
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier: F0ESBlRuzYIfmIiOOGTqom3PUABEkmmXLqQw7J7qq3s=
Subject key identifier: FF:39:E1:76:0C:9D:0F:9D:49:DD:51:29:7A:BC:E4:D5:0D:CF:67:EC
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number: 0142
Signing time: Mon 27 Jul 2026 07:17:41 +0000
Manifest this update: Mon 27 Jul 2026 07:17:41 +0000
Manifest next update: Mon 03 Aug 2026 07:17:41 +0000
Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: lM6qDbs8uk0z9D6hJy7UzTeR/nDciyZKLbrbQ6dZlvo=)
2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: WvBYC5RPQBjCgKYxv8nmuukDYtwi8f7s6ddjHk+AitQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Validity
Not Before: Jul 27 07:17:41 2026 GMT
Not After : Aug 3 07:17:41 2026 GMT
Subject: CN=6a670615-c821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e5:58:d3:ad:86:5c:c8:3b:e2:fc:53:a6:b7:
f9:60:e5:6b:84:f0:99:eb:7b:68:92:8b:0b:52:af:
3f:7d:8f:3f:a0:a7:77:7a:30:3c:9a:7e:db:7d:a2:
a6:02:db:7b:17:12:5e:a6:8d:d4:20:91:ab:88:dd:
9b:05:94:3d:c6:9f:d1:09:1d:1b:9e:c9:e9:d9:44:
c3:73:7b:f9:bf:3f:02:c5:6f:d7:3e:5a:a1:98:3f:
0d:de:b5:20:4d:3f:a1:e0:b9:8e:e9:37:6a:1f:bf:
3d:76:59:54:f1:9e:c9:8b:35:11:84:79:6d:5a:4f:
3f:39:7b:be:ee:18:14:59:43:bd:bc:90:50:3f:9c:
6f:8c:65:22:26:37:7b:c9:66:70:2b:f7:ef:4e:63:
da:eb:4f:ec:bd:9f:4e:a6:ce:b9:d4:64:65:4a:33:
b2:3b:8d:52:2e:07:0e:44:16:0c:77:fe:6d:fa:8a:
85:07:b8:d3:43:4c:f7:ef:fd:43:62:43:21:fb:07:
2c:cd:8c:5b:1e:b3:e6:09:4b:f8:18:ab:f2:3e:f8:
20:73:81:c9:b3:42:3f:c9:be:db:0d:7d:75:5d:19:
76:ad:05:ab:39:40:36:e1:3e:25:73:31:d5:48:ce:
0e:f8:62:cc:eb:bb:91:15:3b:66:59:ad:a2:a8:b0:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:E1:76:0C:9D:0F:9D:49:DD:51:29:7A:BC:E4:D5:0D:CF:67:EC
X509v3 Authority Key Identifier:
keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:61:f9:4c:36:b7:0e:0a:11:4c:b0:10:c9:1a:50:1e:d5:
80:d6:ae:de:92:75:9b:c5:06:cf:2e:84:18:4e:b0:67:1d:c2:
c1:76:8b:71:70:73:13:b7:e6:4a:24:b0:ad:f9:69:88:95:2c:
64:d4:3e:fb:57:55:60:0b:3a:c9:77:a2:75:33:6f:26:e4:2a:
47:f9:c0:28:64:9c:62:f5:e7:b8:fa:4a:ca:b9:e9:11:e1:35:
d9:71:07:f3:8c:8e:f3:a4:e5:fe:1b:7c:0b:b3:6f:1d:8e:7c:
bc:5e:17:58:dc:3b:25:49:1c:c0:80:75:69:fc:d2:fb:48:e6:
66:4a:39:38:27:f3:aa:43:1e:2c:fc:d3:a0:f3:11:80:ba:ac:
a1:d8:4e:63:90:d1:17:fb:4f:af:9b:24:b0:8a:a7:e0:06:4e:
55:79:b1:0e:d3:eb:60:16:57:c9:70:f3:c4:3a:c6:c0:f5:f0:
31:28:93:ce:b4:06:a8:69:38:7e:e6:95:88:97:6d:cc:d6:ee:
f4:f7:b7:42:4c:5f:94:05:1e:6c:74:ea:1c:0f:f8:a9:ea:ea:
6e:de:4a:61:34:53:b0:ad:26:42:54:99:1f:43:9e:a2:98:cc:
08:30:14:79:df:7e:65:3d:14:76:db:85:4b:62:f2:e6:90:4c:
a3:76:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:24 2026 by rpki-client