
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json)
Hash identifier: nngd8tM9L04mhPi1vLMSkLqTR/1I5IAI9MnqVBdOCLs=
Subject key identifier: 09:6F:5F:34:85:C5:C8:3F:FA:53:3D:5F:51:08:2D:08:E0:91:1E:CD
Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64
Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
Certificate serial: 1CC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
Manifest number: 1CAF
Signing time: Wed 22 Jul 2026 16:15:10 +0000
Manifest this update: Wed 22 Jul 2026 16:15:10 +0000
Manifest next update: Wed 29 Jul 2026 16:15:10 +0000
Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: ovJmmC+cJL57r8co3nN0abPcHKFtJlaULevTEyYXtec=)
2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: QCwKUkVOKXGLScCAxDR4Vgfe1Cz3Vfsmtw6cpnZ9ZlA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl
rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7362 (0x1cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
Validity
Not Before: Jul 22 16:15:10 2026 GMT
Not After : Jul 29 16:15:10 2026 GMT
Subject: CN=6a60ec8e-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c4:a0:2c:bd:6f:3f:57:e0:eb:8b:22:ee:5b:
35:e5:63:cd:ae:05:74:27:60:66:c3:da:26:1b:24:
23:d5:53:38:ad:77:f3:7d:fd:f2:15:00:4c:02:4c:
d5:37:34:1e:d8:e4:f3:83:09:81:d6:da:8c:1a:78:
10:8e:be:5c:a1:e9:80:38:af:ea:f9:1d:7b:bb:a6:
aa:bb:c4:88:04:88:52:b3:cd:92:35:dc:75:a2:36:
08:c5:6f:52:b2:6a:c0:cb:89:3b:9d:85:55:e3:52:
c2:62:16:43:45:cf:be:8b:b0:03:2c:e9:8f:20:79:
85:71:60:88:44:63:5c:82:13:54:41:68:23:70:4f:
09:4c:02:c9:71:19:45:ed:71:5b:c8:83:12:ec:38:
5d:5f:af:cc:82:f2:da:20:b6:08:4a:0d:c3:c2:3e:
0d:d8:e1:77:9d:e3:29:e2:c6:12:e1:77:24:af:77:
bb:55:be:9c:53:da:e2:c2:23:3f:d5:fa:d9:d4:ca:
62:0f:19:62:43:00:bc:23:da:23:3d:fb:d9:9a:1e:
58:e9:db:a2:04:c5:b6:d8:f8:29:31:0d:37:98:53:
55:98:dd:7d:b6:40:b2:df:4e:c5:c1:36:92:a3:30:
fd:88:5b:3a:b5:48:1d:1a:c1:7b:60:f6:97:f6:ea:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:5F:34:85:C5:C8:3F:FA:53:3D:5F:51:08:2D:08:E0:91:1E:CD
X509v3 Authority Key Identifier:
keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:2e:4b:bb:fb:44:c3:5b:e5:3a:48:df:8e:20:99:c5:2d:0c:
a6:13:21:7b:1b:23:c6:a4:82:61:fe:69:bc:de:96:da:36:a7:
74:6a:3e:49:af:cf:99:23:05:b1:64:7f:ff:a5:fb:91:65:ad:
52:5a:03:52:fe:0e:4a:bb:2a:6b:7c:75:f9:13:5f:30:06:b6:
8d:7d:f6:21:b8:f8:c3:b3:fe:0f:3e:28:e5:85:5f:69:c5:31:
22:3d:7b:86:90:77:2e:b3:1b:04:d7:81:1c:16:7f:be:e0:30:
8f:83:a2:1d:f4:9e:dd:da:68:12:19:5f:02:52:e1:17:52:20:
1e:57:47:e3:ca:b5:26:99:3c:c5:c0:f6:0c:6b:4f:21:9e:49:
95:7b:fa:da:bf:b4:94:f7:3e:63:bb:cb:35:bb:f2:50:ce:77:
44:34:c9:15:f2:28:de:a0:b7:83:3d:b1:5a:c0:b0:7e:25:4c:
f1:ba:76:92:eb:3c:e6:8f:bf:d9:2a:da:86:f3:2e:52:41:71:
8b:3f:9b:16:93:b6:90:45:af:68:21:df:af:1b:c3:98:50:16:
70:8e:73:84:39:08:b4:42:09:0a:fa:c4:6f:27:a4:d3:d5:ba:
71:9f:5d:9f:c3:6a:3a:65:35:bb:ea:37:f7:49:01:b0:02:5b:
d0:a4:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:44 2026 by rpki-client