
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier: Xbv8ckAelAK9Wkrme5Y1IhACUr4hJG+rb/JX7H/ITYQ=
Subject key identifier: E0:D9:BB:7E:88:84:5E:0A:DB:04:AD:C7:9A:C4:BC:B9:FE:AB:90:1A
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number: 032B
Signing time: Mon 27 Jul 2026 02:16:00 +0000
Manifest this update: Mon 27 Jul 2026 02:15:59 +0000
Manifest next update: Mon 03 Aug 2026 02:15:59 +0000
Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: 62MX7HbWHFy1FfSjRptd65vsQsyaqLtIIbBqFClgzEc=)
2: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
3: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Validity
Not Before: Jul 27 02:15:59 2026 GMT
Not After : Aug 3 02:15:59 2026 GMT
Subject: CN=6a66bf5f-819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:90:c1:48:97:31:81:bc:3d:b9:45:2d:1a:
c8:df:0a:65:9e:35:1a:c1:5e:ff:30:8d:6b:75:76:
a6:0d:ff:02:cb:d1:9d:df:cf:73:1c:bc:dd:78:6b:
2a:9d:99:c5:36:07:68:d5:eb:e7:5f:96:ac:b9:b2:
da:b4:09:e0:28:4b:fe:ff:a8:66:d5:d7:77:ed:c7:
59:ff:4b:89:ed:c8:b0:a3:c9:01:6c:66:d8:5d:4d:
6a:39:4d:ad:34:a2:92:ab:7b:1f:da:33:ee:2e:8e:
0f:f2:fb:fc:3f:45:1b:2b:7b:db:38:e2:a1:da:a9:
17:12:07:92:b7:ca:bc:7d:e7:93:f7:da:7e:7e:50:
7a:f0:21:c9:63:27:8d:ad:10:67:db:49:86:9c:8a:
39:2f:fc:23:79:8a:a0:5f:b8:13:89:69:5f:1b:f0:
d0:a0:d4:72:21:b7:d1:f8:92:5b:c4:a8:4f:c9:09:
d4:ff:0f:d2:85:0c:57:d1:1c:09:e7:ff:1b:6a:c4:
73:ce:91:75:2e:03:07:8f:c8:2f:e5:a4:5d:8b:57:
15:6f:2f:fe:6d:e4:31:eb:60:76:0f:64:06:38:ca:
bf:a8:83:e1:be:94:8a:5f:12:96:ca:4d:7f:56:78:
3f:90:d1:1e:32:21:a9:42:02:5e:a5:0f:33:a3:35:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D9:BB:7E:88:84:5E:0A:DB:04:AD:C7:9A:C4:BC:B9:FE:AB:90:1A
X509v3 Authority Key Identifier:
keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:44:4b:ec:6b:85:c5:64:82:86:73:fb:89:e9:cf:0f:e3:
f0:77:fd:37:9e:1c:6a:8e:f5:af:c1:c2:67:46:e7:fe:b6:bc:
8e:a3:97:d1:95:5a:3d:9c:86:0a:1d:7a:01:cc:6c:f3:2c:ae:
be:9e:38:65:3a:36:3d:64:0d:0f:75:52:32:2d:66:22:47:e4:
7a:96:7a:b0:dc:2d:70:1a:9f:7a:94:e7:9f:fe:a3:d7:ee:22:
e9:a0:41:8d:c8:42:17:68:92:80:46:b4:05:79:1d:ff:86:90:
58:a9:a2:58:57:98:54:3f:93:9d:73:d9:16:75:e0:71:b1:86:
9f:18:33:87:34:61:a1:5f:fc:38:60:46:a8:ef:54:a6:6c:bf:
8d:92:2b:9b:82:a2:b5:70:d8:c1:3e:ec:99:00:1a:a4:8d:d0:
87:bb:f0:da:61:95:4c:c7:49:d1:a5:9f:2b:a9:91:ca:be:67:
a8:6f:15:a8:91:6c:6d:4c:4f:ea:e2:d6:bd:cf:1d:9a:07:54:
3d:48:4b:0e:d9:1b:01:7d:dc:33:a3:eb:f1:f2:ed:de:ac:bc:
b4:68:61:0d:2c:46:25:72:ce:62:71:16:bc:95:d1:c3:c0:0f:
c1:4f:ab:a8:f8:f0:7a:84:48:e5:d7:45:b0:df:7c:8e:78:a3:
84:68:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:09 2026 by rpki-client