
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json)
Hash identifier: IAbVJf6B0CYso2Y9/xRYaXIWf4yE2Kep0tkaOUtgZMo=
Subject key identifier: 60:28:91:11:2E:41:4C:A1:B5:E9:3B:E4:61:B9:D7:D6:0A:EF:3D:14
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 3618
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
Manifest number: 35CC
Signing time: Tue 28 Jul 2026 14:22:18 +0000
Manifest this update: Tue 28 Jul 2026 14:22:18 +0000
Manifest next update: Tue 04 Aug 2026 14:22:18 +0000
Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 9Dn1Z/FAGuBMZ/ofoL32Xkmty0eokeq4GLgc888XJV4=)
2: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=)
3: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=)
4: 34013D1A69E911F18D43391FA247A888.roa (hash: TU4h3PTGkuJs0cClNzVxXAJnxXSrF11ivP3gcFNPm7A=)
5: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: n8jo7OOyKoEMXrPDLqPZ0GKTDNmrCmsRnCo2kxsObx0=)
6: 8064BD9A531811F19CFFFF86C0833773.roa (hash: 6eSWI3lacVFYWJ6Y3LXT4o1eDdujYg9oUunVgvcKPVw=)
7: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: ssvnbnbPiJy1G5RE7lDBvaD1kbNv/PwbXJ9FfnkTt1Q=)
8: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=)
9: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: +vcVP3Vc/xQrceGKHxptusion7qC1wdDocXyLDBF9wk=)
10: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=)
11: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13848 (0x3618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jul 28 14:22:18 2026 GMT
Not After : Aug 4 14:22:18 2026 GMT
Subject: CN=6a68bb1a-ae4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:b9:f8:d7:b0:27:17:34:62:d6:46:fb:35:
07:ad:13:02:a9:5a:e0:7f:38:c8:5a:e7:49:a0:f4:
8b:0d:51:8a:a1:93:fb:12:1b:be:66:d2:a2:c0:2a:
52:21:27:66:01:4f:cf:c8:f0:93:65:68:89:a2:36:
e5:48:a5:5f:7d:fc:7a:2c:e2:d8:9e:7a:6c:66:a0:
8d:99:ac:7e:91:8f:bd:3d:ac:3c:fa:5f:0b:84:d0:
7d:81:e6:1e:be:c6:b5:bc:04:57:59:be:d0:98:87:
82:df:33:af:72:2a:72:42:8f:ca:64:85:fb:04:38:
57:5d:23:54:aa:cb:7d:f4:a1:01:3e:4e:9c:e5:92:
b1:7b:fc:ee:1e:8d:05:fc:19:1e:64:bb:55:b7:2f:
e0:a7:67:e4:68:ca:2c:4c:e3:ef:2b:38:99:c2:97:
25:45:87:a1:b9:9a:36:31:3e:81:d3:ca:a5:d9:69:
14:e9:73:a8:b4:e0:6e:48:c9:82:cd:e5:81:bb:42:
b7:ed:4f:ca:8d:42:4d:cb:26:97:c2:93:18:39:74:
0b:6b:be:db:0a:49:60:e4:e6:8c:5d:7a:4c:db:df:
e8:b9:b4:f3:e4:5c:be:b5:60:58:c3:8b:12:5e:f4:
4e:47:53:83:f8:e8:b2:80:1d:bf:09:bb:83:de:5a:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:91:11:2E:41:4C:A1:B5:E9:3B:E4:61:B9:D7:D6:0A:EF:3D:14
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:f2:0e:a0:0d:37:40:f2:22:88:45:6d:a9:b2:35:fb:13:
15:80:10:08:ec:d1:9b:36:cd:97:ba:7b:21:19:dd:92:7b:b1:
b0:e2:0f:55:d6:df:d1:e3:78:86:c0:63:0d:ce:f7:54:26:a1:
14:d9:48:04:5a:40:ff:97:97:d3:da:cd:25:c6:53:b9:97:08:
00:18:b4:dd:cd:9e:7a:3b:91:b2:bc:8a:29:89:45:02:66:95:
2e:bc:e5:19:54:eb:5e:e4:bf:8e:15:01:37:57:6a:48:6a:13:
a2:11:c5:17:aa:9d:f8:51:84:65:d4:d9:77:3d:1c:90:03:d5:
99:fc:16:81:bb:30:91:2f:66:06:8f:ef:7c:bd:25:67:6b:24:
78:03:bb:5c:cf:07:a5:13:33:e6:e4:1b:52:11:79:ec:5f:83:
01:d0:52:52:06:67:4f:ff:5c:4e:e2:4f:38:0b:28:49:da:bd:
2c:8e:be:47:cd:50:81:23:70:7e:a8:ef:3c:28:9a:1b:74:1d:
d4:c8:5b:9a:5f:7d:8c:18:20:89:20:ad:3b:32:58:55:87:8b:
24:30:1a:f3:77:53:bf:60:c6:7b:be:48:24:7b:41:43:22:10:
f1:3b:db:a8:91:45:90:a7:01:2d:d9:8e:b8:97:e5:01:44:65:
96:a3:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:04 2026 by rpki-client