
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier: KBJy9yiZ3yjagN2KgFPWt//Bf1v7S+csV6J9ZJkGSs4=
Subject key identifier: 7C:B4:21:04:1D:2F:26:F1:D0:6F:5C:4B:2E:D8:BD:30:E6:71:00:2E
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number: 76
Signing time: Mon 27 Jul 2026 10:08:59 +0000
Manifest this update: Mon 27 Jul 2026 10:08:59 +0000
Manifest next update: Mon 03 Aug 2026 10:08:59 +0000
Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: z77EFCm99MwI6stDYXYQMgNz4/K2fSsFTmB0j79hScc=)
2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Validity
Not Before: Jul 27 10:08:59 2026 GMT
Not After : Aug 3 10:08:59 2026 GMT
Subject: CN=6a672e3b-8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:f0:a5:4d:20:0f:b7:87:fa:20:82:18:c7:
aa:ac:3d:5d:15:e3:cc:aa:06:27:c1:d2:d9:14:42:
7e:cc:ae:f9:ab:85:60:77:84:d9:a0:f4:e2:f9:4d:
6e:31:21:16:2a:4c:c5:29:20:b0:17:8e:77:c1:00:
7a:bd:4d:7f:96:51:66:e0:d2:f9:da:a7:4d:31:4c:
02:66:27:8d:d3:04:1d:fe:76:12:e2:d5:62:c7:38:
8d:f9:47:ee:89:ec:32:f8:63:0a:a9:8a:73:c6:23:
6a:c1:1f:6e:9d:47:f3:12:b3:48:c1:de:c6:a8:aa:
7a:aa:0a:00:4c:92:1f:35:b0:61:c5:c3:89:80:2e:
03:ac:92:38:26:a1:21:97:1f:3b:40:fe:ff:30:2c:
c2:56:3a:3a:d7:a2:0f:00:5c:7d:bf:21:80:8d:ef:
8e:51:35:ca:0f:04:64:38:78:86:cb:38:88:64:fe:
7a:80:52:2c:3a:7b:50:c6:21:b0:0a:af:94:4d:71:
d8:ec:42:a6:f2:0f:70:5d:bb:fd:79:25:67:94:b8:
6d:a8:d4:7c:e4:71:c7:20:e4:0b:b2:d7:6f:92:c5:
62:81:2b:10:d3:5d:c8:03:2d:33:e5:62:dd:16:2c:
27:59:35:cb:19:42:da:54:f1:0b:d7:40:f2:73:68:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:21:04:1D:2F:26:F1:D0:6F:5C:4B:2E:D8:BD:30:E6:71:00:2E
X509v3 Authority Key Identifier:
keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:02:9f:ce:ad:34:87:70:b4:63:ff:a3:04:1b:39:18:c8:8a:
11:69:39:bf:de:58:49:bf:05:cf:33:92:b3:9d:8f:fd:4e:c7:
d7:66:e3:04:c7:6b:07:dd:70:50:d9:68:12:44:a1:ea:ea:c2:
25:f7:63:3b:9d:22:89:06:98:99:78:53:18:cc:e1:28:14:50:
25:b9:bb:90:9e:2f:d1:cf:36:53:5a:58:a1:da:3f:bc:ad:80:
51:fd:71:ab:41:13:c3:be:c9:9b:c3:02:3e:a6:67:2b:a6:c0:
63:8d:dd:a6:f3:26:19:61:19:df:7c:13:e1:a2:6c:6e:e5:d6:
46:72:c3:72:c1:5e:bf:8e:32:76:17:0d:3d:ca:8a:ea:4d:0d:
0e:a4:1e:6f:b9:fb:02:64:ae:85:76:36:b4:31:25:d2:b3:11:
46:35:06:13:25:38:3b:aa:1f:3b:1b:05:f0:47:1a:8f:35:fb:
2b:d8:19:d3:f7:32:2a:a7:c1:b4:f2:43:b7:2e:95:bf:6b:96:
75:85:0f:23:62:aa:fb:3c:61:2e:6c:bf:a2:3b:b4:46:3e:cf:
ce:ce:77:c9:9e:4b:fe:58:dc:bf:83:99:65:98:ae:ed:61:4b:
1b:86:19:d6:2f:da:68:f3:1b:a1:94:fc:e9:b9:af:00:d1:b6:
38:42:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:51 2026 by rpki-client