
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File: t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier: APb3Qp+GFC0uPb/uW1jCLAGoX2YHxc4L1oB3xJ0Tt/s=
Subject key identifier: 83:DA:CE:EE:8E:6E:70:F2:59:FC:42:9C:0D:0B:B1:60:41:EF:95:25
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number: 87
Signing time: Thu 23 Jul 2026 09:30:16 +0000
Manifest this update: Thu 23 Jul 2026 09:30:15 +0000
Manifest next update: Thu 30 Jul 2026 09:30:15 +0000
Files and hashes: 1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: xsbr+mBOgqe4uzCgXI0/p98IxTse4ZtgJloFZAoMPyI=)
2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Validity
Not Before: Jul 23 09:30:15 2026 GMT
Not After : Jul 30 09:30:15 2026 GMT
Subject: CN=6a61df28-e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:c8:90:9b:d7:29:b3:ab:f9:b9:51:c7:80:
5c:f1:47:4c:91:ac:ab:4b:c8:0c:61:5f:dd:4b:24:
12:47:89:b7:8a:77:02:5c:4d:3c:1a:f5:75:f0:83:
05:2c:03:50:4d:c5:0e:a1:f2:7b:08:e6:e9:24:b7:
4d:b8:8e:26:d1:0b:79:34:8f:d9:a6:36:65:7e:71:
94:77:fe:fa:f2:91:02:2d:60:7f:3b:2f:8c:1c:a0:
5d:50:55:9a:56:51:ed:13:c0:cf:e9:d1:a4:ae:2d:
50:b1:d9:80:a6:0e:a3:f4:20:e0:7b:53:4c:07:dd:
9c:1f:81:ae:a5:ed:ce:75:73:5f:a4:71:5b:79:ea:
56:8f:74:70:5b:f1:41:e8:82:28:c0:05:7d:e1:25:
bc:a2:d5:2e:d7:83:73:26:b1:fb:eb:f7:b1:56:83:
07:ee:21:49:b5:b2:7e:fa:86:e3:ed:bb:fd:61:67:
53:90:78:74:21:ed:f5:55:12:6d:15:09:8a:dc:ac:
8e:24:9f:73:e6:31:aa:d1:23:4a:6a:38:8d:08:75:
b4:f8:b8:d3:b1:52:03:c6:53:0d:a4:e2:98:8e:48:
1b:0b:bb:33:b2:e2:59:f7:01:2e:80:c9:45:54:a4:
d0:88:d7:11:87:24:ad:8c:ce:57:a2:8e:c9:8f:ba:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:CE:EE:8E:6E:70:F2:59:FC:42:9C:0D:0B:B1:60:41:EF:95:25
X509v3 Authority Key Identifier:
keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ee:37:a1:5c:25:38:50:74:87:ee:36:b6:5c:cc:df:34:d5:
20:a9:ad:f7:bf:9d:07:92:11:10:6a:7f:7d:cd:75:fa:75:56:
fc:c3:19:29:d6:84:a8:3a:6a:eb:9c:f7:ba:50:8f:82:89:22:
f9:d1:ec:3e:32:38:65:83:63:26:18:ed:3d:a5:0d:be:18:66:
9b:cf:2b:91:06:5e:f9:2a:f2:1b:15:68:95:ab:d3:ce:74:df:
e8:db:5c:3b:5a:e2:22:83:d5:71:c0:87:8c:45:70:9f:ec:5f:
48:3c:9c:1f:02:af:08:e7:f0:b0:72:ba:54:51:a2:8a:09:d2:
51:56:d2:72:dc:1e:bb:2a:54:d0:ef:54:e9:9a:09:d3:5f:71:
98:35:82:18:f5:08:a8:5f:ef:8c:2a:c0:51:3e:30:82:34:ea:
7b:26:d9:50:74:cd:b1:f5:ca:36:9a:63:6e:3b:bf:63:fb:86:
7c:c9:cb:3f:65:a4:29:33:55:e7:0f:5d:2b:56:cf:42:18:70:
77:83:53:f1:c2:08:bf:93:1a:11:e2:f7:81:d3:b0:b2:0b:d1:
ec:4a:03:4f:8a:a4:b2:98:09:a3:30:ad:71:fd:a6:81:b3:55:
2b:6c:91:da:4b:5f:21:94:13:ce:6a:02:66:08:a2:ba:fe:e6:
15:16:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:35 2026 by rpki-client