
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier: s7uMryle1kWhEx+UQ/222muGcPdfkjj5bkO1WuezNPE=
Subject key identifier: 55:92:8D:21:9A:79:22:74:F4:EA:29:F4:1C:4F:3D:8C:B4:DA:5B:D0
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number: 0769
Signing time: Wed 22 Jul 2026 22:14:44 +0000
Manifest this update: Wed 22 Jul 2026 22:14:44 +0000
Manifest next update: Wed 29 Jul 2026 22:14:44 +0000
Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: KlWiadBLatva9FI94W5z2fsScXlUQAbKvtX+kLAGNSs=)
2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: EsWXc6IMobPNUZk7bCp5eBYfLcBlY2oVTJeqo14MkPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Validity
Not Before: Jul 22 22:14:44 2026 GMT
Not After : Jul 29 22:14:44 2026 GMT
Subject: CN=6a6140d4-55f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:31:fe:b7:c6:c8:64:e9:1d:21:64:4a:b1:
fd:cd:a4:0f:90:12:1b:d5:f4:cb:71:37:22:f5:44:
4b:ad:62:ef:55:a5:16:ea:46:95:73:13:88:96:4c:
1c:79:59:ed:42:9f:b3:64:de:8c:89:35:ca:b2:f0:
e3:28:e8:2a:fd:f4:b6:81:4e:0d:2a:de:de:52:5b:
8a:87:dd:24:69:7e:d3:2b:ae:c3:3a:6f:69:78:5c:
cf:8a:90:d0:25:cc:e5:99:a8:f1:94:aa:a1:ef:50:
92:5e:cd:b2:c7:c1:d7:61:f3:3e:46:70:c8:34:53:
8f:9c:91:28:3d:b7:10:5c:03:11:a3:71:7c:fb:a8:
9e:0a:05:34:18:a4:4e:f8:9d:da:87:98:29:c7:ee:
ed:b7:9d:b7:2b:a4:fc:17:d5:9f:ec:6c:08:49:ba:
a4:4f:a4:6a:55:49:42:d5:f0:51:fb:98:88:3a:b4:
5a:a5:e0:79:0d:57:d0:be:66:dc:89:70:04:e4:a8:
f5:d2:02:35:dc:54:a9:13:f5:2b:ee:79:c5:b3:98:
08:f4:00:13:b7:2c:c9:eb:a1:25:c9:a0:1a:da:4a:
66:97:df:b9:4f:39:b8:e1:28:0c:04:b2:1b:1a:70:
31:71:9d:3b:f6:36:0a:e9:fe:33:77:99:4a:08:98:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:8D:21:9A:79:22:74:F4:EA:29:F4:1C:4F:3D:8C:B4:DA:5B:D0
X509v3 Authority Key Identifier:
keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:35:35:d4:32:a7:86:45:48:39:83:9f:47:2e:ba:bf:26:6a:
da:de:f6:02:cb:20:0b:24:e0:6d:9c:7a:1c:a4:17:1d:04:d1:
46:87:ca:ca:d9:08:1f:ac:dc:d3:34:a3:6b:dc:51:48:7f:c8:
c6:b8:48:4b:a1:64:1f:8c:82:33:0c:23:48:c6:fe:04:af:e8:
a8:d7:e9:46:54:f6:d9:30:cf:3a:a8:5f:64:4f:6b:3b:38:3c:
26:e2:c6:81:9c:0f:ce:90:e3:e2:fb:dc:5b:3a:73:c8:09:6b:
10:47:92:1f:10:51:94:ec:5d:12:e6:ec:34:cf:fb:1b:ed:2e:
3e:00:35:81:da:bd:9d:7a:d5:9c:77:5f:3a:55:9d:09:0d:1c:
17:1c:c7:3c:bf:d4:08:6a:fc:91:ae:64:da:7b:4a:6e:a1:08:
96:64:1d:6f:6c:e5:9c:b3:a0:e5:2c:da:ea:db:f2:98:6e:2a:
66:dd:74:04:72:a4:8d:91:e2:92:63:35:14:85:32:54:ad:c1:
a3:02:51:19:82:0d:37:17:f5:a1:69:95:4e:51:45:fa:7e:72:
8d:87:c2:d8:50:1e:02:ce:4b:7f:94:74:49:d7:7e:04:02:e3:
95:3d:c5:72:c8:4f:00:cf:91:39:ac:c5:d6:8c:31:1e:b9:94:
e2:5b:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:28 2026 by rpki-client