
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
File: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft (raw, json)
Hash identifier: SGWDCeFCJtgaKHrLGLTwPWnGMBkD5ur4nnRbCw3xfbs=
Subject key identifier: 10:85:DE:0C:58:B2:8C:A6:5B:2D:75:76:63:8D:F0:8F:BA:CA:38:00
Authority key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Certificate issuer: /CN=A912C2EB/serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
Manifest number: 0F
Signing time: Mon 27 Jul 2026 11:29:08 +0000
Manifest this update: Mon 27 Jul 2026 11:29:07 +0000
Manifest next update: Mon 03 Aug 2026 11:29:07 +0000
Files and hashes: 1: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl (hash: hqeY57TBOmk7mgNRbVJkFbgYOrGEUaYtyN3zeaawH2s=)
2: A23E3D0C738811F19D7E75576EA30FBC.roa (hash: Fyk5hZ//GUDjOAuj1FtKLhXAlqi5WwxZ3QEQgW3X2tI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Validity
Not Before: Jul 27 11:29:07 2026 GMT
Not After : Aug 3 11:29:07 2026 GMT
Subject: CN=6a674104-8810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:9f:ba:c8:6d:54:4e:41:87:0c:ab:05:ce:
b0:92:22:b7:03:eb:87:fe:5d:be:9e:d5:30:39:3b:
e5:b3:b2:c6:97:e0:0b:43:aa:16:14:82:67:c5:28:
46:2b:db:ff:7c:f6:5f:86:d1:cd:c3:9e:cc:31:d6:
f1:a9:a0:fc:da:4d:b5:06:02:a7:c0:b4:00:56:59:
d9:f6:ec:bb:da:b2:58:9d:95:71:f6:f3:fd:ce:86:
82:cf:77:42:97:aa:37:f9:64:e7:c8:46:dd:dd:a2:
d2:6c:1c:ea:fc:b2:b2:76:df:c1:fe:80:28:78:2c:
5e:95:02:39:81:4f:f2:fe:9d:0d:98:88:9c:53:04:
9b:22:e0:da:18:86:58:f5:a1:ea:d0:8d:86:5c:8c:
33:ad:e6:bb:d1:5a:c0:5e:22:87:18:23:be:e2:d6:
95:af:2f:e5:da:3a:4e:41:49:9f:d8:29:7d:ae:11:
92:38:31:58:24:0c:88:7c:97:0f:46:2c:4e:59:b8:
1e:30:f8:ab:7a:66:8d:c4:96:47:fe:f4:ae:27:f8:
9a:2b:42:a8:3f:1b:43:4e:ce:3c:0d:52:46:b1:94:
ad:1f:63:06:a5:ea:16:94:44:8c:a7:df:1c:c8:4a:
b1:2a:f0:cd:19:77:48:66:7a:a4:0d:70:5b:e1:bd:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:DE:0C:58:B2:8C:A6:5B:2D:75:76:63:8D:F0:8F:BA:CA:38:00
X509v3 Authority Key Identifier:
keyid:D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a0:ab:96:d0:0c:fe:84:5d:c8:11:88:53:dd:ca:65:54:ee:
e4:75:e2:f5:75:ee:18:59:12:4d:fb:0b:65:0d:17:75:31:9f:
80:3f:5c:23:ae:86:00:43:7c:c6:1e:d2:b1:18:f8:74:49:9f:
fb:5b:24:06:fc:af:33:7e:7b:16:fc:ab:39:ef:aa:58:97:ad:
fe:d2:d1:b0:38:9e:97:37:9b:64:39:bc:99:0c:67:66:1e:80:
e4:23:b2:a4:f8:6f:73:eb:0d:da:2d:ab:34:55:3f:2b:d3:68:
88:84:e8:86:6d:f3:9f:ee:72:89:f8:f5:65:da:47:78:c6:27:
9d:b9:da:02:a6:c7:13:ee:e4:7c:e7:21:9f:da:28:eb:4d:00:
53:c7:80:87:b3:80:0f:4f:d8:32:7c:9e:da:20:7c:21:34:0c:
22:09:ab:fa:21:46:29:a8:da:9b:39:77:0e:6b:fa:12:94:7d:
7d:98:19:b6:e7:88:24:75:35:26:6d:63:92:7b:ba:63:56:3f:
b8:f4:b0:d2:c1:56:59:6d:b8:1b:21:21:fb:12:00:ef:04:7b:
8a:30:20:2b:bf:8a:99:ef:f0:75:f0:43:0f:90:b8:f0:b1:97:
97:79:fe:ec:3e:76:73:0b:a2:7f:b0:5e:82:0b:66:c2:58:ac:
b8:a3:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:46:18 2026 by rpki-client