
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier: 7AV0y1GhM2/6aqd4SY7zIjicaev0hJDsruTzc1K8ICc=
Subject key identifier: 9C:35:AF:6C:E6:38:BF:2A:0F:C7:C8:14:F9:B0:10:57:90:8C:EB:8C
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial: 0D50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number: 0D38
Signing time: Wed 22 Jul 2026 18:22:41 +0000
Manifest this update: Wed 22 Jul 2026 18:22:40 +0000
Manifest next update: Wed 29 Jul 2026 18:22:40 +0000
Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: g/UtfeMYvKmx49tJrRNgKSht3NverU3EAFkamOSJBPE=)
2: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=)
3: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Validity
Not Before: Jul 22 18:22:40 2026 GMT
Not After : Jul 29 18:22:40 2026 GMT
Subject: CN=6a610a70-ae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:f3:95:c1:ea:1e:be:47:6d:6c:a1:47:c8:
a0:1e:f4:0f:8e:32:e4:dd:89:b2:2b:0f:23:e9:ea:
a1:dc:35:8e:08:3e:bb:76:12:12:ae:5e:da:36:07:
33:59:08:69:08:ef:72:c2:18:10:1a:21:ca:b9:7a:
fa:5f:72:06:fb:7f:f1:77:3e:8f:48:ad:04:5a:b4:
bf:3f:c6:3f:95:47:58:98:3b:43:88:11:46:0b:24:
dd:a3:41:07:12:7b:29:a8:2d:81:00:d2:c3:22:34:
82:b3:e7:64:31:1e:71:2d:28:d9:45:29:77:76:1d:
1e:b2:14:5b:7e:12:81:40:06:2f:d9:0f:37:5d:d0:
b5:f9:ab:d9:3a:4f:01:e5:e0:4a:7a:56:e8:8e:e7:
21:3e:d5:ee:39:c1:ef:62:e3:81:5d:dd:6f:94:3f:
6d:41:62:52:bc:89:c0:8e:ed:05:31:d4:a2:b4:bf:
5e:73:57:3a:1e:69:ec:01:ab:a6:ae:b9:6f:7d:5f:
ef:eb:e2:6a:7e:ed:8d:1f:ae:68:91:56:61:8e:02:
ae:38:6f:ed:d4:6b:46:27:65:b2:d7:02:8f:cc:97:
1c:dd:44:24:2b:6c:2e:3e:19:0e:b7:96:a4:47:59:
cd:23:fb:7b:ef:03:3b:f1:25:6e:cf:c8:04:31:66:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:AF:6C:E6:38:BF:2A:0F:C7:C8:14:F9:B0:10:57:90:8C:EB:8C
X509v3 Authority Key Identifier:
keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c7:14:57:c3:33:e7:37:60:2e:67:d1:de:5f:1a:fb:b5:76:
9c:f2:0f:47:eb:92:37:f5:6b:f1:ab:fd:a6:4a:8c:0e:cc:2b:
47:fe:08:5a:37:bd:49:a1:4c:e2:b3:97:e2:d2:91:a0:d9:d9:
33:b0:61:c1:e4:07:ea:d0:2e:b9:b6:12:50:a5:ca:0b:0b:e2:
da:37:6c:89:49:47:45:55:1b:bf:e8:87:6e:bc:4f:4e:8f:ac:
5f:17:e8:d0:61:0a:6a:3a:54:be:ef:0c:ea:22:2f:92:3b:ef:
cc:c3:96:2d:2b:21:0f:fa:90:bf:c6:e2:77:22:b9:44:86:8a:
73:11:3a:d6:e2:42:94:bb:34:a7:89:88:1a:46:76:b8:94:9d:
1d:57:47:b9:67:94:f2:c0:de:77:f7:55:12:d0:30:8e:71:a1:
ec:19:4e:17:df:f1:62:6e:13:9b:e1:44:c4:bd:af:03:19:3a:
4a:2f:7e:8c:d9:50:41:4a:09:3e:dc:fd:73:c4:14:33:59:2f:
6f:1c:1f:3e:f0:75:22:bf:ec:09:b2:82:ec:aa:fb:f6:58:cf:
a7:1a:c4:c6:4f:d9:1f:7e:04:37:60:59:d9:75:83:3f:8e:d0:
82:72:da:4b:bc:15:50:8b:c6:67:dd:c3:f6:1a:47:84:ad:57:
7b:e8:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client