
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier: fQLjkIVaM2Og681BoCAC7AfMAh0ZMg12QpYLyobUGy4=
Subject key identifier: 4B:C5:F8:9E:88:85:26:23:8F:06:83:2F:83:F5:F9:92:F6:90:E6:82
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial: 1343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number: 1336
Signing time: Tue 12 May 2026 17:01:15 +0000
Manifest this update: Tue 12 May 2026 17:01:14 +0000
Manifest next update: Tue 19 May 2026 17:01:14 +0000
Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: ZYepmkrfbCyNXxlp62zLAufc7x4a9CH5dDvEhY23XNQ=)
2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Validity
Not Before: May 12 17:01:14 2026 GMT
Not After : May 19 17:01:14 2026 GMT
Subject: CN=6a035cdb-3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:69:04:59:b0:a4:fb:71:6e:ef:66:38:35:
d0:a2:da:70:34:8e:f0:d8:36:9c:41:22:f6:16:56:
32:22:b1:31:b2:41:e9:9a:9e:60:f5:30:47:32:67:
8d:fa:9d:df:db:91:49:11:ab:4f:d4:2d:99:df:19:
ba:3f:0b:66:7b:d7:ce:7a:db:d2:4a:5f:48:00:9d:
f1:ac:b1:a2:aa:77:f4:ca:90:c2:09:4e:1c:0c:24:
11:c7:49:80:b1:ae:c5:27:88:07:b4:c4:d9:f8:cb:
a2:97:9b:5b:81:81:36:d0:ff:37:df:f3:45:07:01:
77:63:02:af:d3:92:af:5a:9b:c4:cd:40:fb:5f:50:
09:31:8c:90:5c:3f:49:fd:1f:5e:98:4f:d5:c4:db:
89:c2:1b:75:fb:b0:01:68:64:22:d5:38:10:1e:cd:
92:12:3a:30:c2:e9:a3:1b:cd:ac:11:ca:05:fb:d2:
80:f3:09:54:f8:b2:6a:52:72:95:4c:63:0e:da:b0:
52:62:7b:14:cd:66:1d:3c:99:02:50:1e:57:56:2d:
1c:3f:e6:cd:61:97:d9:ec:e9:7a:24:b5:cb:39:23:
c3:d2:30:c9:c2:10:84:9c:7a:c0:03:66:99:7b:a4:
dc:4c:52:15:23:e7:89:f8:c2:ab:e2:60:f7:69:6c:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:F8:9E:88:85:26:23:8F:06:83:2F:83:F5:F9:92:F6:90:E6:82
X509v3 Authority Key Identifier:
keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:6c:8f:61:17:1b:06:fc:53:60:74:39:86:6d:0f:98:d3:b3:
46:d5:58:ac:43:aa:cf:4c:cc:54:b8:7e:c4:fd:90:11:d5:b5:
7d:45:e0:71:7c:5f:40:53:3b:de:b6:97:a6:2f:e9:3c:6a:96:
86:54:1b:45:ab:f8:fe:00:cb:29:de:1b:cb:4c:b0:ac:72:da:
69:63:40:75:9c:55:8c:97:1c:62:5d:07:db:53:23:a9:a0:38:
07:36:81:b4:0c:ac:c9:a3:27:2c:2e:70:b3:2a:ec:d4:72:6b:
6f:38:8e:d6:d1:4a:4d:83:b3:24:cf:20:e6:4a:b8:a6:db:24:
e0:a2:46:83:2d:40:7a:59:94:14:c2:27:af:be:81:d4:12:a0:
fd:d0:82:eb:32:36:ae:d0:33:b1:b6:46:61:b2:28:77:76:f0:
b5:62:58:93:80:f0:09:6a:88:82:93:56:cd:4f:b0:b7:47:21:
c2:67:c9:df:5d:41:77:77:ac:4d:62:28:9a:f7:97:6c:cb:ce:
cd:33:c1:68:48:3c:0b:87:35:97:16:13:1e:0c:18:c4:dc:05:
09:28:34:1e:97:64:34:67:a2:cb:29:fc:a8:a9:27:c0:f0:e4:
e7:7d:bd:da:e1:4c:3f:fb:97:15:a6:5e:e2:e0:37:cf:82:04:
a6:8e:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:12 2026 by rpki-client