
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json)
Hash identifier: 7bSKGddi4HLow3VCMcadHdJPrlWkUK/3uELGsZ5Dacg=
Subject key identifier: 4B:50:3A:F6:C5:EC:10:62:4B:A9:DA:C6:EF:38:B7:17:A3:18:49:35
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial: 056D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
Manifest number: 0565
Signing time: Wed 22 Jul 2026 16:33:30 +0000
Manifest this update: Wed 22 Jul 2026 16:33:29 +0000
Manifest next update: Wed 29 Jul 2026 16:33:29 +0000
Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: ChUAKP/104NZh3aHZDRxR+aRLB+zVJqm8gcfydO45QM=)
2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Validity
Not Before: Jul 22 16:33:29 2026 GMT
Not After : Jul 29 16:33:29 2026 GMT
Subject: CN=6a60f0d9-7572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:b0:22:36:81:ec:64:97:81:05:61:29:58:
82:28:3d:9a:2a:80:0a:1e:1f:0d:5a:f9:66:42:b6:
9d:a7:7d:a4:36:16:0a:4b:09:85:8b:47:7c:c2:6c:
20:2f:3c:0c:06:b3:ce:f1:98:3d:47:fa:9d:87:c9:
b9:41:b4:fa:d4:33:05:67:13:8c:b6:1c:3a:7b:46:
8b:da:c2:97:01:12:fd:65:ea:69:bc:39:5d:92:23:
29:f0:fe:5a:a2:e4:c4:16:c3:b3:09:43:30:3d:5f:
1a:59:41:36:e7:ed:b6:3f:22:4a:85:d7:0c:82:d7:
0d:66:38:06:ca:25:5c:86:ff:66:d2:e7:ca:c0:ea:
f2:ae:01:a4:e9:8a:e1:19:60:71:4c:07:45:24:21:
01:f7:3e:ae:aa:ea:2c:d2:a6:64:e3:1e:11:8d:39:
a5:a9:69:e8:23:d2:4f:a4:ae:61:69:f3:38:a3:ac:
a5:83:00:79:b2:ad:c0:46:c7:74:fc:32:3e:9a:91:
d0:18:3b:ac:4e:5e:34:45:3f:ae:9c:38:fe:25:52:
1d:52:2c:65:f6:d9:29:aa:a4:ca:55:09:b6:a7:dc:
20:bd:f4:5d:ac:9a:0e:58:c9:8c:84:1e:c9:fc:5d:
93:a4:98:a4:16:8d:7b:01:67:6c:96:e3:6a:67:22:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:3A:F6:C5:EC:10:62:4B:A9:DA:C6:EF:38:B7:17:A3:18:49:35
X509v3 Authority Key Identifier:
keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:87:b2:79:5b:c6:b5:e5:81:d9:c3:31:e7:84:9c:3c:c5:7a:
b0:35:25:59:29:7e:46:86:65:4b:42:c1:e7:cb:66:ab:de:74:
af:93:bd:65:60:63:9b:0a:58:1a:9b:21:cd:98:be:72:54:d5:
73:37:3b:85:9c:56:54:bf:de:1b:3d:79:ab:6c:af:1b:b4:ff:
cd:1f:c3:71:70:f1:99:78:3b:5a:d6:3b:d7:0b:77:e6:3b:90:
28:fb:3a:1c:8b:74:33:26:18:78:33:85:67:96:8b:9e:ea:dd:
ba:03:6e:90:a0:ad:6d:f7:e6:51:b7:77:c0:35:99:6c:8e:44:
0d:79:2a:29:33:c2:b5:32:71:dc:7e:1f:03:5d:cb:12:30:70:
da:00:ed:1f:06:12:8e:e2:0e:9d:da:4a:5b:ee:19:20:b3:b7:
c9:d3:ad:1b:61:91:c5:d0:11:ff:ed:e2:9d:10:82:b1:80:f1:
ea:c6:2f:1f:0c:66:93:7a:73:aa:ef:ea:34:11:89:55:05:a2:
e3:52:16:68:cf:a4:4e:08:96:7e:32:40:4c:ad:18:73:d1:69:
cd:4d:e3:ca:33:b0:c3:d2:1e:2d:e6:5a:51:bc:ed:81:73:27:
05:31:1e:fa:da:f6:64:a7:3d:2d:57:2a:d1:94:cd:c8:dc:19:
f9:13:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:57 2026 by rpki-client