
$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: mU2cSDjp7hO/g2MonSOaLcHR5acOim4abpQk6ZWjUyg=
Subject key identifier: 32:A3:E7:EF:7D:EB:16:24:EC:D5:2F:D6:BA:91:1B:B6:B1:8C:74:8E
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C6F
Signing time: Wed 22 Jul 2026 18:58:39 +0000
Manifest this update: Wed 22 Jul 2026 18:58:38 +0000
Manifest next update: Wed 29 Jul 2026 18:58:38 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: eOs2cYH+kTTYg+wOUc3UACaRZQUsXQQKOtsMkeceQUI=)
2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Jul 22 18:58:38 2026 GMT
Not After : Jul 29 18:58:38 2026 GMT
Subject: CN=6a6112df-fb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:13:dc:5a:be:7d:3b:34:bc:2c:6d:e7:07:
ee:1a:bf:57:fd:af:3f:31:83:66:c4:39:2c:85:71:
08:86:f1:4a:37:9a:bd:7f:4a:32:ed:91:c9:49:b7:
c9:92:c9:73:fd:0f:27:7d:c5:6a:bd:71:b5:69:6a:
d3:a6:1a:2e:00:24:4f:3b:9c:8d:d6:41:53:52:03:
eb:3a:c8:ec:69:f2:07:a0:6c:47:01:73:46:df:67:
74:d5:38:62:4a:7a:53:46:b3:d5:02:1f:70:ca:e4:
13:5e:bd:24:37:9e:47:69:f9:be:4d:f1:57:6e:35:
07:dc:f1:a0:16:d9:5a:d8:5d:10:2f:51:70:7f:e1:
bf:d1:3e:7a:58:65:b4:f8:c2:db:a4:db:66:dd:fd:
b2:be:75:ae:d7:f2:e6:59:72:31:28:15:dc:10:c0:
e5:9b:b8:1d:31:6c:51:36:a0:9b:aa:3c:b1:23:43:
00:d8:29:05:be:6f:b1:9d:1b:f1:f8:2c:e2:09:8c:
b1:8b:ac:ed:8a:03:5a:99:89:0c:76:a1:1e:dd:eb:
24:28:2b:61:db:60:fd:93:83:8e:c9:d8:34:5a:71:
ee:bb:91:81:c6:2d:85:7b:60:d6:eb:e2:be:60:3f:
a5:8f:1b:22:b1:0a:94:72:83:36:96:f7:01:4d:fc:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:E7:EF:7D:EB:16:24:EC:D5:2F:D6:BA:91:1B:B6:B1:8C:74:8E
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:40:3e:bb:16:64:93:9d:16:f3:43:eb:15:a8:3d:50:58:
61:e1:9a:b4:06:8a:f5:96:05:a8:91:09:98:51:2d:79:63:18:
bc:5a:82:d9:45:0e:94:e6:18:85:ad:fc:e1:ea:29:85:24:f9:
3e:de:a5:4f:44:ed:53:7d:c2:22:71:5d:46:6a:34:0a:25:11:
95:80:63:9b:e6:cc:3b:09:ca:dd:3a:06:e9:cf:1a:53:67:4c:
a7:bb:e3:e4:ff:64:d1:50:f8:87:a6:f2:af:bc:e3:9f:f3:9f:
91:25:c0:b4:1e:2c:9e:8c:a1:21:9f:e4:ec:42:00:7b:45:23:
96:4d:41:30:5f:c0:98:1f:0f:fe:d9:ce:da:d7:0b:46:cc:f6:
97:c6:fc:be:df:a7:b9:86:6e:ff:3a:9f:eb:85:73:b9:b1:0d:
4e:26:59:78:03:1d:f5:1f:cc:51:69:55:57:a8:58:9e:17:a0:
86:a7:e8:80:b9:4f:8d:27:d6:e4:00:de:36:4d:66:fa:57:aa:
0f:f6:c5:a7:38:e8:97:69:3c:99:5d:72:26:b7:72:9f:c2:9a:
cf:13:bc:47:26:7c:82:7f:d3:91:43:10:af:65:5d:63:c0:d2:
37:54:dd:ac:81:87:c6:8d:4c:35:89:fe:9b:66:19:20:e9:91:
52:08:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:02 2026 by rpki-client