
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: nOaGAuJE+uK64K5jYJ4T8XePESrioQV1Fkn1w+KIqXY=
Subject key identifier: FE:8D:1F:92:FF:69:76:64:3D:82:4E:D4:C3:81:AC:59:4F:91:40:14
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 02CA
Signing time: Thu 23 Jul 2026 20:00:02 +0000
Manifest this update: Thu 23 Jul 2026 20:00:01 +0000
Manifest next update: Thu 30 Jul 2026 20:00:01 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: RyG9p4/mhOEfmL2BtDIHfwZY/XF+IiMjBbh0Wy3el5M=)
2: 5E3F0D8886D011F1949EA0087EA30FBC.roa (hash: P0+Y/8yx8QyRMhEOnhcl/4I6UtqHOLkYkX2bGT2359Q=)
3: 6BAC9870794A11F1A904CD4C78A30FBC.roa (hash: L4KhaPWQcuozH+H8Uh8u+fwbs6T7fPYTjck/bnA9GqU=)
4: 6AACACDA794A11F1A904CD4C78A30FBC.roa (hash: g5+aApGy18irZconjhjVDPxZ5GYIWn8hvJMUMTco7Nk=)
5: 69055896794A11F1A904CD4C78A30FBC.roa (hash: uecRK6YfF7BvvaTMgaGxp70x0mStpeizzZjxJNqfR6s=)
6: 69977ED8794A11F1A904CD4C78A30FBC.roa (hash: 6rkOZBzgRAOFT2QO8yVqgKMcCxXBW4waWEOC9Ntz25M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 23 20:00:01 2026 GMT
Not After : Jul 30 20:00:01 2026 GMT
Subject: CN=6a6272c2-5cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:99:1c:6b:77:a4:67:53:47:8e:c0:8d:41:
75:69:2e:68:c2:a1:b3:5a:1a:f2:e2:60:1a:26:00:
b9:ce:a1:e3:bd:ab:ce:2d:2c:76:68:a0:8f:29:37:
81:44:6a:29:8b:e4:e6:34:0f:e1:e7:35:ed:c5:f3:
9e:bb:fe:f8:60:5e:d4:5c:77:a4:13:fb:3d:fa:27:
11:48:b2:71:8a:f1:fd:9d:fd:91:33:2b:d0:46:af:
b7:10:23:10:b1:26:eb:5f:a6:dc:5d:01:aa:0e:c2:
63:0a:63:9f:d1:b7:83:d6:64:3d:ae:2d:55:c2:f2:
43:bd:ac:65:ae:41:1d:6d:ed:69:e9:91:14:66:b4:
9b:e1:b7:b4:bd:c4:b5:b9:95:8b:de:38:53:5f:11:
da:92:5c:30:f9:7a:76:92:99:ad:9b:24:de:84:2a:
0d:7f:98:dc:33:fd:1c:1f:4d:e0:0d:74:36:80:ef:
49:bd:e8:e1:65:29:90:3b:81:5d:a9:f0:68:e8:fc:
30:78:0d:a4:6f:ad:30:ca:48:be:78:a0:92:18:e8:
4c:78:c0:72:5c:58:cc:96:7f:39:ec:7f:6d:57:fb:
2b:95:9c:f9:b4:a7:83:dc:65:a4:2c:99:3f:b9:e4:
70:1b:48:93:7f:c7:b2:71:0a:d6:27:c2:cb:f5:23:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:1F:92:FF:69:76:64:3D:82:4E:D4:C3:81:AC:59:4F:91:40:14
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:9f:08:37:77:91:94:45:ab:b4:16:22:3f:ea:c7:c3:d4:
2f:85:20:b9:00:c1:5c:03:18:2a:e8:6b:9a:92:00:34:01:60:
3c:fd:36:85:e1:c7:2c:97:55:77:ef:c3:a9:cf:c1:3e:8c:f8:
a5:f4:bb:fd:91:30:a0:bd:bc:04:02:65:cd:aa:d8:0a:d9:3f:
1b:3b:d6:0f:08:e2:43:27:46:2a:e1:d8:a0:0a:0c:9d:b9:5f:
f0:a7:31:9b:44:69:c4:f1:65:27:aa:69:ab:87:18:ef:e1:25:
92:3b:e8:ff:e0:c2:78:ec:18:46:56:d4:20:73:6b:60:9d:9f:
7c:5b:8d:94:94:39:78:1b:ec:a2:6d:e7:15:fc:8d:d1:ef:9c:
26:f6:5b:f4:d0:92:3d:7a:05:92:67:df:a8:c8:70:9a:78:97:
35:cf:a6:dd:4b:0e:6c:db:d8:b2:67:5e:dc:82:ea:31:11:e7:
e8:f5:60:ac:2a:3d:e0:e5:a3:cd:c8:47:6e:b4:e1:e5:1a:9d:
bb:b2:09:aa:84:0b:39:58:dd:e4:4c:44:3c:c8:c7:00:4d:3e:
47:8d:4a:2e:10:87:b4:2b:9e:94:71:25:77:45:5b:09:41:1b:
2b:76:f0:1e:bf:d3:a7:39:e4:8d:16:29:44:87:30:77:e0:4b:
c8:0d:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:53 2026 by rpki-client