
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
File: rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json)
Hash identifier: 4chUwN2Z13RDZVKwJfUJEIKpi11m3p5KacRkXKf6odU=
Subject key identifier: 7F:C3:AD:00:0E:19:EF:80:D9:17:E2:F2:44:2A:DF:B5:73:6F:C2:52
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Certificate issuer: /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
Manifest number: 40
Signing time: Sat 13 Jun 2026 08:33:58 +0000
Manifest this update: Sat 13 Jun 2026 08:33:58 +0000
Manifest next update: Sat 20 Jun 2026 08:33:58 +0000
Files and hashes: 1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: pnFb0kaISCxLH43vWuatc9yN8j5jvZfdKQbnoEjhmcU=)
2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Validity
Not Before: Jun 13 08:33:58 2026 GMT
Not After : Jun 20 08:33:58 2026 GMT
Subject: CN=6a2d15f6-127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:7d:de:95:30:c0:7d:3c:f8:0a:a0:56:85:
37:30:02:b8:c3:a2:d0:74:3e:f0:ce:0e:d2:36:89:
86:50:74:79:67:93:fa:be:04:7e:52:2c:e8:4f:48:
aa:3a:7e:45:10:a2:26:2f:7c:6c:ee:f2:6e:3b:4a:
cb:4a:98:0f:fc:56:09:03:a3:0b:a8:e9:eb:ca:9d:
f7:1d:c6:4d:94:6f:10:88:b6:ab:35:9d:66:85:ac:
da:b6:93:c1:b0:d5:be:f1:89:c9:1b:b6:f2:28:4f:
ea:dc:f6:e9:01:4c:47:88:d9:69:db:a7:b0:2f:f4:
52:d9:d0:08:ee:8b:0e:15:ea:d3:7f:fd:e7:f7:d7:
56:65:09:65:17:01:84:cb:0a:d5:81:ce:35:a6:9f:
98:59:8b:34:78:b0:73:5c:9a:f0:fc:06:32:6d:be:
4e:cf:97:1d:da:16:77:83:bf:00:e0:f5:9f:4f:9a:
e7:cb:57:b2:6a:33:61:0f:6d:28:96:00:cc:32:08:
9c:34:30:82:97:f5:3c:fa:6f:89:e6:b4:be:10:0e:
7c:06:03:5f:d1:56:57:21:4c:b9:57:1a:86:4a:eb:
0e:c7:60:9d:90:1b:5d:95:5e:18:82:6b:74:9f:38:
3d:8c:d6:ce:a8:4f:bc:71:5b:6e:75:37:01:b2:6d:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C3:AD:00:0E:19:EF:80:D9:17:E2:F2:44:2A:DF:B5:73:6F:C2:52
X509v3 Authority Key Identifier:
keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:93:44:b2:e1:70:1c:68:46:9f:65:50:7a:e8:91:d2:8a:
fd:fa:ce:40:10:d3:64:f8:c1:43:e1:86:90:59:31:41:8e:cc:
f2:fc:51:6a:99:c5:0d:bd:d0:c4:bb:c4:73:d3:74:44:e9:b6:
4c:4b:98:3f:47:c6:f1:ba:90:b6:9d:ba:1e:c5:47:a4:3e:e2:
26:31:7b:eb:bf:15:df:5e:cd:01:39:fe:c6:fc:d4:bc:a0:8c:
fd:71:7c:9d:92:9d:d9:85:78:36:ae:a5:c6:ba:82:a2:69:cf:
e0:a5:dc:ab:52:f6:d8:b0:55:de:98:01:73:8a:a5:fa:bc:1d:
dc:7b:fb:52:d8:a8:05:fe:9d:cc:4d:66:57:f4:87:28:89:10:
6a:15:39:cd:8c:14:f6:f4:68:b4:0b:22:2d:d3:2b:0b:95:b5:
87:3f:39:20:bb:e4:57:a6:cb:e7:7e:08:26:26:46:35:bd:6b:
40:b1:af:89:05:ac:7e:ef:83:1c:75:aa:80:e3:17:0f:87:97:
57:ec:83:08:c4:0e:7f:6b:ca:fa:7e:fb:5f:fd:05:26:1b:4d:
18:dd:75:74:72:d1:16:da:ca:2d:c8:c3:78:c7:e1:a9:9d:33:
2b:a3:59:75:bc:79:23:31:2c:51:96:8b:36:03:c7:e7:4d:6e:
eb:45:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:51 2026 by rpki-client