
$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier: bGEwxE9F6OCLdUL7qAwxQ0PQURBG9xdgFAOn13UdKDI=
Subject key identifier: A7:80:BD:DC:E8:48:FA:6A:D4:15:3D:93:51:27:01:20:39:FD:55:E2
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number: 0333
Signing time: Wed 29 Jul 2026 02:05:08 +0000
Manifest this update: Wed 29 Jul 2026 02:05:07 +0000
Manifest next update: Wed 05 Aug 2026 02:05:07 +0000
Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: uTfeACM3lmpdjpmy5Od60v7TP3S3fRcjvFmIdHsZzOw=)
2: 9ABAA0F2860711F1825B87C479A30FBC.roa (hash: NOJB3Hv2pMFrhKnZajYeAs3Ut2mtOF2q/wUaov9o1Gw=)
3: 3329AB14860611F188D398BD79A30FBC.roa (hash: s9MG4AtqSHdsd3gX5TM+FCq3eB5Ek6aWf3JSkbBd0xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Jul 29 02:05:07 2026 GMT
Not After : Aug 5 02:05:07 2026 GMT
Subject: CN=6a695fd4-cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:00:10:1b:50:0a:ef:5d:77:f2:93:bd:ba:
27:09:51:aa:bf:b0:e1:66:e4:b1:f5:47:62:ef:fa:
86:e0:65:a6:78:1d:15:42:92:a2:46:00:36:2e:ae:
de:23:6a:ec:b1:67:3c:7c:3f:92:c2:75:b9:96:d1:
16:b7:66:a9:eb:8c:a4:fc:69:75:22:09:91:d1:40:
f8:58:f7:22:25:a5:65:ac:71:ad:fc:bf:e2:a7:b7:
5b:c0:3c:a9:77:88:f4:c2:85:6a:11:be:01:90:e1:
80:b1:6e:22:b5:d7:b2:17:7a:da:1a:e0:ab:3b:e1:
45:2f:ad:10:76:10:f2:32:c5:78:4e:bd:2d:b3:40:
4b:ff:fd:81:1c:74:e0:cd:b4:e9:f7:f4:4b:4b:1e:
2a:e5:b3:a3:00:4a:35:18:3a:04:0e:9b:89:74:a8:
b7:f7:e9:bf:80:29:eb:f6:be:cf:58:ed:a5:cf:a4:
d3:9a:29:b9:cb:24:bd:e0:fc:6a:18:38:cb:ba:e5:
cc:7d:4c:67:fc:95:57:88:23:59:df:fb:67:86:48:
e7:7a:e3:c1:81:6d:14:8f:6c:eb:f9:30:50:7f:b0:
b0:5b:10:69:df:62:4d:94:06:44:7a:4c:be:05:bc:
eb:be:29:66:90:0e:d2:5d:a6:c9:2f:be:4f:bf:82:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:BD:DC:E8:48:FA:6A:D4:15:3D:93:51:27:01:20:39:FD:55:E2
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:18:a3:89:54:47:d3:07:05:75:03:d3:88:d3:86:3c:79:
14:31:44:bd:a0:97:56:53:04:e4:74:b2:ea:5f:d8:87:b8:e0:
63:62:24:86:5b:44:fa:f3:76:9e:02:5f:81:f1:77:f0:2c:83:
bf:e3:02:63:3a:49:71:13:76:cb:1e:20:3b:95:cd:8c:48:c4:
9e:22:1e:4e:71:44:e5:f0:35:7a:a6:a3:61:ec:79:ef:69:17:
4c:e3:b4:a2:52:cb:07:13:cb:93:b0:33:dd:0c:db:03:84:66:
aa:72:71:b5:5f:44:8a:b7:c7:5d:c8:95:c1:fc:0e:16:60:ef:
42:fe:68:4b:38:23:d1:96:f4:f9:fa:7b:6d:5f:9e:81:69:c8:
c5:dc:9a:54:23:d9:b3:58:96:94:ab:e6:3a:05:ae:c2:b6:2d:
f7:78:11:44:a0:0e:a6:c9:b3:82:8a:30:a5:6d:a0:00:7b:66:
44:da:91:90:af:c3:62:87:af:2a:6c:d2:c5:1f:8f:61:12:c1:
4b:66:7e:aa:46:6d:70:9c:aa:5b:32:61:d1:7f:93:94:27:39:
7b:05:03:8d:7e:7d:0a:c3:de:2b:04:2b:b8:66:11:54:59:68:
d0:e3:6a:a3:7a:e3:cb:73:3b:2b:95:59:58:d3:23:68:15:42:
03:6a:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:40 2026 by rpki-client