
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json)
Hash identifier: l7DWGEJE8Mk1AWMoRgoxOXikEpxWJ6IfAf6u+qAhih0=
Subject key identifier: 83:93:2D:9B:8A:E9:05:E8:A9:61:CF:7F:82:3A:85:9D:57:75:7F:80
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
Manifest number: 0142
Signing time: Thu 23 Jul 2026 06:59:44 +0000
Manifest this update: Thu 23 Jul 2026 06:59:44 +0000
Manifest next update: Thu 30 Jul 2026 06:59:44 +0000
Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: 6gi3waLlg0v4mjSs0xZSO4pX2nZeEhH5GLQO9HMkxmM=)
2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=)
3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Validity
Not Before: Jul 23 06:59:44 2026 GMT
Not After : Jul 30 06:59:44 2026 GMT
Subject: CN=6a61bbe0-48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:41:26:0a:2a:f7:42:41:93:be:d1:09:6a:
4d:31:d3:d6:9c:08:40:a7:c1:5b:f7:b9:c8:71:81:
13:d3:73:53:ef:e9:a0:cc:b0:3d:96:68:00:ce:2a:
de:3b:19:f7:6a:3f:94:10:ac:1b:f4:98:fc:09:3f:
34:82:f7:60:76:20:ea:5d:6f:d2:c7:53:f9:ed:7e:
df:ad:24:3e:49:f3:81:83:d5:7f:53:73:87:90:9d:
2d:70:3a:26:69:a9:ab:9f:e3:e6:6d:18:c2:8c:29:
86:a2:e5:5c:d3:fc:bc:a6:af:1f:ea:69:c3:ec:e6:
be:36:e5:61:8b:81:33:dc:c0:eb:eb:ad:ff:58:44:
46:e9:06:f5:b3:ca:f7:30:4d:5a:df:82:06:8c:1c:
a5:c7:d3:c4:e5:0d:2b:0f:59:49:19:e3:e8:38:c2:
ad:d3:7e:2d:33:94:53:cc:a3:32:95:aa:52:2a:79:
d2:47:bd:e6:d9:7b:80:5b:97:65:62:40:b6:8a:d5:
43:02:c1:78:f1:af:ad:28:40:74:fd:d1:b6:38:e6:
42:0c:64:af:6c:6a:c2:41:69:9e:fb:fb:31:58:e7:
c0:95:50:68:f1:bb:51:65:47:ce:69:a8:60:f9:d1:
25:bc:03:1f:8a:fb:c8:99:16:31:84:43:21:c6:18:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:2D:9B:8A:E9:05:E8:A9:61:CF:7F:82:3A:85:9D:57:75:7F:80
X509v3 Authority Key Identifier:
keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:e9:19:52:ba:a2:a4:59:82:fa:38:2d:64:23:6b:e5:c9:
bd:d8:a9:93:66:f2:05:c7:d4:f4:00:f5:51:04:d7:2c:53:83:
ca:36:10:e8:65:88:cc:e8:08:fc:30:23:74:97:72:75:40:1c:
b0:e6:1e:77:bd:82:4e:49:22:1c:e7:10:ac:91:93:f3:ff:ce:
22:5b:c1:d1:f9:04:c5:be:6c:f9:5c:e6:31:34:ad:f1:c1:b0:
9d:9a:57:e9:07:29:10:0a:e5:8e:80:36:15:2b:53:bb:e5:b6:
ef:3c:2b:c5:11:eb:b1:e2:c6:11:ca:b9:a0:07:93:19:cb:e0:
87:46:fa:5c:24:3e:0d:ad:77:08:08:f6:da:0e:98:87:d0:a5:
6c:35:53:a8:aa:7f:c0:cf:41:4d:b3:65:29:1a:33:f3:5d:b8:
3a:67:c2:7f:a8:3e:de:8a:b0:78:be:5c:1b:44:e7:bd:8a:3d:
69:67:8f:cb:76:4b:71:c6:4d:54:b7:d8:5c:25:4b:8e:fe:af:
52:0b:58:b0:d7:05:3e:d8:43:61:d2:a5:e2:c9:09:d5:79:ef:
5b:9c:21:ff:09:3a:9a:c0:5c:bb:7e:fd:b7:4a:44:1c:4f:97:
d2:f8:c9:7c:09:88:3d:10:1d:55:9e:a0:d8:ee:8a:34:08:38:
0a:b5:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:55 2026 by rpki-client