
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: adXn8MFQuslGAQawOANayER27MTuZAYySAhlXZft54I=
Subject key identifier: EA:6F:32:8C:62:A0:55:8D:A8:FB:4D:56:F2:1D:72:CA:3F:CC:CC:7B
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 071D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 0700
Signing time: Sun 26 Jul 2026 22:57:51 +0000
Manifest this update: Sun 26 Jul 2026 22:57:51 +0000
Manifest next update: Sun 02 Aug 2026 22:57:51 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: JJZDl08cGJ3efVuHApfSJkNj5dWRlftYmmYDyuqFUi0=)
2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Jul 26 22:57:51 2026 GMT
Not After : Aug 2 22:57:51 2026 GMT
Subject: CN=6a6690ef-eb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:2a:8b:f1:67:38:43:97:2f:54:74:90:46:
66:fe:e8:47:d2:c6:28:2f:01:1b:72:5e:65:37:fa:
37:f4:f3:b6:0e:36:17:11:fc:ff:c8:89:7e:d7:00:
68:99:7d:62:4b:4e:dc:00:15:db:58:b5:e4:fd:00:
f2:e8:30:73:f9:3f:ec:70:e1:88:39:8f:4c:59:3f:
ed:99:50:90:1c:eb:40:41:5e:45:63:65:47:76:fd:
29:87:b4:4c:96:f0:f6:21:5b:54:8d:5d:73:f2:3b:
06:4b:ed:7a:65:9a:e0:c4:bb:7c:bf:05:1c:ba:c4:
b9:34:1c:bc:6a:38:03:12:ff:f7:31:26:91:6b:5d:
b9:cc:c8:69:c8:52:52:99:c2:3d:b3:f2:3a:c5:e1:
53:65:9e:c2:df:0d:83:01:89:ca:4e:0b:43:e6:2d:
34:d6:56:e5:a5:09:6a:7c:68:4b:94:0a:0c:56:3e:
f9:35:bd:b6:9f:83:e2:61:4b:65:28:84:a9:de:8a:
79:c3:71:52:d4:52:62:18:3c:30:0b:f8:3e:0f:90:
84:0c:8e:4b:1c:68:c2:e1:6e:8b:63:d0:40:a3:70:
2e:fa:f8:cd:7d:c2:32:ff:ca:73:43:93:96:b6:ac:
ba:94:da:b6:c1:95:94:06:64:73:6f:bf:d0:3c:c6:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:32:8C:62:A0:55:8D:A8:FB:4D:56:F2:1D:72:CA:3F:CC:CC:7B
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:af:ad:61:e6:bb:69:a3:a7:48:24:c0:0c:a3:ac:83:7c:
00:98:77:4f:db:f1:e7:2a:ab:c8:3e:32:35:a6:f0:47:f9:90:
20:c8:0f:68:7f:45:99:dd:7e:8e:5b:76:93:b4:28:ac:ac:84:
5b:0a:55:e8:34:db:4b:8d:24:0e:f0:f0:12:d9:72:61:e9:6b:
94:e7:8b:7f:23:8a:42:3f:89:97:35:85:11:b4:5d:46:84:48:
95:84:54:05:fb:f4:29:2d:1e:c9:ae:54:09:43:1d:cc:71:ed:
33:00:af:e5:bd:20:c2:a6:bf:c2:0a:5c:0e:1b:67:75:d7:54:
b4:70:69:0d:ae:b9:cc:f2:56:ea:57:fb:53:5a:fe:84:33:36:
6c:54:5f:f4:d7:04:77:25:81:62:06:2d:c5:d8:64:f1:e5:c9:
a4:7c:fe:d0:19:33:a3:96:88:55:85:b8:46:b4:9c:a8:cf:f8:
aa:73:93:e7:d8:9b:e2:4a:70:73:e5:52:d8:67:39:b0:ef:53:
45:5b:1d:04:6b:9a:40:42:2a:13:dd:5c:d3:c2:b5:69:bf:e7:
fa:82:82:81:39:88:da:f9:59:05:62:af:57:93:f3:29:13:c8:
69:50:4c:3d:50:4d:e8:25:5d:af:e8:bc:62:e0:60:71:bf:09:
78:6b:63:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjYwNzI2MjI1NzUxWhcNMjYwODAyMjI1NzUxWjAYMRYwFAYD
VQQDEw02YTY2OTBlZi1lYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu78qi/FnOEOXL1R0kEZm/uhH0sYoLwEbcl5lN/o39PO2DjYXEfz/yIl+1wBo
mX1iS07cABXbWLXk/QDy6DBz+T/scOGIOY9MWT/tmVCQHOtAQV5FY2VHdv0ph7RM
lvD2IVtUjV1z8jsGS+16ZZrgxLt8vwUcusS5NBy8ajgDEv/3MSaRa125zMhpyFJS
mcI9s/I6xeFTZZ7C3w2DAYnKTgtD5i001lblpQlqfGhLlAoMVj75Nb22n4PiYUtl
KISp3op5w3FS1FJiGDwwC/g+D5CEDI5LHGjC4W6LY9BAo3Au+vjNfcIy/8pzQ5OW
tqy6lNq2wZWUBmRzb7/QPMZc2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpvMoxi
oFWNqPtNVvIdcso/zMx7MB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW
TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARI+vrWHmu2mjp0gkwAyjrIN8AJh3T9vx5yqryD4yNabwR/mQIMgPaH9Fmd1+
jlt2k7QorKyEWwpV6DTbS40kDvDwEtlyYelrlOeLfyOKQj+JlzWFEbRdRoRIlYRU
Bfv0KS0eya5UCUMdzHHtMwCv5b0gwqa/wgpcDhtndddUtHBpDa65zPJW6lf7U1r+
hDM2bFRf9NcEdyWBYgYtxdhk8eXJpHz+0Bkzo5aIVYW4RrScqM/4qnOT59ib4kpw
c+VS2Gc5sO9TRVsdBGuaQEIqE91c08K1ab/n+oKCgTmI2vlZBWKvV5PzKRPIaVBM
PVBN6CVdr+i8YuBgcb8JeGtj+g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:26 2026 by rpki-client