
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier: I9Czc04Lc7Y9pzgxzLdcuVrpyEL0kIYQOe3lWm+XyrQ=
Subject key identifier: 27:20:A6:12:9F:E1:3B:EF:DE:76:D5:3C:49:E4:40:F7:E7:FE:A2:7C
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number: 0279
Signing time: Wed 29 Jul 2026 03:02:35 +0000
Manifest this update: Wed 29 Jul 2026 03:02:35 +0000
Manifest next update: Wed 05 Aug 2026 03:02:35 +0000
Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: J5f4Ge2UsWNO2eRv4igMvrR5Hdr/K1QwmyPbNN7qWnE=)
2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Validity
Not Before: Jul 29 03:02:35 2026 GMT
Not After : Aug 5 03:02:35 2026 GMT
Subject: CN=6a696d4b-c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:12:9f:c1:41:06:c5:d9:0d:db:0b:04:3f:
fc:78:41:73:ba:ab:13:bf:d0:32:0b:6c:c6:8b:6d:
43:14:a0:90:80:35:bb:22:f9:bd:b5:b1:68:ab:32:
9e:45:17:2a:74:ec:ba:6f:06:b7:54:98:bc:ff:28:
f1:ff:d8:04:f0:9e:fb:20:28:30:75:42:f1:0c:86:
fd:f0:8f:b3:92:aa:ec:82:e3:7c:0f:6b:ff:89:75:
55:5a:7d:75:c7:1c:c1:d0:5c:f3:f6:29:35:28:f5:
a4:e7:9f:0a:96:49:18:cd:52:95:93:f6:46:b5:55:
56:5d:f6:17:49:24:4a:77:98:41:9e:6e:f5:0d:4b:
f6:16:ac:b8:ae:b8:db:fb:86:ca:34:d9:39:81:00:
f9:d4:04:91:44:36:ff:55:86:69:0f:09:c8:69:72:
9c:c1:c9:bd:03:11:dd:00:9a:79:45:c7:d2:69:75:
1a:ef:2f:4c:13:bb:4d:a9:47:fc:ce:73:3d:30:0f:
32:70:8a:bb:f6:a7:36:7d:f8:25:ec:ff:f0:4d:0e:
9a:ef:3e:e7:20:dc:1d:1d:cc:e3:0a:cd:34:31:bb:
bd:52:9e:a7:ed:fb:00:a2:a7:85:d7:da:d7:2f:3e:
36:67:64:49:4f:3b:16:de:3a:a5:69:f5:42:3a:3c:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:A6:12:9F:E1:3B:EF:DE:76:D5:3C:49:E4:40:F7:E7:FE:A2:7C
X509v3 Authority Key Identifier:
keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6f:a0:80:98:7b:5c:7d:5a:8b:51:56:87:40:2a:97:d8:30:
45:cf:ba:a4:13:48:66:32:bd:72:83:5c:cb:0e:4a:cf:07:1f:
a8:b1:91:00:e1:31:34:43:23:3e:8b:26:0f:25:ea:4a:8b:fb:
11:ba:ae:a8:6b:ee:33:b4:9b:16:33:b5:04:25:c1:d8:40:d8:
6d:5c:33:0e:04:b2:a3:1e:4d:4c:31:e8:f5:4a:bc:43:bd:a5:
49:e2:b2:d6:de:b7:b5:b6:a6:c1:91:8c:68:ab:20:30:cc:ac:
f1:00:fe:e0:04:e9:e1:0b:ee:7f:ec:74:03:c9:13:ea:3b:44:
42:0a:d9:2d:87:ea:99:70:cf:a2:91:f1:e8:51:18:ee:56:c4:
29:53:e0:48:ba:41:45:57:da:f0:17:34:92:ab:59:bf:cc:c5:
ad:d0:1b:2c:58:b3:18:57:3f:43:8b:03:a6:b1:4e:c6:bf:bf:
78:70:1c:9c:34:cb:63:da:22:b3:6d:0e:d6:44:34:32:96:33:
5d:9c:03:01:af:77:ea:80:de:3f:1b:95:7b:b0:97:8d:e3:95:
d8:64:53:f8:df:02:a7:62:99:68:9a:2d:79:9a:c0:87:1a:19:
8b:80:ed:98:18:8f:cd:b3:1a:d1:9c:d3:0a:73:ce:a4:f9:a1:
cf:76:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:55 2026 by rpki-client