
$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier: og/x712qkfnd+igbubM1UTT/yTrhsP/1RMLclLK4Tos=
Subject key identifier: E5:9F:D1:24:8B:15:17:7A:A6:F2:12:7B:0B:97:99:D9:97:52:35:03
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number: 0134
Signing time: Mon 27 Jul 2026 07:35:14 +0000
Manifest this update: Mon 27 Jul 2026 07:35:14 +0000
Manifest next update: Mon 03 Aug 2026 07:35:14 +0000
Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: osu6GImwQGZnbYEA39ldEooKOirRWeEn+7ZCah8XQGg=)
2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: QkVPChArca7p58dKOFKdeRoa2Z6OFQu0S93mu5qNgts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Validity
Not Before: Jul 27 07:35:14 2026 GMT
Not After : Aug 3 07:35:14 2026 GMT
Subject: CN=6a670a32-571f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:39:41:b8:e7:f4:0b:0c:d5:d5:f8:c1:51:
86:20:ae:fc:3e:35:66:86:7b:6c:5d:16:9f:26:b5:
84:d7:6a:27:90:bb:73:e7:21:f3:ad:ca:13:e8:fb:
32:e2:a7:63:54:2c:67:ad:05:02:1c:a3:5a:62:ed:
ff:82:51:bd:08:d1:b9:d2:8c:52:b5:09:71:bf:d2:
1b:18:28:cc:e3:9a:33:24:0e:43:39:a2:5e:d3:2e:
7e:c4:79:3b:ca:d0:9b:74:79:b1:49:5d:5f:5b:6b:
34:d5:e6:12:c5:85:0f:9f:39:a9:b2:1b:cc:d4:1d:
2a:4c:82:7f:bf:b2:c7:14:dd:d3:6d:3e:f7:95:53:
b7:e8:b6:26:be:7c:41:93:0c:90:51:cd:3b:ff:bb:
ca:de:4a:a8:38:4c:8d:03:61:c3:1d:53:c1:a9:8f:
30:c7:66:d6:46:7b:7b:b9:2e:46:50:7a:4a:a4:f2:
5d:1e:9b:7d:ea:7a:b5:42:cc:2e:eb:2a:c0:96:42:
8a:5c:68:c0:f1:64:67:95:82:6e:b1:6a:67:43:68:
c7:32:bc:98:29:3f:ad:0e:9b:f1:8d:29:5f:1b:06:
c0:5c:ee:5e:bb:55:2d:c4:69:74:ea:3f:71:ac:da:
2e:35:74:28:ca:ce:ac:8e:91:97:60:eb:ee:47:6f:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:D1:24:8B:15:17:7A:A6:F2:12:7B:0B:97:99:D9:97:52:35:03
X509v3 Authority Key Identifier:
keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:dc:17:3d:76:d9:61:4a:4c:fe:cd:15:6b:05:6a:c5:cc:ba:
91:b3:5b:a7:df:24:03:03:cb:3f:b0:bb:6f:59:41:82:e8:34:
40:8a:e5:bc:a0:c5:30:44:ac:41:45:81:f5:0e:85:10:7e:1d:
7b:67:6e:8a:cf:85:5a:9a:19:a6:8e:24:a5:1c:38:70:cd:e8:
2e:3b:71:7f:06:50:b8:21:75:ea:09:6d:3e:cf:5b:d1:a3:7c:
75:dc:c8:7b:69:cc:ed:13:57:61:af:e0:d9:89:b6:d9:b5:b1:
2d:ca:f7:18:d5:19:b8:c7:70:7c:a1:7c:5e:01:04:42:93:96:
b1:10:94:4f:85:65:d5:d7:1a:c5:6c:cf:97:e0:39:e8:e5:0f:
2d:d8:90:45:34:c3:c5:03:ea:67:4f:ad:f9:bd:b9:25:0e:d3:
6f:5e:56:55:8c:0c:56:17:15:49:5d:32:e9:3f:66:48:05:e5:
7e:f7:a6:ac:01:96:23:b0:32:fa:06:ba:60:e8:64:c1:a5:73:
89:06:3a:77:ef:7c:a4:00:e1:da:da:80:ab:78:f5:5d:ce:a3:
54:03:e4:47:53:6a:45:ea:2f:12:17:bb:fe:f4:5d:b8:28:01:
fe:bb:2c:7f:3d:c3:99:70:2a:78:ed:bf:9c:64:24:2f:62:93:
0c:b4:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:12 2026 by rpki-client