
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: HUN3yBAEzG9CysFrd8irDdF5teJosqzz4Cp+Rl1OjIo=
Subject key identifier: 95:18:46:F8:3B:08:3C:53:70:C9:AA:B0:A4:A6:90:4B:BA:BB:1F:0F
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 3561
Signing time: Wed 22 Jul 2026 14:36:00 +0000
Manifest this update: Wed 22 Jul 2026 14:35:59 +0000
Manifest next update: Wed 29 Jul 2026 14:35:59 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 3qyhefmNvzIkjYDZ6nFNQWol3NsbK2a86OXb5g/C0Ck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Jul 22 14:35:59 2026 GMT
Not After : Jul 29 14:35:59 2026 GMT
Subject: CN=6a60d54f-e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:4e:90:79:27:b3:6f:73:f3:3b:75:bd:c5:
6d:fd:76:66:21:99:1b:be:65:05:28:b0:fe:b6:1d:
97:ee:9f:17:79:15:fb:b6:a6:c6:6e:b1:ad:e9:99:
37:46:a8:ba:a4:78:61:58:65:7a:c0:55:16:9a:f2:
96:73:bd:d0:eb:6b:2d:d7:b3:d3:16:6d:82:6f:45:
7b:88:ef:2c:d5:5c:1e:2d:1c:b6:46:03:8b:05:5d:
52:7d:e8:a6:56:cd:c6:d5:b0:ec:d5:35:66:43:b6:
ac:f3:07:82:bc:81:ba:c8:75:76:55:a6:e8:42:a5:
11:c1:4d:f7:fe:30:89:47:38:90:ac:9d:bc:61:44:
6a:23:d3:06:9d:d3:19:a3:06:09:b9:47:6d:91:e5:
b7:2a:09:67:27:79:f5:0f:49:1f:86:98:24:7b:3d:
94:18:00:68:85:61:36:0f:98:44:7f:67:cb:f3:8b:
52:7d:b8:47:e3:0e:06:0e:7d:7e:24:f7:ec:d4:90:
e0:1c:fa:56:1e:4c:01:92:89:46:86:c7:ef:c8:77:
21:b5:1c:2e:aa:1a:02:cc:3f:38:00:7a:9b:e7:9a:
b5:0c:d9:08:0f:31:f4:eb:3c:54:f6:74:9f:30:a1:
91:16:43:54:ba:13:7c:20:db:f4:3d:2e:18:e8:51:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:46:F8:3B:08:3C:53:70:C9:AA:B0:A4:A6:90:4B:BA:BB:1F:0F
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:12:0b:9c:9c:96:88:37:ae:03:ab:ba:3d:f3:42:11:b6:57:
65:b8:1f:27:a3:91:44:df:4d:fe:f1:d2:1a:1c:ac:34:89:dc:
b4:0d:a4:cd:d5:65:2b:31:42:14:22:0c:6c:c3:64:e3:cb:6f:
cd:8b:20:77:10:f2:95:42:88:2d:67:87:c4:c2:a0:25:96:91:
4a:93:41:cf:4e:b2:6d:88:eb:e2:cc:41:00:3b:c2:63:3c:58:
59:8a:4d:13:1a:22:a5:64:2e:70:8e:a4:48:8d:bd:aa:55:78:
ce:ab:e5:be:69:21:3e:56:75:5e:17:7a:aa:9d:b8:dc:f1:c9:
f6:54:ff:4e:ae:01:2f:26:e0:09:56:99:c7:ce:83:62:21:d5:
7e:82:7d:27:cd:ce:46:44:63:ca:bb:d2:27:74:1a:73:10:b7:
78:7b:2c:14:dc:67:54:16:da:6f:51:c8:13:54:8a:6a:54:3f:
23:31:ae:cd:5c:a9:6e:56:6e:e7:77:72:0c:55:f4:ae:5f:9d:
81:b1:20:6d:19:c5:1b:59:ed:17:02:6f:e7:02:63:e9:23:84:
a6:bb:56:52:d3:46:e4:be:b8:5d:41:fe:53:6e:78:4d:4d:9c:
ca:b7:da:02:3c:99:ec:4f:d6:41:ea:d7:52:b3:c2:22:68:47:
c2:24:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:34 2026 by rpki-client