
$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier: AZqcbSwn46V/2QwJEVjRbtV6NYRDlNofvbDF4xVNhJU=
Subject key identifier: E5:7C:9A:35:81:01:A8:3B:49:A8:C9:46:27:99:F6:0D:49:26:4B:C5
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial: 3593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number: 3571
Signing time: Wed 22 Jul 2026 14:46:51 +0000
Manifest this update: Wed 22 Jul 2026 14:46:50 +0000
Manifest next update: Wed 29 Jul 2026 14:46:50 +0000
Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: /51/2HhJittJ2KH91tbw9mRglCXGZ0hrp4w95CxfPjY=)
2: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: wkiRfCu/XLYyXw4TOm6YezOpImuhMfUU+dENf0r96zI=)
3: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: cbOF25KS3Ii1neQB3lO33xPaJIbgxTebcwnMlxfjqmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715 (0x3593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Validity
Not Before: Jul 22 14:46:50 2026 GMT
Not After : Jul 29 14:46:50 2026 GMT
Subject: CN=6a60d7db-a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:92:de:bc:0c:8c:be:9c:56:5f:1b:78:1f:
5d:20:df:97:eb:98:1b:35:ee:d7:5b:82:8f:7d:42:
f9:b9:fa:98:a6:10:f1:5f:2a:8e:a2:d1:29:ad:5b:
7e:dc:cb:1f:2e:a6:ad:3e:11:2c:ec:4f:0e:cc:a0:
9c:1b:cb:ae:3c:da:fc:0d:ee:f2:0d:7e:0a:05:a7:
15:82:1c:1c:fd:a5:d0:f6:7c:8a:ae:0a:27:e2:0c:
a8:7f:15:a6:10:46:b3:c8:2c:06:ee:55:83:6d:a9:
bc:58:d1:01:64:ec:1f:6a:72:09:3b:30:9a:d1:2d:
16:35:2f:9d:bb:3f:99:2d:a5:42:af:cb:83:87:2c:
e0:d1:6a:1f:4b:a9:51:83:fb:7e:22:53:5d:e2:76:
46:2e:e8:f0:42:fc:db:3f:db:25:4a:b1:b9:4a:0f:
9d:60:df:26:9f:cc:c8:3c:df:b5:ab:30:33:24:99:
7f:9f:58:73:7a:c7:32:17:4f:51:8b:0e:7f:65:a9:
f4:ca:3b:0d:e1:b9:a6:ac:7e:c7:1a:61:62:bf:1c:
cd:ef:4a:43:d8:d1:8e:56:1a:b9:ab:fe:35:7d:5d:
ba:84:bc:1e:f3:26:f3:93:e5:d5:f8:0f:49:1a:b1:
c4:50:2c:a3:20:4d:d9:81:75:58:e2:1d:5e:6c:c5:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:9A:35:81:01:A8:3B:49:A8:C9:46:27:99:F6:0D:49:26:4B:C5
X509v3 Authority Key Identifier:
keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:20:1b:a0:77:7e:d7:18:d7:28:bf:12:a5:f5:00:ef:53:af:
8f:87:2e:7d:99:d1:a3:bc:0b:6f:4b:29:c5:97:3f:69:97:ab:
e7:fa:24:8d:31:af:31:4b:be:4d:28:22:8c:12:e5:31:e8:09:
fc:0a:e5:2b:f8:f9:df:0d:7d:01:91:d2:06:ea:10:22:bd:75:
55:ed:f3:77:62:3b:4f:1f:c5:69:3d:07:ae:e7:05:90:25:82:
c5:75:6a:80:8d:8b:43:d4:25:a2:89:7e:07:36:d6:b0:81:aa:
08:a3:70:7a:f6:b1:69:2c:c3:20:0c:25:b4:a6:d8:ff:e4:95:
4b:dc:2d:85:c4:0e:ce:12:ca:fc:c5:fa:fa:ae:3c:90:67:7f:
f4:a6:f9:4b:b9:c4:c9:47:c1:e1:f8:e8:31:20:0e:fb:8f:9c:
a1:8c:8f:54:f8:e7:4b:f7:2f:f8:17:3a:e0:20:c4:a7:a6:71:
4d:f2:e7:78:5a:ec:ec:10:2a:b0:5e:0f:f3:36:ec:5b:90:e6:
c1:e0:da:48:d2:fc:58:16:fe:0d:ad:95:06:c6:4a:98:d7:69:
80:73:d1:02:dc:6b:30:c1:2e:a0:90:f2:71:0d:3e:a6:59:6d:
7a:a4:c0:71:ae:a0:83:83:01:a5:46:45:b8:f5:68:2d:a7:5b:
f4:62:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:43 2026 by rpki-client