
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier: A2sezU2wdbcQ8xQIuRQrENXaz9H2I9JBYrqhTKrENtw=
Subject key identifier: AD:D3:EC:13:88:A8:B0:FA:FC:EE:31:A6:EA:F2:84:57:BC:85:41:90
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial: 0A27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number: 0A18
Signing time: Wed 22 Jul 2026 20:11:08 +0000
Manifest this update: Wed 22 Jul 2026 20:11:07 +0000
Manifest next update: Wed 29 Jul 2026 20:11:07 +0000
Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 1AqDQRsM3qUrsE91EkuI4LZuOQLj9M157WUY/wC8S9g=)
2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Validity
Not Before: Jul 22 20:11:07 2026 GMT
Not After : Jul 29 20:11:07 2026 GMT
Subject: CN=6a6123dc-1c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:d0:95:40:34:25:94:e3:8a:af:7d:7b:8e:
17:29:43:45:d0:64:1d:ef:2f:8a:5f:f8:94:d4:ad:
2a:7f:3a:d3:bd:de:57:bf:47:03:e0:bd:c8:32:f0:
25:6b:9e:1e:6c:eb:e9:9a:51:5a:38:d0:80:bb:30:
25:af:1c:a1:ae:64:29:1d:ce:e2:d0:62:4b:09:ee:
11:79:2f:62:f5:25:51:67:37:9f:6a:94:1c:bd:13:
24:73:9b:88:8a:f3:f9:42:dd:46:14:7b:d9:68:84:
e3:22:aa:ae:99:68:f4:1d:8e:2d:b8:8a:7c:2a:94:
27:f0:f7:f0:8d:56:bf:22:83:6f:c3:88:26:30:6e:
a4:18:61:cc:98:b6:aa:f9:b4:b4:36:1a:7a:ec:a5:
70:4c:e3:04:bd:60:36:46:17:5f:a1:52:b3:92:16:
2b:08:3b:88:74:f9:e4:13:3a:83:fa:19:a4:a5:a6:
f4:6f:39:a6:42:37:a0:31:97:ac:a5:f5:4e:4e:69:
19:de:e9:dc:30:25:43:a9:5a:bf:0b:16:ca:b3:35:
8d:47:5a:03:72:3b:33:db:bb:51:25:17:8c:42:cc:
7f:5a:40:b7:ea:81:3b:9b:cf:26:89:c4:fc:80:1c:
c6:2e:89:e1:40:86:91:04:97:37:4d:fe:94:e0:6e:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:EC:13:88:A8:B0:FA:FC:EE:31:A6:EA:F2:84:57:BC:85:41:90
X509v3 Authority Key Identifier:
keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6c:d1:7f:a3:06:fa:59:62:b4:28:e3:dc:18:a6:1b:3e:bb:
da:f2:e5:07:08:97:52:77:ea:30:db:7a:85:47:ba:d6:c0:e7:
81:33:44:96:df:62:53:2f:b7:ee:4e:24:cb:af:f0:0f:90:7a:
67:9b:af:60:db:e3:a3:30:53:e2:58:ef:de:63:35:c5:88:3a:
d9:cb:ae:00:88:e3:26:d1:d5:cf:ac:c1:3b:ae:18:44:6c:5b:
a9:1a:f2:b2:ae:78:8b:22:78:94:de:a2:62:5d:b7:69:39:91:
b2:6b:30:c5:8d:ee:94:90:98:df:14:12:cb:4e:a2:d7:ae:65:
6f:d2:2a:65:7b:e5:1c:e8:c4:8d:a9:24:c7:74:f9:45:d0:ae:
19:d8:83:d9:a5:07:39:72:35:86:81:22:4a:18:30:42:e2:90:
66:94:18:68:28:16:fd:12:66:34:1c:b2:a1:11:23:6d:ef:05:
ec:d8:3b:98:27:44:97:36:d2:a4:d5:c6:c0:27:0b:fa:88:74:
c2:95:d3:d5:04:90:49:cd:42:52:ad:37:c8:8b:72:5d:ef:22:
43:52:91:1e:cb:a2:05:bf:64:2a:4a:e3:45:74:30:c8:19:4a:
51:8a:66:d0:e0:ed:88:d4:c2:d6:1b:e4:6e:23:82:01:cf:ae:
c6:e7:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:31 2026 by rpki-client