
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier: TLihkHObBB32te7nbudbJR0tWgp9dZCzd4VtOmxQ6Kc=
Subject key identifier: 24:12:70:69:35:C2:CF:D3:76:5E:89:4B:18:1D:22:55:71:26:50:A8
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial: 0528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number: 051D
Signing time: Wed 29 Jul 2026 00:17:31 +0000
Manifest this update: Wed 29 Jul 2026 00:17:30 +0000
Manifest next update: Wed 05 Aug 2026 00:17:30 +0000
Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: /IlcjgYLE4QtN5ESpeD1rmayCfaw1qwfqmAEz4Y6/RA=)
2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: Jv14UetFlvsgBn+0MbboNTCDUlFN6om75ZyjAE81fvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Validity
Not Before: Jul 29 00:17:30 2026 GMT
Not After : Aug 5 00:17:30 2026 GMT
Subject: CN=6a69469b-3aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:c1:45:e7:6c:94:fd:27:77:6e:f7:6d:4b:
b4:27:ac:66:3e:ad:13:1f:a8:c7:2b:77:91:f1:91:
28:47:b7:8f:4f:72:62:ca:4c:ee:7d:fd:c3:5e:70:
a1:86:86:76:b7:2d:40:4a:fe:1e:06:47:14:ec:21:
0c:4c:08:41:47:15:00:b9:87:51:e9:de:15:a6:c6:
3d:46:d4:5a:87:18:da:cd:5d:ca:1e:b1:3c:90:a6:
cf:63:23:03:5e:d2:7f:d9:db:25:fb:b2:18:7c:c1:
5e:20:ea:b0:69:ba:b2:e1:b4:cc:e6:d2:22:f4:a7:
60:31:0d:6c:c4:0b:b8:e0:9a:19:df:ee:5c:4b:9f:
be:0b:b8:d4:3c:20:03:7a:e5:af:a0:b5:66:f4:b9:
bc:64:01:ef:dc:76:7b:85:04:47:4f:09:b5:79:58:
bc:54:16:a3:4e:75:39:18:d5:21:20:86:48:36:75:
70:6b:2a:05:c4:a3:90:2d:38:d4:bb:6a:68:c7:ac:
99:f2:0f:fd:9d:42:af:9d:19:7f:e8:ad:32:d6:fc:
cd:6b:1a:0b:1a:01:8b:ad:fb:e8:74:0a:f2:9b:20:
d1:9e:31:58:73:43:9e:01:b3:f8:a1:11:ea:3c:20:
aa:af:77:bd:6d:11:9b:06:51:55:c7:f2:58:86:35:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:70:69:35:C2:CF:D3:76:5E:89:4B:18:1D:22:55:71:26:50:A8
X509v3 Authority Key Identifier:
keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:e7:74:b1:8a:d0:04:8d:50:57:b5:0b:8c:02:b6:7c:2a:
37:4a:a7:2e:f5:38:6b:e7:45:ce:f3:e9:1c:86:5d:4a:b4:0e:
df:b8:a7:18:77:56:77:f3:5f:ac:c3:69:85:10:5b:fc:07:0c:
43:b5:b8:da:4c:8e:88:81:61:a7:75:a0:85:18:52:2a:79:73:
3a:3d:72:f0:cd:a2:e4:1a:f1:85:b8:ab:ef:c4:33:14:03:ae:
06:fb:8f:12:81:ca:2c:3d:f6:31:22:53:ff:9c:82:69:ce:46:
2c:48:4b:cc:31:bc:51:35:66:ad:cd:5c:9a:b8:68:2d:a7:38:
20:e8:10:9c:77:74:04:c3:2e:90:9c:86:d0:98:36:22:7e:e5:
02:c0:a1:d5:19:bd:3b:5e:12:0b:47:78:ca:f6:4a:e8:74:be:
1b:cc:53:dc:03:f2:09:dc:70:6e:23:93:5a:fb:bf:19:9d:84:
92:18:43:43:8a:9c:1e:26:17:44:26:50:35:cc:6a:05:79:47:
1f:c0:b3:84:6e:97:69:54:ab:60:c7:38:dc:b4:64:c2:6d:8c:
3b:97:50:75:6b:cb:79:34:c8:28:d7:cc:90:2d:cd:4a:68:93:
c6:e2:89:af:38:cb:1d:c8:da:3e:fd:ed:61:06:a7:91:7c:74:
b9:65:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:54 2026 by rpki-client