
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier: 2aCjiRlI5X3vt+TXB7+Ef6qMeaglmZNIHJuJWFV2nmw=
Subject key identifier: DE:6B:33:1A:4C:E8:52:EA:5B:E9:E0:30:C1:63:A7:D4:BA:28:81:14
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number: 02DD
Signing time: Thu 23 Jul 2026 02:19:41 +0000
Manifest this update: Thu 23 Jul 2026 02:19:40 +0000
Manifest next update: Thu 30 Jul 2026 02:19:40 +0000
Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: C44nrQwXRxnBDiCoN1b2kJd6DmeTqTGHYud8d9Iqnws=)
2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Jul 23 02:19:40 2026 GMT
Not After : Jul 30 02:19:40 2026 GMT
Subject: CN=6a617a3d-3943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:04:bf:39:8d:4d:c3:85:6f:88:cc:9d:91:
74:8b:1a:0b:c5:68:61:9c:71:1a:5f:2d:40:40:2b:
d8:6e:f7:7b:b2:f4:d5:e1:1c:5c:29:00:02:62:54:
b2:65:48:40:75:97:0a:9e:20:fe:59:bc:2c:06:bb:
31:c4:26:fb:aa:03:bd:d7:d5:0f:53:53:fa:6c:4e:
3f:4d:42:a3:7c:d0:58:12:3e:2b:ce:c2:a4:69:f3:
0c:b7:74:64:a6:57:8c:67:be:b7:2f:06:16:f7:f4:
fa:8a:ba:a8:9c:cd:85:e3:9f:25:17:a9:0c:92:40:
75:25:6f:5e:00:83:bf:0c:d5:5c:28:5b:85:57:b1:
18:b7:a4:94:dd:40:8d:90:3c:7a:c2:41:f5:8d:84:
80:da:37:22:ae:1e:e0:2a:a6:32:02:f4:b3:09:51:
c0:b3:0d:80:27:f2:c4:4b:cd:31:b8:d4:46:96:9c:
3a:1e:a9:34:d5:f5:77:a4:93:84:00:99:a5:ee:48:
05:83:87:e0:b4:d7:c1:63:d9:f8:a7:23:82:9a:41:
d8:30:1f:59:cd:4e:2c:67:51:0a:01:0d:be:91:1d:
9e:bb:90:05:c7:76:1d:25:70:ff:78:6a:26:a5:48:
a0:57:73:50:aa:c0:1b:14:e8:25:82:09:71:90:aa:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:33:1A:4C:E8:52:EA:5B:E9:E0:30:C1:63:A7:D4:BA:28:81:14
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d6:a4:6c:1f:9b:7f:27:34:47:f0:56:c3:f9:34:0b:fa:1b:
f5:17:91:14:0e:8d:63:97:eb:d0:74:8c:29:36:94:50:fb:35:
20:e8:24:ab:83:83:99:35:04:c5:eb:17:8e:88:c6:fe:61:29:
5b:68:92:f9:5c:6c:b8:2a:cb:a9:7d:84:17:34:82:65:ed:c1:
1a:19:74:19:a5:f6:ee:06:1c:ce:d9:52:5c:36:ac:54:20:5b:
b1:7e:ce:b0:37:ce:4e:35:8f:c3:e7:f6:6b:59:78:f2:85:8a:
71:4f:d2:0a:19:73:bf:c2:0f:8f:eb:73:c1:87:79:66:ba:a0:
ae:d5:b6:e2:cc:b4:a9:60:82:5e:6f:8d:23:26:b0:41:63:9b:
a0:a9:6c:84:65:91:f7:40:2d:a8:bc:4f:bc:f5:a6:5e:97:b6:
60:05:d5:2a:38:ca:b0:94:6d:ae:f3:ae:af:bc:1a:d3:1f:46:
27:11:3c:69:d0:53:c4:c3:dd:6d:36:c8:e4:2e:22:40:8d:33:
10:ac:cb:3b:f8:1a:21:47:10:ab:f3:ad:ef:2e:2b:24:f8:d2:
8c:2a:80:b0:4f:fd:2d:43:2f:59:1c:f7:f0:87:b8:3e:3e:ea:
dd:cb:11:fa:e1:38:3e:42:5b:19:da:20:40:fc:af:42:b4:9e:
ef:8e:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:56 2026 by rpki-client