
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier: DaDUiHKXVTzf4tEASkI2nQ3bAn5VRmh5edNK1kBqux8=
Subject key identifier: B0:E4:D6:9A:94:6A:F4:A2:AB:FD:A2:96:94:CB:F1:A8:E4:02:4A:00
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number: 08E0
Signing time: Wed 22 Jul 2026 20:52:52 +0000
Manifest this update: Wed 22 Jul 2026 20:52:52 +0000
Manifest next update: Wed 29 Jul 2026 20:52:52 +0000
Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: UxcGWYmjiNa2pR28JWw08HpeRxe+EqPc5I5+hkjXpFE=)
2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU=)
3: F814843E7B5D11F18BA834705CA30FBC.roa (hash: AT7rrFZJqkI2hbdK4qhTUnlkzryBAjkZxDGmC95snVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Validity
Not Before: Jul 22 20:52:52 2026 GMT
Not After : Jul 29 20:52:52 2026 GMT
Subject: CN=6a612da4-55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:6f:96:18:da:f8:95:03:59:9a:37:42:5e:
81:e2:46:82:e3:3d:dd:fa:71:8d:b1:15:2f:95:57:
3f:1c:ef:ea:c5:8b:b6:f3:10:f3:8e:8f:77:5a:95:
64:c8:5b:ab:e8:d2:98:36:ad:7c:b8:be:3f:9c:e4:
24:57:86:29:f5:fa:8c:21:11:cf:20:04:19:5e:2e:
88:cb:7c:ae:e0:63:bb:ce:6f:19:61:90:ed:da:29:
49:32:9d:d1:c9:83:11:4e:66:cd:33:38:76:f8:65:
25:5f:97:ca:cf:7a:01:39:ad:3d:26:3a:c1:b0:8d:
a0:f2:61:15:d5:e9:2a:32:c5:f0:22:e8:38:d3:2c:
af:e8:ae:17:98:17:81:17:29:1f:f8:94:bf:3c:ab:
de:4a:ef:2a:5a:26:46:2f:9b:4d:a5:0f:9d:d0:1c:
08:9a:50:3d:81:8f:d5:1c:60:f0:a8:9d:2e:f9:6d:
68:57:a7:25:4e:34:cc:56:7d:b0:64:62:34:83:68:
cf:f3:37:4d:00:56:33:90:10:4c:0a:74:bb:af:7e:
40:90:e8:f4:a8:d6:87:b0:c8:36:b8:61:45:b6:f5:
36:34:10:ef:b6:46:e7:a4:64:46:91:85:15:81:ae:
50:6f:51:b8:75:3b:32:dd:6a:e9:9b:64:8b:0a:0a:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:D6:9A:94:6A:F4:A2:AB:FD:A2:96:94:CB:F1:A8:E4:02:4A:00
X509v3 Authority Key Identifier:
keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:21:ba:79:70:b6:f9:d0:31:8b:22:a8:f3:69:0b:35:82:
ec:57:94:4a:61:4e:3f:95:d3:21:02:ab:40:c9:06:18:29:18:
81:d6:9d:52:7a:87:63:77:57:31:d8:33:b4:41:80:4a:06:33:
c7:81:a3:03:02:9f:ce:68:56:97:58:69:25:22:82:4b:89:59:
ed:d2:de:5e:6a:79:33:e5:a8:f6:b5:cd:62:e6:db:d2:ab:26:
9f:11:c2:0e:ac:da:33:b9:96:d3:d5:82:6d:92:e5:f8:3e:44:
c9:d9:fb:ad:5b:55:50:40:7e:78:5d:cc:e4:89:8d:13:9a:92:
39:1d:a6:8b:b1:e1:06:cf:49:98:69:5a:33:2b:e2:3f:a8:36:
96:c1:3e:e5:5a:20:cb:9e:a1:46:41:46:43:3a:1c:96:fe:dc:
9b:ed:31:52:2d:b5:b2:bf:51:12:12:d8:17:fb:d8:4f:20:6c:
bf:8e:2b:e8:b1:d0:dd:16:8b:f4:e5:80:75:0d:fd:f8:b3:d1:
53:2d:20:e5:b2:d4:a9:af:64:9c:25:3a:d6:a2:f1:7e:7e:f3:
55:00:be:11:49:a3:36:47:f3:32:00:16:24:06:0e:d3:07:e4:
b9:77:4b:23:6b:76:ef:87:13:9a:aa:4c:f6:6f:35:45:e1:02:
27:c1:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:37 2026 by rpki-client