
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: P+HYUGS5RBumqIiHLR4DKJkcjM68wgPLbWRKlRVI3g4=
Subject key identifier: 01:9F:32:CD:50:5C:39:48:97:4A:E1:F6:0E:F4:EB:EF:A9:F8:82:B8
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 0A5E
Signing time: Wed 22 Jul 2026 20:04:56 +0000
Manifest this update: Wed 22 Jul 2026 20:04:55 +0000
Manifest next update: Wed 29 Jul 2026 20:04:55 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: L3s/FEuNxLrdFjtBXJsJNmvEx37RURZ932Lt50y3sGA=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: Jul 22 20:04:55 2026 GMT
Not After : Jul 29 20:04:55 2026 GMT
Subject: CN=6a612268-6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:5a:1e:ef:07:e0:a4:f7:b4:44:73:ce:4b:
79:92:2f:9d:e5:6c:d0:21:80:c3:1a:95:71:02:d7:
ad:9b:cb:a1:dd:05:65:35:22:30:9f:f2:84:5f:61:
16:0e:f2:7d:ab:ba:01:ff:c5:ea:01:a5:c0:f3:59:
e9:23:ed:22:ec:69:72:56:f8:41:42:2a:96:bd:12:
c2:d4:a6:f0:81:f3:be:30:b0:82:4d:ce:cc:ea:09:
27:a7:20:8f:af:4a:15:5d:fb:fa:76:4c:53:78:b7:
eb:70:22:cd:18:1d:15:96:b1:49:df:93:92:a5:76:
83:99:7e:05:b2:a2:aa:80:15:ce:a5:43:8e:3f:09:
80:72:b0:bd:a1:1c:10:43:82:83:e3:96:5e:e8:34:
a2:f1:12:6c:ad:50:e6:ec:8d:42:83:15:84:f0:33:
2a:83:5d:e1:f5:13:4d:6f:c4:b4:bb:ce:d5:ea:cb:
2d:57:a0:97:4e:3b:d3:87:b3:79:c3:7c:47:2b:98:
18:28:9b:43:cb:74:a6:8c:9c:09:d3:b2:b0:f8:f0:
e5:37:05:70:ba:94:a7:66:f8:b5:e6:31:16:13:9b:
aa:66:f8:4c:64:69:2e:34:22:5a:38:26:1b:29:4a:
bd:6c:50:6e:d9:98:d9:6d:02:ad:97:d4:fe:ff:2d:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:32:CD:50:5C:39:48:97:4A:E1:F6:0E:F4:EB:EF:A9:F8:82:B8
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:ab:79:e9:4e:de:2f:90:f9:66:72:23:0b:c0:5d:e0:0f:
d1:68:d4:a8:db:ef:02:29:8b:4c:58:f9:5f:d8:5b:3a:8f:b8:
09:13:44:a7:2e:0c:58:e1:84:f4:1f:27:f3:98:c0:8b:2d:86:
35:f3:96:fc:88:36:83:cb:09:b4:26:31:8e:11:66:52:31:9d:
74:13:d1:cf:fc:c3:4b:7b:85:fc:6d:30:d8:fe:5e:c9:ba:c1:
d2:a9:16:60:af:48:f6:aa:6e:48:8d:98:93:c2:40:82:70:49:
b2:f5:dd:63:df:1a:b4:a1:7e:5c:3d:44:6f:e9:59:8f:4e:af:
71:09:50:66:5d:74:4b:97:47:ce:e6:53:93:95:a3:f9:6c:d7:
65:f0:bd:a7:b4:ae:68:2b:9c:ce:f4:62:37:0e:10:89:56:7a:
0c:20:cc:a7:00:25:6e:a6:b6:78:89:3e:57:6a:56:e2:3e:eb:
5a:0c:26:4e:f6:7a:ec:b5:77:1b:f6:92:5b:dc:90:49:1d:46:
78:2a:2d:98:9f:6f:cf:56:c8:93:85:74:1a:5f:ed:e8:f6:89:
ca:12:ac:c6:4a:8e:98:bc:ce:60:2f:96:76:94:6e:dd:b1:8d:
78:cd:fb:35:b5:54:a5:eb:89:e7:49:7e:4b:18:58:b9:55:b8:
93:ed:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:38 2026 by rpki-client