
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: mL/XCDTxM4551IWBMlFNgg9G4nil2CUSdzFpwMsKTLM=
Subject key identifier: 66:64:61:CF:2B:E4:E8:EC:3E:2F:15:B6:22:CE:C6:F8:E9:9E:F2:BF
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 09:24:37 +0000
Manifest this update: Thu 23 Jul 2026 09:24:36 +0000
Manifest next update: Thu 30 Jul 2026 09:24:36 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: PiG37DyawFl7zUunhDPpGjCZoZPZz2M30GlNOIHbpg8=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Jul 23 09:24:36 2026 GMT
Not After : Jul 30 09:24:36 2026 GMT
Subject: CN=6a61ddd5-bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:49:c2:da:06:49:99:70:52:e7:b1:cb:48:
80:75:61:6d:78:6f:c4:87:1c:60:58:bc:3a:e0:bf:
bf:bf:42:ac:0f:f5:29:a3:92:a1:94:f9:b5:63:0a:
70:2d:b0:f5:82:f5:7a:9a:48:e3:40:07:13:15:4d:
47:c5:5b:cd:20:e5:1b:53:b2:07:bc:98:8a:3f:68:
20:82:9b:38:0d:9c:10:a7:f7:79:75:32:c6:a3:32:
6a:c2:e1:2f:d6:87:d1:bb:de:7e:e5:6c:8d:06:ed:
9e:ba:d7:03:89:5e:81:48:2a:56:d8:91:1d:fb:72:
16:c5:7d:ba:44:7e:22:5f:94:90:96:b8:fc:26:89:
aa:44:ae:c3:82:47:56:a2:79:fc:8b:91:f6:5d:85:
69:1b:c1:9d:77:ed:27:1b:0a:62:78:14:47:a2:e5:
27:86:2f:2d:c6:24:1f:56:e5:b7:84:03:a3:fa:aa:
19:5f:91:07:ad:01:e3:ff:32:31:08:f3:e5:38:c7:
64:79:32:01:7b:ad:c2:58:19:66:6a:88:90:f2:b6:
ad:35:33:42:72:a2:3f:86:79:b4:bc:a2:16:c5:77:
e2:3f:80:85:dc:ed:38:e4:28:8d:d0:f8:82:52:14:
72:55:39:56:ca:50:8c:ea:21:78:b7:37:17:07:6f:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:61:CF:2B:E4:E8:EC:3E:2F:15:B6:22:CE:C6:F8:E9:9E:F2:BF
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:41:08:5e:4a:ee:c1:a3:17:88:b4:18:1c:78:ac:a6:48:
2a:45:44:ca:50:5c:52:e2:58:d5:ac:37:83:10:74:7e:37:60:
87:43:9a:5a:9e:b0:96:1e:70:fd:48:d5:79:1f:9a:88:24:9d:
1e:07:a5:85:6a:24:bc:33:5d:8a:3b:d1:60:21:a1:32:53:ce:
49:f9:2b:36:ba:20:62:17:cc:6a:da:77:91:3a:d9:6a:fa:da:
28:fb:04:91:95:42:57:57:d4:56:35:c2:24:55:d5:0a:d7:2c:
29:0a:9f:0d:3e:37:b3:dc:9f:bc:f1:16:a3:c9:d5:78:f2:dc:
7d:28:c9:51:e4:52:6f:55:f5:41:ef:03:da:17:f9:79:92:de:
0e:d8:87:b8:60:42:62:f3:6c:ec:29:09:94:39:b0:b3:f9:f1:
d9:93:e1:a9:ef:38:8a:bd:21:b1:0e:0c:4a:94:d5:3e:ee:30:
59:b0:af:46:97:7e:18:2a:94:4b:a9:59:30:8a:26:a2:41:36:
ef:20:dc:60:ca:05:f2:76:1b:1f:f0:c2:89:28:26:ad:a6:f2:
3c:1c:4d:03:7a:af:7b:8c:8c:08:15:be:71:6b:32:ae:bd:c6:
1d:f6:3b:c5:2b:f6:bf:59:6e:0b:4f:9d:69:27:3c:af:8c:7e:
30:9b:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:08 2026 by rpki-client