
$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
File: V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json)
Hash identifier: m05xGGHKgBsF+RfmPApgshkyE94QTZqMEQis9Z5Mq+0=
Subject key identifier: EE:99:7B:6B:1D:CA:E1:5A:C7:62:5A:A3:2D:45:D7:3D:C4:A2:DD:AE
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial: 111A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
Manifest number: 10F8
Signing time: Wed 22 Jul 2026 17:26:22 +0000
Manifest this update: Wed 22 Jul 2026 17:26:22 +0000
Manifest next update: Wed 29 Jul 2026 17:26:22 +0000
Files and hashes: 1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: QRlkuwqoXzVeSuc11h/cs8t6FVlBKN56deFgbPiPFwo=)
2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: Qga32WRMcgwtGKBYl59msd/aiS63INQRYU3RedAs7hQ=)
3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: 2vo/K47ayP0wYGBbWhk5TpjDKUxqcmP0LJrQ46qNZc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4378 (0x111a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Validity
Not Before: Jul 22 17:26:22 2026 GMT
Not After : Jul 29 17:26:22 2026 GMT
Subject: CN=6a60fd3e-0a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:9b:09:d6:3b:6f:99:96:f5:27:e6:2a:c3:
18:21:a1:40:4e:e7:af:a4:43:72:0f:28:81:a3:b8:
86:6a:8a:50:b1:3e:ea:77:a8:96:d7:fd:cd:56:1d:
e7:c3:86:a2:e1:6c:1f:95:b0:64:ca:3b:3a:32:76:
8e:27:29:7f:bf:be:78:09:7a:1d:31:3c:81:36:34:
13:07:db:b4:b4:16:18:ee:7c:e4:95:a0:69:fd:b5:
e0:56:51:da:e7:ca:04:95:3f:e4:df:91:c0:4e:74:
23:dc:88:f5:19:ab:ef:4a:f1:1a:5a:59:07:ea:e7:
13:29:63:56:65:53:dd:18:98:a8:4a:5a:99:b7:c2:
62:43:37:b6:fa:7b:21:d6:9e:a5:be:3d:4d:06:ea:
72:43:5c:ca:bf:54:b1:90:2e:8e:47:43:3f:98:7b:
16:fc:59:45:7b:3c:24:26:b6:ad:7d:4c:e3:e2:28:
2b:ae:30:aa:04:1d:80:f4:81:05:71:85:3c:f1:6f:
c0:54:0d:92:8d:22:9f:6b:9b:6a:f4:a5:47:a3:6b:
70:47:8a:4e:ff:1e:eb:ae:0a:af:ad:b1:48:a5:88:
db:d9:b6:bf:a3:f3:45:b1:82:34:cd:67:16:4d:81:
bb:f1:04:48:c1:98:da:72:bf:54:9c:2a:ca:b6:c7:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:7B:6B:1D:CA:E1:5A:C7:62:5A:A3:2D:45:D7:3D:C4:A2:DD:AE
X509v3 Authority Key Identifier:
keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:d5:4b:63:e4:2f:98:57:27:32:0c:db:d7:bd:9f:f9:51:
a9:44:f1:3f:af:e4:e0:e7:b5:42:b2:26:a1:55:15:44:5c:da:
64:fa:4e:08:6c:89:58:ac:86:5f:53:1a:ff:b0:ea:2b:83:8f:
23:6f:6c:ee:7f:6a:38:6b:30:42:d2:95:85:dd:d8:b5:b5:5f:
e3:7b:44:fe:c6:9f:a5:8f:35:e8:0f:7d:4a:28:94:16:6c:8f:
c1:44:97:58:7f:b3:21:57:17:25:82:42:a3:c0:9c:b5:6c:20:
5d:d8:81:13:29:eb:77:af:d0:4a:c3:2a:9b:8b:ee:a4:38:81:
43:d7:1a:fd:1a:c0:fe:57:f8:60:9e:5e:de:47:5b:12:60:7b:
bf:c5:8c:a7:ba:2a:e2:d4:e5:d7:18:f3:83:73:c5:94:ae:8b:
78:26:16:40:69:70:af:16:de:d8:aa:ee:83:14:59:a0:c3:2f:
e1:dd:67:6d:db:56:ed:55:07:cf:28:a3:0d:08:b6:52:45:c3:
89:26:74:52:62:a5:d2:8f:68:87:2e:94:c3:54:f0:a0:3e:33:
6d:b2:23:6f:75:4f:80:94:05:ec:84:89:f9:0f:d3:57:e5:46:
0c:be:08:b1:e9:58:f1:d6:17:ca:64:7d:66:06:8f:93:ac:b3:
c8:f6:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:32 2026 by rpki-client