
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier: GkIZ4gwsC6COaHuBeIM4fEd7a87f/zZ79jPCtVgNJZ4=
Subject key identifier: 1A:54:CD:94:E9:99:58:D9:94:E5:F8:D7:A0:F6:14:20:19:7B:CB:4C
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial: 0B3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number: 0B25
Signing time: Wed 22 Jul 2026 19:40:15 +0000
Manifest this update: Wed 22 Jul 2026 19:40:15 +0000
Manifest next update: Wed 29 Jul 2026 19:40:15 +0000
Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: +fTBQuXoyBaiJYKSRf1EPmeBqrtkowyrR/NzmwJXgKE=)
2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: m6x4cKoG0z5IGxS+jgyTdR66s445veI9JdXQ3dKCikw=)
3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 8RfREkb1TfRtm9mZNRjcCr0gSCyT+B9RHPPp4JceAOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Validity
Not Before: Jul 22 19:40:15 2026 GMT
Not After : Jul 29 19:40:15 2026 GMT
Subject: CN=6a611c9f-009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:3a:07:02:d2:d8:bc:66:ba:01:eb:6c:69:
5d:81:05:58:7c:71:b6:0f:bd:9d:9b:9c:4e:8a:35:
aa:c0:d7:24:b3:cc:cd:a7:44:38:99:9e:46:f4:82:
0a:c6:74:e9:e4:e8:bd:9d:de:0a:06:64:a6:c9:dd:
e2:ad:50:0d:1b:19:d5:1e:e8:63:7d:11:71:be:ba:
8d:c0:d8:62:3c:ef:52:b6:81:91:ac:06:f9:59:cc:
99:74:9c:ca:51:b9:6a:f0:04:d5:cf:2a:84:7d:31:
57:eb:86:ac:35:4a:23:92:9c:d4:95:b1:fa:57:a0:
43:85:3e:fc:fb:56:4a:90:11:94:b3:44:d2:31:d5:
58:c4:02:b8:d1:4a:79:6d:ed:f5:5f:63:93:57:24:
be:24:30:d0:77:4a:58:e0:8a:e0:f8:23:ca:27:60:
42:ec:3e:ee:b2:d1:e2:e3:4c:c5:b6:73:7c:19:a3:
98:48:c5:e4:dc:0f:c7:23:eb:59:aa:d2:54:ce:4f:
63:75:f0:7e:e4:71:57:83:92:56:f7:14:39:4b:67:
b8:7a:c7:12:0c:e9:b0:c7:86:b3:27:c5:1f:36:e1:
ef:55:ce:10:21:85:67:94:9c:c0:64:d7:2b:9a:7a:
97:d8:9c:e8:b1:f4:10:b4:ac:1e:cb:ae:23:bc:db:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:CD:94:E9:99:58:D9:94:E5:F8:D7:A0:F6:14:20:19:7B:CB:4C
X509v3 Authority Key Identifier:
keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:bb:20:17:8b:5a:f9:0b:fd:a9:a1:03:b7:b6:2f:ce:fa:
bf:63:a0:0e:36:c9:2e:9f:af:3a:d8:dc:14:92:12:1b:16:81:
4a:f6:22:67:89:e7:e3:66:7e:d0:f8:d9:4d:80:b1:9b:0f:90:
a6:87:46:c0:0d:92:5c:78:47:1b:d7:26:bc:e7:f6:f4:05:17:
38:96:46:43:2d:f4:e8:39:e1:ce:58:66:56:e4:6c:8a:0a:8d:
ac:25:46:1f:47:2b:ab:e4:93:e0:07:5c:c9:50:16:e2:90:79:
3c:a0:45:d9:a0:19:a5:2c:0d:f4:2d:cd:4d:99:02:1a:83:c7:
14:76:53:c6:00:9a:d7:9c:4b:3f:c4:c8:28:29:c8:e3:43:68:
5d:bf:c8:3e:88:7d:ef:57:8d:85:c2:ee:24:b2:d2:43:f2:81:
93:d8:b2:44:f9:f5:76:05:d2:78:05:fe:65:6f:06:e4:c6:87:
82:cc:90:96:7a:7b:d2:46:39:d4:8f:5b:d2:28:cb:08:1b:7f:
e8:96:39:45:e6:c7:d5:1b:cb:3f:ba:db:87:02:2c:2a:a1:2f:
4b:be:ba:37:c9:30:d8:c9:29:9b:b9:18:52:b4:33:6c:ed:4f:
e5:ed:6c:6d:36:d5:d8:4b:e9:72:d4:3b:8e:45:b1:46:9a:9f:
52:a9:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:23 2026 by rpki-client