
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: MghWeOr2SpmAP/GXpsE9UO2C9gyO+esfdhpSK94C+x8=
Subject key identifier: 50:48:D8:39:4B:11:AC:ED:C2:69:8B:3C:D7:89:E3:A9:DA:30:DF:71
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 034F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 0349
Signing time: Thu 23 Jul 2026 01:55:29 +0000
Manifest this update: Thu 23 Jul 2026 01:55:29 +0000
Manifest next update: Thu 30 Jul 2026 01:55:29 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: xETXpHidfYhY0GDb255lOykj5JrMna7P2sxtMn46PLk=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: hRSBw3j57fal3n5v23N17SHqFFyn7GkCbwIU7hzC2CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: Jul 23 01:55:29 2026 GMT
Not After : Jul 30 01:55:29 2026 GMT
Subject: CN=6a617491-ed36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:5a:d4:aa:60:96:e7:fd:be:ea:6d:fa:db:
22:82:07:e8:1c:45:b7:ed:04:09:31:fa:38:47:21:
c3:11:bc:84:b0:f9:ee:31:a9:2f:56:1f:5d:d7:82:
72:6b:24:fa:92:a6:4c:f8:65:22:63:0f:06:67:c7:
56:38:e9:9c:15:3a:b5:63:e5:8f:ac:7d:17:6a:cd:
cb:a1:f3:a5:e7:b5:fa:8b:e4:b5:6c:04:af:6e:35:
37:ec:0c:49:b9:ea:23:ac:58:b1:50:99:08:fc:fd:
bb:52:85:59:be:5e:8b:44:71:72:e4:9a:d9:62:9c:
77:8b:8d:db:54:36:1f:31:4d:23:0e:c3:2b:30:63:
48:52:3f:30:f8:fa:54:ae:7c:90:25:e4:4e:d0:4f:
39:bd:17:f9:aa:7c:fa:ad:a6:83:44:66:9d:dd:89:
8c:91:7a:e7:bc:56:7d:1d:45:f7:ce:4b:1e:e7:17:
ce:72:a7:e0:4e:6d:0a:3e:0b:0e:50:21:56:da:d1:
42:fe:e5:7e:08:d0:e4:fc:e2:bc:89:52:9d:fe:5d:
25:9b:db:58:da:ee:a8:30:75:ef:6d:12:c6:47:f1:
c1:6a:21:ed:ea:be:62:74:52:03:83:95:a0:e3:3d:
4c:95:fb:6e:7b:53:5f:e3:1c:e3:de:7f:00:cd:82:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:D8:39:4B:11:AC:ED:C2:69:8B:3C:D7:89:E3:A9:DA:30:DF:71
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:6d:82:00:0e:f8:48:87:4e:70:8f:b9:af:74:07:27:41:10:
cb:21:6f:8d:23:c6:07:7d:60:6b:9a:39:16:a4:e9:76:a5:8c:
3b:9e:41:39:d0:06:e6:a8:a3:0e:6a:eb:e9:e1:65:08:52:83:
14:89:8f:76:d6:34:e3:9e:09:03:30:49:64:c9:38:01:58:d1:
9a:9b:b1:1b:6e:77:28:1a:72:22:17:7b:f6:9e:01:08:fb:34:
14:11:ad:86:bd:6c:cd:f1:d4:08:d8:5b:2d:b9:41:ef:67:6f:
28:e2:44:d3:65:9b:07:df:47:55:a5:39:3f:87:ab:90:f1:58:
80:7a:8e:be:d9:8c:47:62:ad:54:94:75:e1:f7:43:02:4e:5a:
3d:7a:46:fc:57:bf:62:9c:bb:9a:a5:e7:25:64:9d:61:89:b8:
fc:01:6e:6f:09:10:02:b6:77:45:74:17:88:84:bc:98:75:bc:
04:32:bd:fa:1e:04:ca:17:2a:24:21:8a:93:3a:c2:10:c5:26:
59:36:fa:d6:3e:dd:68:db:b1:59:55:ae:f2:ef:50:13:72:c6:
9e:6b:fd:f0:de:c5:9e:fa:cc:32:2d:bb:66:f8:7c:3b:11:12:
9d:b6:14:1a:dd:40:f0:e0:ec:81:b4:58:8d:dc:c4:fe:68:08:
de:ba:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:44 2026 by rpki-client