
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: eVhNhWu46loiIL0nllNGjqYs4lb1dxhfLeXTjHCwds0=
Subject key identifier: E2:7D:87:A8:91:93:56:14:37:6E:8F:74:DE:D0:F5:B5:3E:82:62:54
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 0158
Signing time: Wed 29 Jul 2026 06:27:14 +0000
Manifest this update: Wed 29 Jul 2026 06:27:14 +0000
Manifest next update: Wed 05 Aug 2026 06:27:14 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: HWBb2zdSZhefxEO/xcCN2dzjns5qCMdWcPHeaUJHhhQ=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Jul 29 06:27:14 2026 GMT
Not After : Aug 5 06:27:14 2026 GMT
Subject: CN=6a699d42-1ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:7d:16:a6:a1:51:cb:95:69:1d:7d:7c:91:
b9:4b:63:9b:e6:11:72:b3:78:0e:a2:5e:5a:8f:00:
44:cf:be:3e:4c:ad:b6:72:85:1e:23:98:c2:fd:bf:
6d:73:84:15:2a:78:9b:ac:f2:18:e2:4d:88:59:c8:
37:7e:31:dc:03:75:7b:c4:ac:cf:d9:55:56:94:ef:
04:a1:c3:3f:04:d7:58:38:08:74:60:b6:6e:18:28:
79:0b:18:3b:d2:ab:09:63:e5:d2:77:fd:ad:b4:6b:
8a:e3:97:e4:f5:e2:0e:11:ab:21:e1:30:1d:05:bd:
8c:2b:5c:aa:75:a5:6f:af:6e:71:1e:c8:dd:e7:f2:
71:f9:23:e6:1d:f5:4e:43:57:58:bc:a0:39:04:f0:
f4:37:1e:2a:9c:8d:84:b5:cc:89:a1:3b:aa:28:26:
30:4b:98:28:78:87:56:ea:a8:41:0a:aa:08:88:c7:
18:03:f4:12:f5:eb:cd:28:92:2d:78:cc:b5:a7:9a:
1d:42:c1:a8:b6:64:c5:95:ad:d1:a7:8c:5a:d7:71:
b1:55:ed:2c:ac:27:c0:46:c3:3b:a2:81:1c:b2:94:
2c:87:66:89:9d:f5:a4:c7:f6:cd:1c:8b:80:4b:03:
ef:f2:0e:1b:31:a6:42:36:df:d8:84:f9:a8:fb:56:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:87:A8:91:93:56:14:37:6E:8F:74:DE:D0:F5:B5:3E:82:62:54
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a3:a2:24:11:8f:0d:18:6e:11:d4:34:07:2a:ed:ad:d6:78:
49:a5:d0:dd:fa:0e:96:e4:5b:f7:0c:e3:26:73:3d:ab:21:2e:
c9:f5:a5:ca:9b:a0:27:f3:eb:51:56:95:86:82:16:ad:90:e7:
da:67:b9:11:15:d8:39:cf:00:22:76:1b:3a:a0:4b:9b:c6:90:
75:2a:50:7f:81:40:a9:95:4c:b6:1a:07:96:24:ef:9d:00:79:
d7:05:56:46:c3:d4:ec:98:a0:b9:48:b4:f1:e8:29:5d:9b:53:
4a:ac:36:95:71:4a:23:8e:0b:46:0a:a0:18:de:d4:3d:2f:c1:
13:fa:be:3c:a0:93:f3:b5:4c:44:ce:83:65:54:c0:f4:d7:d7:
6a:e3:64:9f:e6:50:3d:6b:38:d4:bf:7e:9f:84:bf:3e:1e:0c:
6e:d0:25:1e:73:80:46:fd:fa:d3:43:4b:01:a9:35:6d:eb:9c:
ab:9b:3c:21:78:6e:89:7b:13:6b:49:40:32:33:e0:98:37:41:
da:82:37:73:a1:9e:da:d6:4c:95:05:bb:6c:c0:b8:a9:e0:61:
8b:b0:11:89:1d:7a:aa:5f:02:48:54:28:76:ab:6a:e1:fd:35:
b3:a8:8b:ce:0a:4e:5b:e1:1a:11:58:cf:75:2a:05:4a:fb:be:
c4:4a:01:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy
NjBCOTk1RTYwHhcNMjYwNzI5MDYyNzE0WhcNMjYwODA1MDYyNzE0WjAYMRYwFAYD
VQQDEw02YTY5OWQ0Mi0xZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFN9FqahUcuVaR19fJG5S2Ob5hFys3gOol5ajwBEz74+TK22coUeI5jC/b9t
c4QVKnibrPIY4k2IWcg3fjHcA3V7xKzP2VVWlO8EocM/BNdYOAh0YLZuGCh5Cxg7
0qsJY+XSd/2ttGuK45fk9eIOEash4TAdBb2MK1yqdaVvr25xHsjd5/Jx+SPmHfVO
Q1dYvKA5BPD0Nx4qnI2EtcyJoTuqKCYwS5goeIdW6qhBCqoIiMcYA/QS9evNKJIt
eMy1p5odQsGotmTFla3Rp4xa13GxVe0srCfARsM7ooEcspQsh2aJnfWkx/bNHIuA
SwPv8g4bMaZCNt/YhPmo+1bRBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJ9h6iR
k1YUN26PdN7Q9bU+gmJUMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2
RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS
SDhXdHVFQTNpU3NtQzVsZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWKOiJBGPDRhuEdQ0ByrtrdZ4SaXQ3foOluRb9wzjJnM9qyEuyfWlypugJ/Pr
UVaVhoIWrZDn2me5ERXYOc8AInYbOqBLm8aQdSpQf4FAqZVMthoHliTvnQB51wVW
RsPU7JiguUi08egpXZtTSqw2lXFKI44LRgqgGN7UPS/BE/q+PKCT87VMRM6DZVTA
9NfXauNkn+ZQPWs41L9+n4S/Ph4MbtAlHnOARv3600NLAak1beucq5s8IXhuiXsT
a0lAMjPgmDdB2oI3c6Ge2tZMlQW7bMC4qeBhi7ARiR16ql8CSFQodqtq4f01s6iL
zgpOW+EaEVjPdSoFSvu+xEoBsw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:38 2026 by rpki-client