
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier: 2Et+LqYuTV6gDeFKP9+YpadONPXyMnWpOGmaYGiVcek=
Subject key identifier: 0F:71:84:1A:29:47:E2:25:EC:E9:4C:A0:9E:53:2F:38:01:DB:F0:65
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number: 0120
Signing time: Thu 23 Jul 2026 07:28:44 +0000
Manifest this update: Thu 23 Jul 2026 07:28:44 +0000
Manifest next update: Thu 30 Jul 2026 07:28:44 +0000
Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: ucK/8S9UwL4vaaFZ/XhC6wnbdp0s9uga1i96yo4Kxto=)
2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: VwphhGhSSxLYmxwzAbdpnMPMVv5nEltMnX3C48e6dF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Validity
Not Before: Jul 23 07:28:44 2026 GMT
Not After : Jul 30 07:28:44 2026 GMT
Subject: CN=6a61c2ac-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:89:bb:e5:d7:82:a9:f6:24:9b:63:aa:30:
86:8c:fe:c1:0b:0a:06:32:cf:46:79:1a:25:23:53:
72:cd:5f:0f:c2:30:5a:cf:fc:89:46:03:84:d5:be:
e2:08:bd:8c:62:0b:f1:fb:cd:86:23:ba:1e:5d:30:
0f:84:4a:bd:a1:28:ed:60:a5:e0:fb:b9:68:e9:67:
10:05:30:2b:7a:c4:8e:e4:81:0d:6b:15:bb:7b:50:
01:38:05:a1:44:eb:fc:8a:ae:ae:20:29:8b:a8:69:
f5:45:57:2c:56:4d:0f:d4:4d:47:35:e5:70:1b:54:
9c:9c:ba:3a:bd:c7:ce:68:79:e3:28:c7:e6:51:bd:
7d:59:25:de:ba:e5:6b:b6:73:7e:6f:b5:25:37:71:
b0:a1:e1:16:cd:99:2c:2c:08:02:11:40:13:55:75:
80:c3:a6:8a:d2:bd:0d:8e:a6:fb:80:10:ab:fe:e9:
25:53:e9:7a:f4:fa:6c:b5:e0:59:1d:f6:52:d3:15:
4a:eb:a6:ff:57:d7:7e:30:b7:0e:86:3b:fa:4f:d1:
52:b1:05:24:57:59:d4:04:9b:65:55:91:f3:e8:7d:
5f:0c:57:1e:14:e8:04:4b:85:a2:93:59:67:b1:99:
47:42:3e:fc:76:45:e7:84:b1:e6:32:d2:de:ee:bd:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:84:1A:29:47:E2:25:EC:E9:4C:A0:9E:53:2F:38:01:DB:F0:65
X509v3 Authority Key Identifier:
keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:69:c4:a5:2c:9f:06:e3:12:01:47:5a:9f:65:6c:b1:38:
c0:67:3d:a0:24:dc:55:e9:3a:4f:3d:53:da:5d:72:23:c6:71:
50:dc:b1:f7:ec:ea:32:77:cd:11:54:de:1e:4f:c2:ca:81:66:
32:fb:40:f1:dd:46:08:00:f0:fe:24:dd:dd:7a:ae:37:cb:81:
62:77:f3:0a:88:99:06:49:74:8c:1c:2a:f9:f7:39:c9:78:31:
e4:5a:56:f3:f7:6b:a2:25:a7:80:4a:95:14:bf:f1:13:7a:e5:
44:a2:ff:19:f5:1b:ab:84:12:ca:9a:f4:0d:20:58:83:79:0d:
79:20:0a:85:e4:0c:a1:a8:ed:1d:16:f3:d2:54:53:43:96:6a:
e7:15:20:12:27:75:b4:98:dc:82:48:3d:2d:11:e7:ce:fe:f0:
e9:73:08:7c:91:cc:da:ce:02:4e:d3:33:78:51:96:9d:c6:de:
20:29:ee:a2:35:50:73:be:6a:4e:4a:da:74:93:c7:13:4a:05:
b4:17:77:54:a6:1f:94:f2:2a:fa:63:c8:fb:67:c4:fa:62:d4:
09:37:e7:11:e0:ba:32:a7:fa:bf:e4:c4:b3:51:41:ed:92:cf:
d7:ef:f4:3c:43:cb:57:b6:03:b3:c1:81:0e:bc:8f:1f:ce:55:
85:f4:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:26:38 2026 by rpki-client