdqd+s44V3JwKSc20yftuZH5ZAZskg4=
Subject key identifier: E6:1F:77:EC:99:E9:E2:22:48:14:67:3C:E3:3C:35:D2:9D:D5:1B:9B
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number: 0246
Signing time: Thu 23 Jul 2026 03:40:08 +0000
Manifest this update: Thu 23 Jul 2026 03:40:07 +0000
Manifest next update: Thu 30 Jul 2026 03:40:07 +0000
Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: T416lf9AM/I1hweOwIRPBfV/plNHxVKbsEQR/fd8WAk=)
2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: P4LCaX2qP/BKspd2PRKRAgneO72VBMSnJqp0JvaJ48M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Validity
Not Before: Jul 23 03:40:07 2026 GMT
Not After : Jul 30 03:40:07 2026 GMT
Subject: CN=6a618d17-c0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:49:dc:b5:71:c5:f8:8c:15:a5:f6:bc:88:
fd:59:3b:ed:45:65:08:4c:be:f9:5e:7b:5f:d0:d1:
64:5d:ac:07:50:e3:1d:b4:e5:cb:67:87:84:cb:7f:
c2:0d:77:94:cd:04:6d:4c:6a:62:34:03:f0:87:8d:
f2:a7:e5:5d:73:c2:d6:ec:4d:69:db:45:5f:13:d1:
bb:d9:77:75:81:f2:f8:e3:da:eb:ee:92:09:95:20:
80:ec:0a:8d:cb:e4:44:47:b0:70:c0:02:89:3f:87:
cb:f2:be:9a:64:c4:62:70:d1:10:2e:d6:f0:64:50:
66:12:2d:a8:16:9d:70:ad:41:ce:24:f1:1d:2b:35:
75:f5:fd:35:b3:b1:80:2f:19:a8:cd:7c:74:8c:9c:
04:ea:0d:5b:91:d2:a7:0c:f9:2b:3a:2a:f7:80:be:
a8:04:5d:b2:de:eb:56:bb:4b:92:cc:61:7b:17:4f:
87:54:60:e5:32:df:dd:2a:c3:2a:f3:7b:1d:22:d0:
f3:8a:06:38:35:83:09:4b:50:38:46:2c:44:61:e0:
2c:d0:52:97:08:8c:30:96:96:d1:be:94:91:94:f7:
6d:51:aa:7f:6b:c6:ba:26:21:96:c3:cb:e7:54:43:
33:dc:8a:54:1e:b3:24:72:ae:92:bd:7b:02:18:da:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:77:EC:99:E9:E2:22:48:14:67:3C:E3:3C:35:D2:9D:D5:1B:9B
X509v3 Authority Key Identifier:
keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:89:92:f1:20:75:00:16:58:32:50:d3:fa:a0:1b:ea:5b:
e9:ff:5f:ac:0f:89:13:f3:72:24:9e:99:c4:a0:fc:19:0c:a8:
62:0e:64:84:48:c5:88:a8:72:b9:d0:28:9b:04:7d:1a:5b:bd:
da:65:ef:2d:84:1d:90:ff:6c:9f:95:45:fe:2e:57:07:a4:16:
09:49:01:d3:34:4a:9c:ca:bd:d6:c9:89:4a:50:90:8b:25:b5:
bc:d3:e5:d4:41:a3:2d:c6:c6:1f:7e:b7:ec:81:37:ca:1c:b0:
5c:e9:5a:ef:86:17:55:88:dc:b2:48:22:cd:71:0b:3e:56:12:
39:cc:f0:d4:60:47:48:57:b3:4e:6d:78:31:c6:b3:43:59:40:
19:26:d1:ba:0c:07:50:e6:23:b7:f9:8b:97:22:c8:77:84:26:
ee:3c:4e:a5:b4:3a:fa:12:f9:14:dd:0e:6f:65:50:12:69:ec:
25:2d:82:9d:78:e7:d5:c8:2e:2f:e9:b7:ac:8d:86:ae:5a:63:
43:92:9d:22:39:a6:a2:26:ff:6d:2a:3e:84:ed:f5:7b:db:c4:
f6:b5:d0:14:11:af:2b:f0:0c:34:a9:ad:fe:d3:65:d4:42:e6:
c2:be:91:a8:28:2e:9a:b6:d5:80:a8:89:8b:16:f4:b7:46:55:
fb:9e:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:02 2026 by rpki-client