
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier: Jq6b0W6dPm44qhtXyswycAHqXZrktjm/RKx49lI/EMo=
Subject key identifier: E6:4F:BD:3A:14:8B:4A:44:2C:E9:A0:B3:E6:AA:3B:DF:46:9F:6F:D1
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial: 0B50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number: 0B3D
Signing time: Wed 22 Jul 2026 19:37:32 +0000
Manifest this update: Wed 22 Jul 2026 19:37:32 +0000
Manifest next update: Wed 29 Jul 2026 19:37:32 +0000
Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: aqCbYwHzfObDKVqOhq4qPspX+CJsZTo6N94dpdEXs4o=)
2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: FCTA0G0uWrgDnGlcYqqrvYV0NmPe1FK7O4WuK+aX7qM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Validity
Not Before: Jul 22 19:37:32 2026 GMT
Not After : Jul 29 19:37:32 2026 GMT
Subject: CN=6a611bfc-d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:1f:10:98:42:95:13:47:7b:16:16:fc:dd:
79:92:d5:f5:33:a6:57:9f:06:83:5e:a9:d5:ec:cf:
6b:69:d3:6f:d5:11:71:6b:2a:5f:38:44:06:d1:c9:
ed:85:55:66:f8:86:0f:5a:23:cd:e2:63:42:00:f4:
ed:8c:2b:ee:ed:f1:36:1b:0e:fe:d4:d2:8b:5b:63:
27:1a:d5:8d:33:3c:6a:a9:ee:f4:fa:2d:5b:19:26:
e7:1c:8a:d4:de:99:16:db:9f:9c:22:00:23:f4:86:
39:d1:75:5a:37:ad:9e:84:5e:6c:64:e7:fd:9f:15:
88:53:c4:6d:ff:92:fe:da:eb:53:80:99:45:c5:ff:
0d:8c:a8:6c:89:a4:74:fe:25:d1:00:e8:79:9c:1f:
37:65:f0:27:73:9e:08:8d:33:c9:52:ee:60:cf:04:
e2:d3:52:96:ad:f3:76:36:eb:3a:59:2b:b4:ef:a8:
b4:81:b1:f5:e1:db:bc:6f:12:51:75:d8:5d:97:3d:
4e:1f:ac:58:84:5f:d5:69:eb:68:79:5d:a9:e4:13:
81:5e:e8:6a:bc:bd:bc:a1:f9:c4:ec:f8:53:da:a9:
68:6c:12:a7:cf:56:f5:57:ea:06:70:c2:b4:42:6a:
e0:1d:9e:44:9e:5c:2c:7e:19:ad:15:8a:dc:30:9a:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:BD:3A:14:8B:4A:44:2C:E9:A0:B3:E6:AA:3B:DF:46:9F:6F:D1
X509v3 Authority Key Identifier:
keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7d:32:e1:32:b0:60:6e:a8:81:55:e7:ea:b0:ec:e2:fd:f2:
bf:32:87:3e:0b:9b:b7:37:a1:32:15:b5:19:08:d0:4d:84:0d:
bd:6d:23:81:17:d5:58:57:b6:a8:bf:f7:c7:29:53:52:46:6f:
ea:5b:14:eb:bc:c3:a6:aa:ea:04:73:b6:18:f4:4f:8b:a9:59:
1a:3a:e5:24:b7:fd:79:fb:a3:4d:97:3e:fb:55:a1:56:11:f1:
94:98:f8:15:d8:1e:21:36:ae:5e:20:6b:47:20:ba:4a:7a:bd:
12:39:7f:33:4d:af:12:8d:16:4b:65:10:0a:51:51:0c:88:87:
c3:6b:a1:4e:a0:76:b3:27:30:f7:22:5b:7d:55:d1:61:54:66:
5f:5b:21:36:2e:91:c1:5a:fb:7c:83:29:6e:13:b3:6e:57:81:
d6:4b:e3:77:9e:8b:79:56:19:5a:5c:da:87:41:e5:41:af:d4:
b5:61:d0:2f:fe:1d:23:a4:6e:77:fc:e9:31:37:f6:a5:c7:ea:
fa:7e:5b:50:b0:d1:81:46:6e:bc:8c:3d:28:39:d9:58:1a:c0:
31:e6:31:e1:88:01:3a:90:65:a1:0c:48:3f:24:91:34:62:3a:
6a:fe:d7:17:6e:15:80:c1:a4:e7:9f:e6:8f:3f:c0:43:50:13:
6c:8a:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:34 2026 by rpki-client