
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json)
Hash identifier: VcPuFd5ZhpvNeNuVEp+r+mm4+UqRg10oKE5WNXHakak=
Subject key identifier: E0:40:17:AB:73:30:1F:6D:9D:BB:2C:82:B1:4F:CA:DE:4C:57:B8:D5
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
Manifest number: 020E
Signing time: Wed 22 Jul 2026 18:47:11 +0000
Manifest this update: Wed 22 Jul 2026 18:47:10 +0000
Manifest next update: Wed 29 Jul 2026 18:47:10 +0000
Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: quuoqPT193+ISGptUs9PuRHXaNIlw5zzvUHfDBSG6pY=)
2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Validity
Not Before: Jul 22 18:47:10 2026 GMT
Not After : Jul 29 18:47:10 2026 GMT
Subject: CN=6a61102f-07ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:4c:72:80:f7:96:1b:0b:dd:ea:c1:71:e3:
34:1f:ca:ae:79:fd:6b:b9:9b:d1:6d:3b:d9:3a:fa:
48:52:a5:bf:41:c1:3f:ee:fa:67:28:88:e2:c4:35:
60:50:28:0b:13:c6:9c:08:a6:f4:28:20:73:a6:ab:
b3:c7:49:8f:0b:63:29:85:28:3d:34:82:12:fc:f0:
b4:1c:c0:a1:d9:aa:16:2e:7b:e9:c7:63:87:be:92:
e7:f4:8b:09:b0:93:1b:29:05:7d:7f:a3:fa:81:7d:
03:dd:5b:3c:f7:a6:2e:f0:02:e7:00:bf:40:0c:89:
bb:03:a7:f5:90:0d:cb:97:15:ed:71:46:7c:f9:74:
e2:a0:ff:8c:33:1c:a9:9e:8c:ad:9d:97:af:f5:ea:
ef:c9:f5:4b:92:16:5e:01:08:fd:11:09:27:0a:09:
2d:41:3c:7f:7e:a6:ab:a1:05:41:8a:67:da:de:66:
80:da:d1:69:0f:bc:b8:a6:9f:b0:99:6c:cd:3e:c3:
6d:15:58:3c:9a:95:91:2a:40:a7:b2:79:a2:1c:11:
a2:9c:f6:9d:e8:3c:fe:84:b4:c5:3b:20:12:f6:fb:
4f:42:62:9d:1c:98:74:3f:15:28:64:13:b0:fe:27:
14:7f:77:78:7f:82:83:d1:bc:b1:71:ae:e6:9d:51:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:17:AB:73:30:1F:6D:9D:BB:2C:82:B1:4F:CA:DE:4C:57:B8:D5
X509v3 Authority Key Identifier:
keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:f4:d0:0c:26:1d:e5:48:f1:16:91:18:c4:c2:c4:c7:cd:
3e:56:d6:80:72:94:a1:e3:99:47:46:54:76:8f:a1:47:8a:ea:
d8:8d:a7:43:d9:95:6c:c4:af:d5:03:ec:6e:7d:98:b1:57:ea:
24:a6:ec:38:c4:8d:25:b5:58:a2:8e:8d:92:53:e2:31:5b:8e:
f1:5d:49:cd:f7:e4:52:b0:14:51:30:9c:f6:5d:6c:ec:8a:10:
a3:0d:38:f5:2c:db:28:2e:5a:b3:06:63:19:58:6a:4a:e4:cf:
dd:1e:bc:54:b3:55:5b:84:1b:96:16:4f:c2:64:f6:07:94:e4:
1b:61:57:0b:d4:9c:0b:a3:4e:20:8b:2c:ac:59:ad:6d:58:5d:
0f:26:95:ab:59:b9:ea:2b:b4:8f:8e:db:81:75:22:ae:68:03:
5d:79:c4:bc:2b:9f:49:c8:7f:9f:0d:02:8b:64:3b:57:36:eb:
9e:6e:ba:63:63:a0:ff:41:00:35:c3:d9:f7:a8:97:97:d2:69:
c3:a8:8b:63:88:99:74:04:88:52:e7:a5:91:96:4e:8a:13:68:
8f:80:c6:00:b1:d0:f9:37:6e:09:5e:cf:c9:05:5e:8f:08:f1:
ea:4c:4c:f9:0a:c6:38:86:dc:8c:de:82:50:73:43:52:ab:57:
7e:da:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:38 2026 by rpki-client