
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier: MTQzckqawJQ8v7GSRpbnWeerMYzNOT5K9yILtoToYqU=
Subject key identifier: 4A:A6:A2:49:D5:50:6F:F9:18:90:48:A8:41:37:D2:E8:00:13:36:62
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number: 9D
Signing time: Mon 27 Jul 2026 09:35:49 +0000
Manifest this update: Mon 27 Jul 2026 09:35:48 +0000
Manifest next update: Mon 03 Aug 2026 09:35:48 +0000
Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: 75Jnbdk1C48zBVu0XFnL6hB3uAlrZWFcL7rHR8OLahw=)
2: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
3: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Validity
Not Before: Jul 27 09:35:48 2026 GMT
Not After : Aug 3 09:35:48 2026 GMT
Subject: CN=6a672675-08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:16:df:c0:02:19:a9:08:8a:09:ad:86:d6:
10:d8:d7:d5:82:59:e3:71:8b:c5:24:c4:bb:7c:1a:
f3:01:6a:fd:2b:81:5f:36:76:57:00:83:0a:9f:5c:
9c:39:2b:65:06:f7:d0:de:fe:64:05:9b:c8:f5:a6:
10:08:cc:97:f0:5c:3f:ea:6d:cd:c5:09:f4:6a:70:
7b:a8:3e:33:e7:b1:9d:e9:4c:7e:d5:9f:97:18:16:
b2:46:c6:92:e7:cd:ce:09:b2:0a:a0:df:3e:fb:3d:
e5:94:28:29:1e:a1:51:57:96:01:da:21:c0:49:e7:
9c:79:9f:d8:2a:d2:d1:c9:9e:75:47:aa:73:ac:76:
4b:fb:40:30:23:6f:92:10:83:27:63:be:b3:c1:8a:
7f:45:fd:73:bc:bb:ad:37:7e:9f:4c:ec:34:d9:56:
84:da:38:53:a6:a1:ca:1d:e1:6e:44:a9:47:2d:b3:
65:ec:3e:e3:4b:2f:b2:f3:d6:e1:e9:aa:bc:87:d5:
97:09:c4:47:7c:38:7b:6d:30:db:c9:95:dd:4f:e1:
4f:fa:6c:3f:41:7d:44:5e:2c:81:29:09:53:60:80:
4a:31:df:8f:d1:a9:c3:de:9e:70:56:cf:be:99:f2:
b8:d6:ac:ab:13:f3:79:91:4f:bd:86:53:f3:ab:46:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:A2:49:D5:50:6F:F9:18:90:48:A8:41:37:D2:E8:00:13:36:62
X509v3 Authority Key Identifier:
keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:ce:9f:93:3b:c8:42:00:78:12:66:76:e8:4d:01:03:d6:
54:b8:3f:a8:65:86:fe:5c:d6:c3:83:6b:ea:f8:0f:91:26:fe:
c8:99:1c:ed:1b:a0:8f:ba:28:ca:c1:99:f2:c8:cc:4f:db:4c:
24:90:df:d2:f1:8e:ec:1f:4c:6d:32:4d:66:d7:85:13:cf:b5:
0a:b0:3f:45:75:60:75:de:f3:57:0a:a6:3c:f9:80:9f:0c:76:
8d:83:96:63:8b:6d:4f:84:27:c5:b9:66:7e:96:8b:32:7b:86:
17:92:7d:9c:21:db:59:b6:72:6d:5f:fc:42:a5:b9:45:9e:7f:
77:19:02:bb:0e:13:8f:3d:2c:44:ba:a7:62:d7:70:8f:db:58:
c7:be:32:57:87:81:2d:18:9b:83:0c:b0:f6:41:e0:0b:21:f7:
f7:ea:52:04:7d:a6:84:d5:f2:0c:12:b2:ab:12:a2:95:0e:e9:
45:bc:3d:42:ad:cb:e1:9c:6a:bb:70:15:74:4c:48:a6:7b:b0:
02:4d:8e:1e:c8:57:59:fa:c0:2d:c3:db:4e:38:db:e3:97:e4:
3d:df:d8:dd:58:66:4c:98:2e:1e:94:de:1a:9f:c0:db:05:35:
66:7f:a5:81:81:cd:a7:2c:00:19:09:1b:7a:a9:fc:5c:58:d2:
db:b8:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:01 2026 by rpki-client