
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json)
Hash identifier: qPIZgJxwhaddzoWPI2fhJhlPFgdCkHU5h5D2402m4K4=
Subject key identifier: AB:60:C7:96:F9:3F:F3:34:FA:F8:53:C3:05:32:0F:19:6F:B1:1F:AC
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
Manifest number: 027B
Signing time: Thu 23 Jul 2026 03:12:55 +0000
Manifest this update: Thu 23 Jul 2026 03:12:54 +0000
Manifest next update: Thu 30 Jul 2026 03:12:54 +0000
Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: JoN60WtpEoWCLKvvlhuJhETBjK+MEsyVT45gUpC9+Bg=)
2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: Jul 23 03:12:54 2026 GMT
Not After : Jul 30 03:12:54 2026 GMT
Subject: CN=6a6186b7-d89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:5e:24:39:98:d0:bd:02:56:d1:99:85:70:
06:f2:0d:bb:8f:bf:05:b0:a8:12:d7:10:7e:63:14:
32:17:9e:c2:d7:31:7d:6a:0e:7b:24:b9:30:0b:7c:
5a:40:96:4f:2c:07:bc:2c:33:41:dd:b6:3a:58:40:
d4:db:f9:8d:15:2b:28:dd:ba:cf:ea:27:32:4d:63:
be:8f:9f:4a:ed:65:f9:52:0b:b5:fe:59:37:1e:98:
8a:30:ab:b8:47:5e:ab:eb:f7:13:4c:c8:fd:d6:bb:
89:16:d2:14:04:3f:ee:93:c8:94:27:ff:f7:43:94:
db:98:8a:a5:73:35:5e:31:3d:42:4a:31:1b:f2:1b:
a9:21:e4:d4:a4:bb:2a:87:32:70:e6:9f:28:ac:23:
4a:41:aa:ef:7e:da:8c:84:06:c1:07:ce:eb:be:58:
09:46:8d:5b:87:e4:f7:84:a8:47:c1:8b:aa:0d:01:
42:e3:2b:2f:37:48:a5:7b:6e:88:89:09:1d:6f:c0:
f4:00:c2:91:94:d2:83:e0:22:b1:dd:b2:fa:9e:6c:
11:0a:1a:23:02:7b:75:cc:3c:7c:97:1d:01:c4:d8:
51:b5:89:3f:0f:a9:22:34:b9:62:c5:40:cf:c8:9d:
86:85:88:3d:31:19:de:ce:5c:03:3d:94:8f:97:d2:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:C7:96:F9:3F:F3:34:FA:F8:53:C3:05:32:0F:19:6F:B1:1F:AC
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:12:56:17:bd:7e:83:b7:c7:35:7c:24:46:45:10:84:f3:
da:a4:0e:b9:51:d0:ae:56:27:d4:2e:52:a8:1c:3d:5b:3e:e9:
0d:12:c6:f5:8e:ff:d0:8a:19:ac:5e:0d:e1:86:4c:a3:b3:f4:
6d:c6:4d:20:85:d0:62:b4:51:9f:52:e0:8e:d4:90:96:99:15:
fe:7e:df:83:21:69:a0:f8:38:c1:3e:db:1e:1d:33:95:df:69:
ae:b9:d2:89:6f:61:bb:69:8f:94:3e:0f:05:9b:da:89:25:17:
d9:23:b4:08:10:f9:5e:6c:db:62:fb:04:71:35:9f:36:e5:5c:
56:36:93:68:07:42:16:97:5f:a3:b6:3c:6d:6e:c9:a8:57:0f:
a7:8b:9a:7f:ae:5f:ec:f2:1e:2b:e9:56:48:f2:2b:78:06:51:
88:ba:3e:c2:0a:a6:a8:48:75:4e:0b:4c:79:13:19:1e:40:7b:
b3:11:2d:06:19:1a:7a:b2:bf:3c:c5:19:54:ce:bb:6e:f3:bc:
31:4c:ee:41:61:5f:c6:bc:fa:84:d6:8c:86:89:5d:45:a8:84:
a0:63:fb:a2:f2:96:b3:c2:97:f8:f5:19:60:f5:36:d2:44:24:
44:13:3c:08:8b:58:2e:0e:35:97:01:24:27:bf:be:5f:b7:dc:
c1:23:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:31 2026 by rpki-client