
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier: 1CTxaXsElaJ633PJLjd+b4jVjHMzOddT3O8jNcFDzoc=
Subject key identifier: 95:60:5C:56:DB:E6:AB:02:84:36:48:5A:B5:DB:35:74:93:4B:D2:1F
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 057F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number: 0559
Signing time: Thu 23 Jul 2026 00:14:12 +0000
Manifest this update: Thu 23 Jul 2026 00:14:11 +0000
Manifest next update: Thu 30 Jul 2026 00:14:11 +0000
Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: z0gFkoabNO6oiUp40vxsjYAVJuZJvYOo4rif9wDLgQU=)
2: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: XS0xAK4nnF7Dq2UBrvrKqZgDFOkN/XmKJyB81kCEows=)
3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 6vDTx1Sxq8tUZv93hoBcq2yOxm15beDyF9zkAam3IFw=)
4: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: b5XLxKmuQjlgPRC2YJU3aeX9AvktKsDS2h1VBTEltQw=)
5: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: VCY6VieVb7TG2U03HIBFTaPiwgKuFeeeP7S9R6dlJ6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Jul 23 00:14:11 2026 GMT
Not After : Jul 30 00:14:11 2026 GMT
Subject: CN=6a615cd4-0e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:b3:0e:54:77:6e:d0:65:2b:fc:df:10:1d:
e1:12:ae:62:29:17:0e:f7:63:3f:c6:e5:bd:d2:5e:
e6:4b:ad:b3:db:93:85:5d:cf:2b:6e:13:00:7b:9a:
56:13:fa:43:fa:ee:66:d9:59:76:ee:c8:ca:97:8e:
e8:e0:b8:59:40:8f:d4:f6:78:7a:c3:b0:4e:60:32:
8b:64:3d:0f:e6:68:d8:46:99:85:5d:ec:f0:a1:80:
f7:5b:c0:d5:ed:6b:9a:ac:09:a6:04:ed:a6:25:84:
c3:17:4d:19:c5:ff:72:3a:6b:c9:c0:ea:6b:65:e5:
a8:0c:3d:52:ef:70:7e:1d:d0:2a:1c:d0:28:19:6c:
8c:cd:ad:bf:eb:58:51:4d:e2:29:bd:db:2b:88:89:
79:c3:b7:67:50:3c:76:d3:c5:c1:f5:3f:a9:68:eb:
2c:d0:cf:31:c9:32:53:17:d8:00:3c:84:91:f0:91:
46:42:dc:f2:c5:12:08:87:36:91:4c:00:11:4d:a5:
ce:f8:31:81:54:b9:6b:41:84:8d:33:0e:54:4b:8b:
3a:1b:dc:da:62:9f:35:51:df:02:de:35:44:55:5b:
75:16:d3:b0:90:28:4d:09:33:8f:e5:75:db:e2:34:
b4:43:ef:44:05:15:9b:c3:36:4e:cd:9d:d3:75:97:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:5C:56:DB:E6:AB:02:84:36:48:5A:B5:DB:35:74:93:4B:D2:1F
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:6b:c3:97:c9:1f:17:fc:1a:c8:7a:01:c4:89:fa:fc:a8:
e3:83:f4:5e:c3:a4:85:3d:88:9c:87:86:ee:59:dc:dd:19:26:
9c:83:23:8a:0f:01:d4:70:b9:01:eb:76:ee:4f:d7:5e:0f:6d:
26:18:af:e6:cb:6a:8d:c3:d8:fa:33:0c:8a:16:ed:4c:93:b3:
e8:14:78:3c:4f:9f:15:52:bd:28:c0:61:ed:6a:3b:70:25:a1:
39:4d:b9:84:e6:4a:81:d7:22:e3:8a:77:5e:1b:03:c8:59:ea:
57:68:67:52:c5:a1:37:78:fd:7a:55:2d:a5:40:56:6e:28:66:
85:f3:8f:96:26:e7:76:c3:7c:8e:00:7c:6d:71:08:b6:3d:44:
b3:2a:e9:02:1c:b5:2b:68:0c:ab:0d:27:da:1e:24:97:a8:ea:
e8:61:4b:be:4d:79:02:d6:72:ab:ac:2c:33:bc:b4:35:1a:19:
40:46:8b:cc:8b:af:6f:fb:1c:e6:db:57:c9:47:87:45:3b:60:
c2:40:0c:ee:8e:82:7b:55:1d:11:cf:b4:8c:c4:a9:37:f7:f9:
d4:a9:f3:eb:31:6f:8a:9f:3f:19:c1:6b:98:db:11:d9:fa:49:
e3:9d:52:0e:a6:0d:07:63:09:4b:26:2a:a1:70:64:94:57:61:
5a:e1:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:23 2026 by rpki-client