
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier: JK0lBvC7R2HWJM6gttn4gzpJhWUrpSgEPMdJ+RLevh0=
Subject key identifier: E5:E6:9A:F0:93:43:42:FB:8C:82:36:3F:F5:17:AC:2D:06:D5:30:F6
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer: /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial: 22E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number: 22CD
Signing time: Wed 22 Jul 2026 15:54:59 +0000
Manifest this update: Wed 22 Jul 2026 15:54:59 +0000
Manifest next update: Wed 29 Jul 2026 15:54:59 +0000
Files and hashes: 1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: P4qruqjbcUH9fr47JiJ2UweTGvjG6fKMkIi+JjYrmf8=)
2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8928 (0x22e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Validity
Not Before: Jul 22 15:54:59 2026 GMT
Not After : Jul 29 15:54:59 2026 GMT
Subject: CN=6a60e7d3-dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:9f:1f:89:82:90:d9:f9:93:13:b4:2b:ae:
4f:8b:07:06:6f:10:51:44:12:15:fc:05:1b:54:64:
1e:0d:f3:86:e5:2d:d3:09:46:a7:45:31:b1:b9:17:
69:54:3f:0c:18:14:ba:b2:40:82:a5:80:6f:09:50:
0b:15:8c:3d:31:a0:17:73:1e:37:7b:e4:eb:08:fb:
8e:b7:e4:a2:91:23:de:ab:60:33:a4:04:5f:1d:84:
29:be:ae:20:8c:97:6a:21:c6:4a:8e:7e:39:42:b3:
4a:4b:f0:58:4f:85:1d:ac:fa:28:38:9b:8f:ad:56:
66:89:52:db:06:d8:54:af:23:6b:17:13:be:dc:85:
77:f7:02:48:d2:11:54:a5:7e:50:86:54:4d:ef:e9:
21:4f:71:48:da:c5:df:de:9a:55:0b:f1:e5:02:97:
e3:0a:46:cc:ec:45:b4:ce:f9:7a:73:79:91:00:f3:
fb:d0:2e:ec:63:c7:7e:79:e2:4d:b9:95:91:fc:cd:
a1:34:3e:75:73:5d:30:cc:76:77:60:5e:f9:4c:a7:
34:65:10:90:11:06:a7:2f:5e:64:0f:04:50:f1:20:
67:b0:39:9b:09:be:72:9a:8b:71:25:28:52:22:a6:
e0:c0:2d:49:65:9a:38:d6:84:60:7f:0a:3e:f0:f9:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:9A:F0:93:43:42:FB:8C:82:36:3F:F5:17:AC:2D:06:D5:30:F6
X509v3 Authority Key Identifier:
keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:68:9f:b4:78:6d:87:7a:0f:bd:7d:a9:44:3e:8f:e1:b0:75:
62:eb:e7:56:82:cc:a5:80:bd:81:92:8f:6d:b6:fd:ab:ca:e4:
41:2d:46:1c:a9:db:11:e6:a2:c6:58:ee:be:12:26:73:b8:92:
8f:1a:5a:e6:95:e4:5c:1e:5c:25:8d:16:99:1e:e4:c9:8e:78:
bb:ea:b0:a3:d4:01:e5:d5:ef:83:ec:ac:36:cf:ab:85:e3:50:
68:93:eb:ac:92:b3:6c:96:b7:c4:97:99:f4:92:89:0a:14:55:
69:a6:04:59:3f:45:bb:33:3b:78:f6:f0:3a:f9:73:d5:e6:4d:
bf:40:90:76:ca:89:b3:1e:83:66:39:a2:5a:d5:53:eb:bf:ad:
41:4c:37:58:e3:b9:4c:9e:97:38:0d:c0:09:78:bb:c9:f0:ba:
8f:e6:89:1b:1d:0a:e7:5c:00:07:fc:7f:82:fd:c3:ee:8b:f7:
3a:ae:4f:d1:dc:66:bb:50:1c:06:61:2a:4b:ed:3c:f6:2a:81:
35:b9:a5:e8:72:6f:9e:50:9c:e6:ce:1c:06:b4:cb:d0:fc:9f:
6b:d8:9f:f3:ff:87:7e:ca:92:19:5b:ce:5e:38:e3:f7:08:69:
6c:45:3d:50:18:64:ce:90:d7:7c:77:9d:81:a4:45:f8:b3:67:
75:7b:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:05 2026 by rpki-client