
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: jmGes07NP8nxDTatJbY9MaKvp3/8Z/AweVKc7TxIQHA=
Subject key identifier: 07:53:A0:7A:26:8D:2A:DE:2D:64:E9:F4:4D:95:DF:37:D1:ED:45:04
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0B67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0B4D
Signing time: Wed 22 Jul 2026 19:35:20 +0000
Manifest this update: Wed 22 Jul 2026 19:35:20 +0000
Manifest next update: Wed 29 Jul 2026 19:35:20 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: WzsqyLrp3stBh+e0s1yI0hbbAPCs2yOuCQj2Kj5Rwks=)
2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Jul 22 19:35:20 2026 GMT
Not After : Jul 29 19:35:20 2026 GMT
Subject: CN=6a611b78-0fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:b4:d2:c6:ca:ab:0d:5c:74:aa:f5:2a:dd:
41:bc:97:1d:a5:b7:c6:7c:f7:4e:59:52:c8:5f:80:
c7:55:ea:9d:69:f0:ab:4b:1e:e6:a3:e3:c2:f0:4e:
ad:d9:0b:ff:b0:b8:98:56:90:6a:30:63:bd:53:39:
ba:bc:61:b8:6b:72:53:4b:36:f8:9a:66:88:fd:01:
0b:88:06:5d:57:53:b6:08:ba:b7:61:1e:12:92:34:
0b:d5:1f:b9:48:63:fb:68:10:f8:bc:79:35:6d:c9:
e1:30:bb:23:48:5e:e2:a7:00:16:29:b4:45:5f:08:
24:f3:80:c0:3c:d8:49:7b:96:8a:a1:a3:45:b2:45:
ea:7d:e7:6a:4e:e2:8e:49:ff:a8:d4:4c:02:33:34:
8a:69:10:43:e6:4f:bd:2c:de:8a:4f:65:25:a6:ea:
47:eb:7e:00:f9:7a:d3:33:db:21:31:91:b3:c1:3c:
df:50:94:8c:66:6b:61:b6:11:fe:32:60:6f:8c:58:
e4:89:51:18:56:db:6c:7f:b9:20:2a:9a:c3:a9:ee:
db:e9:cd:77:c8:74:6f:6f:c1:8f:8c:bc:d9:f0:46:
67:1c:17:a0:4d:ee:a1:0a:77:55:4d:9c:31:d3:b1:
5b:76:41:f1:a0:a3:64:96:c3:b8:fc:56:a0:f2:94:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:A0:7A:26:8D:2A:DE:2D:64:E9:F4:4D:95:DF:37:D1:ED:45:04
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dd:58:1a:14:d4:a8:09:b6:82:d7:69:ef:90:7b:77:df:07:
d2:88:bf:7e:2a:e1:53:9d:1c:8d:9e:37:ec:46:50:cf:48:5f:
1d:96:0b:96:c8:0d:f7:80:c4:46:19:3c:71:d5:43:35:c5:91:
89:6e:37:97:6f:df:13:d7:fc:7d:de:a5:d4:57:b3:07:29:ae:
cb:0b:3e:8f:49:a6:1e:3b:fa:f8:cb:31:58:f6:6d:a1:86:59:
f6:d2:01:2a:a7:cf:49:72:9f:3b:69:28:00:08:6e:b4:4b:12:
78:46:75:4c:52:d2:60:a0:cf:fc:ca:09:a4:5e:d5:5d:ab:b4:
fe:ab:1f:b0:0f:25:9a:ad:ac:25:b3:d6:3d:d2:69:47:cb:ef:
1b:d9:38:cc:e9:26:90:69:49:6f:dd:5a:67:bb:2b:7f:5f:21:
e2:fd:00:03:f4:19:06:0a:d4:0c:20:78:96:70:08:2e:f8:2b:
ac:43:d9:80:99:e4:e3:67:4e:9a:01:e9:e2:cf:3c:c9:02:b5:
a7:61:19:77:bc:46:ff:e2:03:43:f3:81:46:88:ee:9a:06:ba:
35:c3:d0:5f:55:b0:d8:38:01:96:16:8b:9e:11:c7:31:f9:5c:
65:21:a5:03:3d:21:b9:87:90:29:b1:3a:dc:d6:0c:17:32:87:
56:cb:93:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE
QUREOTZDM0QwHhcNMjYwNzIyMTkzNTIwWhcNMjYwNzI5MTkzNTIwWjAYMRYwFAYD
VQQDEw02YTYxMWI3OC0wZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0C00sbKqw1cdKr1Kt1BvJcdpbfGfPdOWVLIX4DHVeqdafCrSx7mo+PC8E6t
2Qv/sLiYVpBqMGO9Uzm6vGG4a3JTSzb4mmaI/QELiAZdV1O2CLq3YR4SkjQL1R+5
SGP7aBD4vHk1bcnhMLsjSF7ipwAWKbRFXwgk84DAPNhJe5aKoaNFskXqfedqTuKO
Sf+o1EwCMzSKaRBD5k+9LN6KT2UlpupH634A+XrTM9shMZGzwTzfUJSMZmththH+
MmBvjFjkiVEYVttsf7kgKprDqe7b6c13yHRvb8GPjLzZ8EZnHBegTe6hCndVTZwx
07FbdkHxoKNklsO4/Fag8pTvywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdToHom
jSreLWTp9E2V3zfR7UUEMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy
QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5
MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW91YGhTUqAm2gtdp75B7d98H0oi/firhU50cjZ437EZQz0hfHZYLlsgN94DE
Rhk8cdVDNcWRiW43l2/fE9f8fd6l1FezBymuyws+j0mmHjv6+MsxWPZtoYZZ9tIB
KqfPSXKfO2koAAhutEsSeEZ1TFLSYKDP/MoJpF7VXau0/qsfsA8lmq2sJbPWPdJp
R8vvG9k4zOkmkGlJb91aZ7srf18h4v0AA/QZBgrUDCB4lnAILvgrrEPZgJnk42dO
mgHp4s88yQK1p2EZd7xG/+IDQ/OBRojumga6NcPQX1Ww2DgBlhaLnhHHMflcZSGl
Az0huYeQKbE63NYMFzKHVsuT0Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:30 2026 by rpki-client