
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json)
Hash identifier: 7N8Tnr2HqiJ86Rn3A1hXRolGp5eorpmIMQgDj8wt8No=
Subject key identifier: 8A:5E:FF:AE:31:9A:BA:1C:69:95:C7:DA:CF:5D:D1:1C:23:54:8D:22
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
Manifest number: 2D
Signing time: Mon 27 Jul 2026 11:07:31 +0000
Manifest this update: Mon 27 Jul 2026 11:07:30 +0000
Manifest next update: Mon 03 Aug 2026 11:07:30 +0000
Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: WZwM1WapyarevgRgeZbQuoEYqOKtAetKScKZRVGVeqM=)
2: A6F2C5C2491F11F193C776FB9E833773.roa (hash: TIPSpd8GDTa/HiS4PdTYKDX+P5DkBR89f8e9l36/XBU=)
3: A66886B4491F11F193C776FB9E833773.roa (hash: xXcNcDHlNzFBW5kniWXaJCDFIU93zgQzDwb/xuMFxAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: Jul 27 11:07:30 2026 GMT
Not After : Aug 3 11:07:30 2026 GMT
Subject: CN=6a673bf2-d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:ec:77:a6:b9:5a:0f:38:5e:c5:46:7a:fb:
96:79:17:58:ca:4c:5c:18:4a:2b:3a:7c:9b:a5:e8:
a1:68:4d:79:f2:8f:e7:aa:3b:a2:8b:a3:97:38:88:
29:a3:2f:ef:8d:f0:5d:d3:53:04:c8:b7:d9:5a:5b:
dc:22:27:ba:ad:bd:86:c0:42:74:42:4d:a0:ce:7d:
c3:f6:7e:b9:22:26:e7:a4:0f:6d:e7:70:66:d2:66:
4d:a5:52:16:58:42:ea:5b:8c:cc:39:2f:7b:80:16:
ee:22:25:11:1d:66:80:d3:77:56:b5:16:1e:0e:fd:
51:3b:5f:d8:e9:49:35:f3:32:0f:d3:35:58:38:54:
15:3c:51:ab:68:12:35:9a:d1:5a:af:c9:47:e6:28:
52:4f:1c:4f:bc:77:96:5b:99:a7:25:55:25:53:5d:
77:bd:31:78:af:f8:68:6f:d4:5e:dc:b1:90:a9:c5:
c6:47:d3:90:12:f1:0b:83:2d:6c:42:ba:4d:bf:f8:
4f:81:23:ac:f7:60:54:d2:6b:12:a6:d2:70:c0:fc:
72:39:85:ba:82:ea:0f:d1:81:18:bd:7b:f7:4b:8d:
72:64:78:63:a5:17:39:17:56:0f:97:0f:b2:66:76:
54:88:0c:b4:47:7d:9e:3a:88:be:7e:de:34:14:3c:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:FF:AE:31:9A:BA:1C:69:95:C7:DA:CF:5D:D1:1C:23:54:8D:22
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:d9:95:67:71:c0:28:bf:4a:fa:0f:d3:5e:3a:c5:b2:ba:07:
d2:26:37:1b:42:22:63:a9:a7:66:3f:39:8f:46:d4:3c:5d:44:
98:05:e6:94:1e:26:f4:a3:25:ef:a1:c8:18:5b:8b:34:68:2d:
b8:90:5c:4d:df:ba:74:46:9a:cd:f0:94:51:5f:54:e1:3a:84:
93:69:0e:3f:60:a9:02:d1:e9:ae:93:44:33:78:e9:2d:ff:b6:
b4:e5:21:5b:58:2a:e0:14:33:3a:14:f6:4d:93:12:87:1c:00:
f9:d4:9d:67:dd:72:17:25:dc:00:c7:05:51:60:bd:39:a8:2f:
a2:8f:42:42:7c:1a:bd:24:32:7f:e3:52:34:f1:49:84:8f:1b:
52:1c:61:8c:1f:fd:cc:60:fd:cc:48:13:c1:cf:38:91:99:cb:
62:0d:dc:01:37:8d:ef:c0:b9:1d:32:3d:45:a4:ca:f3:c8:06:
e6:04:15:85:80:07:a2:88:d1:23:2f:ab:b2:a0:76:f7:c4:3b:
ea:14:3e:5a:da:b3:45:c4:f7:f2:dc:38:20:c8:6f:f5:2f:c4:
f5:a5:0d:0d:ef:e2:b7:90:c0:3e:e6:aa:17:38:83:9f:5b:36:
cd:46:31:d4:55:8e:2d:b8:a8:6a:89:5b:73:f8:87:c3:d6:03:
a6:d2:83:c8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4
MTJCQUNGQzAeFw0yNjA3MjcxMTA3MzBaFw0yNjA4MDMxMTA3MzBaMBgxFjAUBgNV
BAMTDTZhNjczYmYyLWQ0YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCioex3prlaDzhexUZ6+5Z5F1jKTFwYSis6fJul6KFoTXnyj+eqO6KLo5c4iCmj
L++N8F3TUwTIt9laW9wiJ7qtvYbAQnRCTaDOfcP2frkiJuekD23ncGbSZk2lUhZY
QupbjMw5L3uAFu4iJREdZoDTd1a1Fh4O/VE7X9jpSTXzMg/TNVg4VBU8UatoEjWa
0VqvyUfmKFJPHE+8d5ZbmaclVSVTXXe9MXiv+Ghv1F7csZCpxcZH05AS8QuDLWxC
uk2/+E+BI6z3YFTSaxKm0nDA/HI5hbqC6g/RgRi9e/dLjXJkeGOlFzkXVg+XD7Jm
dlSIDLRHfZ46iL5+3jQUPFWFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUil7/rjGa
uhxplcfaz13RHCNUjSIwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx
RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE
RTA2LzY2OURCNTcyNDkxRjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhU
WHZmT2s1NWs4Q1lFcnJQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDi2ZVnccAov0r6D9NeOsWyugfSJjcbQiJjqadmPzmPRtQ8XUSYBeaUHib0oyXv
ocgYW4s0aC24kFxN37p0RprN8JRRX1ThOoSTaQ4/YKkC0emuk0QzeOkt/7a05SFb
WCrgFDM6FPZNkxKHHAD51J1n3XIXJdwAxwVRYL05qC+ij0JCfBq9JDJ/41I08UmE
jxtSHGGMH/3MYP3MSBPBzziRmctiDdwBN43vwLkdMj1FpMrzyAbmBBWFgAeiiNEj
L6uyoHb3xDvqFD5a2rNFxPfy3DggyG/1L8T1pQ0N7+K3kMA+5qoXOIOfWzbNRjHU
VY4tuKhqiVtz+IfD1gOm0oPI
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:43 2026 by rpki-client