
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier: uhf0To2UpXvo1n/PsCThvBud9Qix+iW5+jRfml5Sx+A=
Subject key identifier: E1:DC:B9:45:E3:23:B9:CF:69:F8:7C:12:DC:F8:5E:A0:D2:90:8B:64
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 1388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number: 136A
Signing time: Wed 22 Jul 2026 17:05:41 +0000
Manifest this update: Wed 22 Jul 2026 17:05:40 +0000
Manifest next update: Wed 29 Jul 2026 17:05:40 +0000
Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: ktE5HBOHtnt0nTAApVvjPtgSfXl5mKlP/fjId8d0vV8=)
2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: EzDx+kZUXYs4cl7Q2Kezjy72skBAtO5dib4eJqomtiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5000 (0x1388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Validity
Not Before: Jul 22 17:05:40 2026 GMT
Not After : Jul 29 17:05:40 2026 GMT
Subject: CN=6a60f865-6a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:13:02:37:21:6c:a4:e2:0c:23:c8:dc:5a:
31:84:e1:5d:28:5c:ec:65:ae:11:9a:6a:7f:bf:99:
07:76:cb:eb:34:f6:ba:8f:d4:0f:67:2d:07:6c:fc:
2e:ae:ab:fe:44:3a:6f:ca:4b:54:c6:10:c1:f9:9e:
3d:a3:48:0d:f8:98:01:16:ac:db:fd:27:ee:87:b4:
fb:44:73:bf:75:7d:60:63:c5:76:93:b8:0d:2e:89:
83:18:82:30:24:71:61:a8:aa:56:e2:02:fa:53:bb:
0e:83:f9:b7:40:e1:f3:e9:93:24:87:9a:4b:ae:f5:
98:4d:49:4b:df:41:a7:db:2c:b0:66:74:ec:87:2c:
0e:0f:37:79:d0:e6:ec:73:d4:fa:8d:a2:e1:8b:c3:
ef:1b:b8:18:66:bb:15:17:53:d0:40:6a:5e:4f:03:
d5:90:25:84:fc:68:10:2d:26:0c:97:1d:ed:9b:30:
e9:4f:9b:09:03:db:c8:41:75:29:87:c2:4a:05:86:
3d:bb:98:fb:ff:41:2d:45:a3:9c:63:e3:e1:63:45:
7c:77:70:de:4e:24:05:e7:d9:fc:cb:e8:19:d1:da:
f3:23:bd:ab:eb:7c:c5:3c:48:65:14:2f:4e:1e:4b:
0c:32:5e:4d:20:54:78:26:ed:0d:c8:ca:02:d3:52:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:B9:45:E3:23:B9:CF:69:F8:7C:12:DC:F8:5E:A0:D2:90:8B:64
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:24:7d:8b:21:42:d6:ec:a8:94:db:a5:57:c2:a6:98:af:0a:
83:16:3a:d4:21:a0:34:92:13:99:37:7b:c9:59:b2:c7:4a:ca:
37:61:56:bb:c4:89:9e:6f:1c:a6:c0:97:39:20:ef:c8:a3:22:
8e:5d:f9:1d:cd:b7:50:5d:e8:28:78:de:dc:b9:59:a1:77:97:
be:05:aa:1f:93:58:e5:6b:28:15:e8:82:ab:bf:17:07:1d:17:
d5:b5:66:b7:a4:07:4c:7a:e0:b1:37:7f:55:40:46:31:48:6a:
62:56:81:aa:c3:ab:21:ac:09:b9:24:d0:b2:63:3f:4e:d8:65:
2d:7e:b8:aa:45:04:bb:34:88:68:71:11:71:90:bb:15:60:2e:
e7:2c:77:0f:da:76:8e:11:c5:6e:62:7e:71:26:5d:a5:f8:79:
88:30:a8:28:14:1b:e5:96:cc:33:86:39:89:da:7f:aa:71:8a:
9b:f3:ed:6c:d4:8c:fa:3c:72:6c:82:aa:82:a8:1e:8a:2e:ed:
97:7f:90:e2:90:0d:01:53:f9:2b:c5:45:00:7c:21:69:7f:58:
0c:6b:36:3d:68:61:77:0a:0e:d9:7e:fa:13:a4:0e:cf:c3:f2:
08:6d:23:3f:60:85:fb:b2:86:63:bb:44:e5:9a:37:27:9e:69:
7a:b1:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:51 2026 by rpki-client