
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier: EFUlmpBd1mlD7b+AF+kNQbqW3tQEc1RJS103uTSzcdc=
Subject key identifier: 45:1D:FA:41:2E:A1:02:5A:F1:0A:F2:87:99:60:90:C8:8B:4E:22:93
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0CD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number: 0CBB
Signing time: Wed 22 Jul 2026 18:46:02 +0000
Manifest this update: Wed 22 Jul 2026 18:46:02 +0000
Manifest next update: Wed 29 Jul 2026 18:46:02 +0000
Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: WcKKJawm9j/WH4c73YRtVppm6fZE1dCVS/+BxbhB5b0=)
2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: KlPgSSTeNFHIq/ImYtge7m9dric/OVy8j0SSi0z8NfQ=)
3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: x6ISI3hdOnr22UZ05u8VzkkkNIxcoiILlvgsEcngUR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Jul 22 18:46:02 2026 GMT
Not After : Jul 29 18:46:02 2026 GMT
Subject: CN=6a610fea-0b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:70:1c:7d:83:7c:43:df:50:e6:d7:b2:c4:
e2:cd:2c:b2:a7:a4:58:f2:93:59:be:54:55:9d:72:
6d:b9:32:18:1e:55:8f:2c:58:61:90:10:83:4e:f3:
cf:f8:69:0d:ec:cb:8b:7b:61:f1:ae:2e:d8:b1:79:
ec:d1:46:cc:d9:fd:8a:13:d3:6b:f1:98:4a:70:11:
2e:58:30:cc:c3:19:ae:7f:35:a9:50:c2:61:eb:61:
ca:76:35:f6:a2:7e:52:70:3a:66:9a:fd:6d:47:5b:
67:81:62:bc:3d:cb:25:c9:35:9d:fb:f5:15:4b:f1:
b2:f2:1f:78:55:e9:68:4f:a1:22:77:6d:6c:e9:e0:
10:c9:50:ec:f5:d1:3a:19:9a:b8:a2:dd:5e:ad:82:
e6:86:6f:f4:88:da:fb:9a:59:50:c1:6f:c2:9d:40:
53:56:eb:65:d6:be:3e:94:fb:3e:d1:db:f9:fd:74:
5d:cd:4c:6f:16:14:90:ee:e8:21:dd:1d:20:11:89:
30:da:24:0e:6b:84:92:7d:ac:a7:c0:f3:20:f6:33:
83:eb:aa:dd:31:b5:8f:38:76:10:80:64:ed:cd:ac:
78:c8:57:26:eb:34:2d:ed:25:91:06:9b:d9:0d:90:
73:80:b9:ff:4b:2b:34:c3:b0:b1:96:a4:f6:61:21:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:FA:41:2E:A1:02:5A:F1:0A:F2:87:99:60:90:C8:8B:4E:22:93
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:2e:6e:04:d8:36:3a:08:79:f0:34:85:1a:66:13:42:39:6e:
cd:cf:65:06:6b:8b:25:c2:a3:7f:16:aa:fb:59:b2:43:31:f0:
31:f1:18:16:6d:42:75:95:2c:17:d9:c7:8a:b7:3d:83:3a:36:
80:ed:05:dc:2e:50:e1:57:36:d8:14:81:a9:4e:2b:9d:92:7a:
a1:7f:b0:d1:a3:7d:8a:dd:88:b7:c9:7a:59:c3:c7:50:fa:41:
8e:8c:47:88:5e:98:80:24:7e:9a:fd:97:68:b9:3c:b7:52:17:
64:3c:34:fd:9e:4b:10:4e:b8:e1:77:c8:2b:b0:cf:c4:f4:72:
6c:f1:1b:5e:43:c8:ed:c4:37:4a:ed:44:17:e7:ab:21:18:2b:
52:90:2b:34:20:ce:e4:fd:cf:07:70:a2:2e:da:25:25:21:20:
87:e6:01:c9:36:8f:ed:c6:c1:5a:d1:b5:19:45:f3:78:92:0c:
d3:b6:49:ce:b7:06:aa:84:19:13:f7:f9:04:fd:8e:c7:7c:26:
ab:fa:32:44:44:86:02:6d:1e:b6:fb:17:6d:cb:30:7f:cf:cd:
e8:97:e9:43:ce:f9:c6:3a:e2:37:a7:41:46:c3:87:ed:e7:ed:
c6:77:10:3a:92:12:ba:9b:58:56:e2:b9:b5:29:bf:be:b8:47:
b4:29:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:10 2026 by rpki-client