
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json)
Hash identifier: XZd99mcS3W2TyRIum9NmmfITmzi5H9GQbNsSTOQCiKw=
Subject key identifier: 9B:7C:00:AF:39:7A:E3:62:41:00:8D:D4:C0:3A:34:9E:52:BC:91:76
Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Certificate serial: 35FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
Manifest number: 35B7
Signing time: Wed 22 Jul 2026 14:28:03 +0000
Manifest this update: Wed 22 Jul 2026 14:28:02 +0000
Manifest next update: Wed 29 Jul 2026 14:28:02 +0000
Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: rNbaa5RG60kMEUb+CSfTqPlgdyGk8UpjtzbnPwVyAWs=)
2: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=)
3: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=)
4: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=)
5: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl
rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13820 (0x35fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Validity
Not Before: Jul 22 14:28:02 2026 GMT
Not After : Jul 29 14:28:02 2026 GMT
Subject: CN=6a60d373-761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:0f:3e:7e:f7:41:50:0e:46:0c:07:54:cb:
7d:cc:fe:5e:4e:55:b9:67:ca:56:52:b6:11:a0:0c:
26:f6:4d:aa:c8:ad:d1:8f:cc:8e:62:31:b0:3d:f2:
23:62:ae:96:5a:b3:fa:26:a0:85:0e:9c:a5:0e:1c:
0a:43:ae:81:bf:0d:5c:b1:6a:9a:dc:7d:57:a2:cc:
3f:57:d0:38:f0:53:5b:dd:be:a3:75:f4:d6:fa:42:
04:fa:f0:bc:50:3d:de:f5:3b:93:e7:b3:88:c2:1f:
62:67:ad:3b:7b:7f:a3:3f:d2:5b:cd:fc:6a:1a:40:
8c:a3:68:17:0e:cc:1f:ae:3b:33:b8:89:35:a2:5b:
82:87:17:c2:f2:45:71:a9:bc:88:60:55:03:9a:60:
97:d9:2d:6c:3c:91:dc:c8:29:9b:fa:e5:c4:10:20:
b6:69:0d:c6:a6:4c:ed:7d:a7:28:ef:cc:27:02:f4:
0f:d9:8d:41:b5:aa:ce:71:67:2c:9c:22:0c:85:b0:
16:ca:2f:f5:71:bd:cf:e3:b7:4f:91:ac:51:35:eb:
97:a6:83:9a:8f:04:4a:d9:8c:75:b6:9e:e7:2f:6a:
37:e8:04:42:43:e8:bf:84:f7:f3:d4:e1:b9:96:e7:
77:f4:59:1c:6c:3e:7f:ba:48:f6:15:f8:01:98:86:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:00:AF:39:7A:E3:62:41:00:8D:D4:C0:3A:34:9E:52:BC:91:76
X509v3 Authority Key Identifier:
keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4e:e7:89:fc:46:6b:95:e9:34:09:02:48:d1:1c:6c:db:ce:
24:24:b4:ce:01:45:3c:02:8a:fb:11:7f:12:11:21:27:22:7c:
f6:15:2e:9d:1e:70:76:29:26:97:74:41:79:a2:92:5f:d8:7e:
d6:93:42:aa:db:88:8b:32:33:37:66:69:7a:20:de:60:37:0e:
6c:60:24:a0:94:86:a2:3e:a4:ca:01:52:1b:27:9b:1c:d8:3e:
6b:8f:ab:ca:2e:f9:51:cf:d2:4d:a1:81:ff:66:20:fb:e9:16:
9f:8c:1d:25:42:32:84:31:38:c5:60:d8:ac:e1:85:92:9e:69:
55:8d:07:8d:47:26:19:94:ca:cd:10:71:f5:e7:31:05:78:78:
5d:b2:ef:df:ff:20:f8:a1:8c:cc:05:7d:ff:f8:84:b2:0c:b3:
dc:dc:e3:7a:1e:df:1d:bb:f8:ac:75:31:d0:72:08:9f:f9:0f:
68:0a:2a:9c:ff:81:ec:a1:49:06:36:52:05:e1:7c:69:d7:cc:
04:62:76:28:a2:0d:96:1e:75:7a:58:b0:25:d3:e8:93:a4:db:
a0:ad:15:60:57:54:d6:e4:af:a8:cd:1c:07:ca:bf:9d:a4:39:
3e:f4:27:a9:0e:89:e7:d1:4e:8d:97:87:e3:c6:22:44:a9:f3:
de:78:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:35 2026 by rpki-client