
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: SMyn/2LSZWBwcqAMVgbNbp8S2Ez7Wq7ZO0j0inHewZQ=
Subject key identifier: 5A:1B:AA:B3:4D:58:1B:A9:CE:88:A0:B1:97:51:10:14:19:52:E5:A9
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 0439
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 0431
Signing time: Mon 27 Jul 2026 01:20:06 +0000
Manifest this update: Mon 27 Jul 2026 01:20:06 +0000
Manifest next update: Mon 03 Aug 2026 01:20:06 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: 4DX/iu8qoStcwK4qGZANQYRqalLjeZCv+OnS12GK77s=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Jul 27 01:20:06 2026 GMT
Not After : Aug 3 01:20:06 2026 GMT
Subject: CN=6a66b246-81d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:30:41:69:9b:35:55:b8:75:7a:bc:da:00:
8f:3b:ff:f6:95:f9:f2:cc:f7:4b:8d:6c:d2:44:86:
42:2e:c9:7b:04:2b:86:ea:a2:46:09:d7:57:d8:9e:
23:6d:84:16:27:02:f6:c4:bb:f5:b5:13:2c:85:80:
d6:d8:46:15:2b:77:a7:99:4c:8c:95:d5:e2:63:d5:
e9:e1:d3:75:06:8f:e2:14:4a:15:88:24:69:61:55:
e6:32:70:56:f2:a6:f5:b6:01:78:b1:d3:ac:20:d9:
98:8e:7f:5c:22:33:13:d5:46:f2:02:3a:df:e2:c5:
cb:ef:36:2e:02:d1:15:f8:26:56:75:a7:6d:05:a9:
e6:54:bb:2e:2c:55:e8:2f:11:24:41:b4:e5:53:86:
71:83:db:3e:99:0e:f0:f0:7e:c2:4f:0d:f7:cb:40:
5e:3b:0a:f6:2f:b5:10:77:ff:cf:b0:be:fd:40:38:
aa:bb:b6:0c:c3:a2:dc:a0:d6:26:32:19:d5:25:7a:
10:ed:c3:d5:85:d7:27:24:e7:d3:2a:8c:20:52:08:
d0:f0:7e:19:28:cd:10:6c:13:5b:64:9c:fc:1a:4b:
a5:34:73:52:b8:dd:ae:64:3d:56:12:d0:d4:5b:46:
fd:8c:a3:37:05:82:5f:fd:6a:48:38:2d:35:83:51:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:AA:B3:4D:58:1B:A9:CE:88:A0:B1:97:51:10:14:19:52:E5:A9
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:26:35:fc:f4:93:18:e3:24:d4:f7:42:4a:23:5c:03:9d:
d7:32:d7:d0:80:b2:8c:7d:63:6f:8c:64:1b:7d:f8:76:ed:17:
c8:87:61:9a:7a:3f:ea:6e:6a:10:b0:f8:99:44:77:5e:62:57:
6a:91:34:d4:bf:29:a0:40:18:e9:3f:bd:bb:b1:7a:14:dc:fd:
3d:64:4c:dc:42:1a:ce:ad:ef:94:79:10:61:b0:3a:eb:c2:92:
b2:ad:15:e4:93:da:f8:35:1f:02:1e:e8:fb:90:df:04:8d:81:
90:6a:bc:08:d1:ee:8d:87:a1:55:5e:fe:85:8f:ef:cf:2e:ba:
ad:ff:ae:40:f8:12:ee:d1:54:d3:aa:1d:e6:fd:ff:09:5a:e4:
25:2a:5a:28:7d:dd:8c:29:df:5c:48:55:e3:48:5a:18:b3:96:
04:de:20:10:a6:65:dd:f6:9a:d7:0d:cb:c0:39:d7:1a:88:2a:
a0:ff:72:f8:77:68:a1:31:e4:66:77:76:a5:49:0b:32:70:37:
5e:e5:98:56:fa:d3:6b:cc:7a:7e:e3:74:ef:fe:b1:58:71:7e:
47:1b:5b:cc:b5:4a:6f:60:f2:db:4d:89:22:d9:e4:66:54:be:
be:e0:86:b3:74:ce:24:04:a0:cf:ea:00:a0:96:21:b9:4f:78:
2a:5b:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:55 2026 by rpki-client