
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File: U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier: eGWzIvz6OLgm64YGpxKg/JoLUHmR8dEzdR+5CStKTrE=
Subject key identifier: 5A:20:89:F4:7D:05:A1:D6:89:12:45:65:A3:26:16:A1:80:AE:AF:4A
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer: /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial: 0A08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number: 09DE
Signing time: Wed 22 Jul 2026 20:24:05 +0000
Manifest this update: Wed 22 Jul 2026 20:24:04 +0000
Manifest next update: Wed 29 Jul 2026 20:24:04 +0000
Files and hashes: 1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: 1Yj6HRbICBBeu+O1cHL3Tw4ygbR21M2bUmb7HEOWXms=)
2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: mmVost6mx+Nsnlt25bJ3nZWYDauWfkhD71L+YP06Tjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568 (0xa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Validity
Not Before: Jul 22 20:24:04 2026 GMT
Not After : Jul 29 20:24:04 2026 GMT
Subject: CN=6a6126e5-b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:41:32:cf:b1:20:1f:0c:80:49:2c:4d:aa:
cf:f1:08:5e:9d:80:14:09:56:88:9c:b7:24:b8:e1:
d8:be:de:74:c6:6c:52:d7:45:30:9b:a4:cc:6f:b3:
25:d1:0a:25:10:e2:f3:95:ce:d2:d8:ce:b8:9d:aa:
fa:03:9e:34:96:f7:7b:53:50:45:38:d9:9a:f7:47:
de:52:42:0a:03:ec:31:17:81:00:89:58:fa:13:43:
ce:28:d5:66:53:24:b7:bb:47:a3:81:18:4f:a9:19:
7f:00:f1:05:3b:85:b7:8a:d5:f8:1f:c3:24:9a:41:
37:29:c8:18:51:f1:e0:a9:ff:ce:9c:3d:e2:f1:be:
d0:61:9c:2a:e8:a9:c5:5b:c1:5a:06:a1:90:67:19:
9d:71:bc:85:37:ba:ee:aa:c9:82:7e:cc:29:2e:e5:
47:60:ed:cd:f2:7f:16:47:d8:c0:d4:90:e3:63:8e:
cd:71:4b:92:3a:b4:88:aa:90:35:5c:74:33:90:05:
fd:fe:60:41:3c:9e:47:ed:ed:55:14:2f:c0:71:2e:
ec:9e:f8:81:17:65:76:67:24:cc:d8:e9:0d:20:b6:
49:5b:fe:77:19:df:f3:8f:ba:5f:99:48:7e:4e:d7:
bd:3b:cf:bd:40:83:d5:86:23:7d:72:33:ac:b0:64:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:89:F4:7D:05:A1:D6:89:12:45:65:A3:26:16:A1:80:AE:AF:4A
X509v3 Authority Key Identifier:
keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:8d:7c:b7:93:69:94:e1:6f:21:2f:e6:2b:4f:bb:fa:df:de:
1b:2c:12:29:49:dd:b9:3c:7e:79:8e:cb:7b:cf:0d:2a:b5:09:
40:63:8d:6f:e4:cd:5f:a0:e5:05:c3:6f:dc:63:d7:8f:06:f5:
aa:4d:7f:fb:9d:1d:3c:4a:61:b4:ac:80:ae:ba:11:5c:c3:f0:
38:79:a1:5e:0d:b7:43:0d:ee:45:a3:e6:74:b1:bf:f8:86:ee:
50:70:96:60:6c:5f:dc:12:2a:6d:3c:4a:4b:6b:51:71:cc:a1:
fd:19:77:ff:ea:86:68:30:27:2a:dd:c7:66:75:98:60:7b:be:
25:8f:85:21:84:20:e2:11:cb:4f:02:b7:d3:f4:33:a8:21:6c:
ce:e3:2c:c1:ef:ba:af:83:03:99:68:15:e9:81:56:61:6e:be:
41:46:bb:b2:4b:52:52:19:ac:89:bf:1b:7b:70:79:4d:3e:f2:
69:94:1e:b3:bc:88:67:dc:77:05:63:5e:d9:01:36:60:4a:8b:
76:64:d0:8b:58:74:af:a1:a7:41:1e:cd:d9:cb:0f:4c:40:d7:
8b:ef:fd:b8:74:b7:3c:07:d7:b3:5c:18:39:19:90:bc:62:b8:
8e:2d:21:a9:55:0e:c7:06:23:f2:63:71:76:12:cf:18:64:ba:
9b:ee:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:38 2026 by rpki-client