
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier: G65K9PjxI81elf5VXLyeLlrI/s3gGyicIB9sidgY2MU=
Subject key identifier: CB:F7:F7:AF:AD:FB:43:D4:FB:90:8B:50:91:D2:15:A4:48:A9:4F:B9
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial: 0B3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number: 0B27
Signing time: Sun 26 Jul 2026 19:45:13 +0000
Manifest this update: Sun 26 Jul 2026 19:45:12 +0000
Manifest next update: Sun 02 Aug 2026 19:45:12 +0000
Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: DWsTLHpjQ/rVV9rAt1Dko7TJiR04egpYlaGbRYXDbOE=)
2: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 8RfREkb1TfRtm9mZNRjcCr0gSCyT+B9RHPPp4JceAOY=)
3: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: m6x4cKoG0z5IGxS+jgyTdR66s445veI9JdXQ3dKCikw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Validity
Not Before: Jul 26 19:45:12 2026 GMT
Not After : Aug 2 19:45:12 2026 GMT
Subject: CN=6a6663c9-e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:8c:d6:4b:66:9c:9c:e1:6e:31:49:09:75:
72:2e:53:a6:69:aa:98:81:a9:af:87:f7:3a:6b:52:
39:13:ba:f1:32:f4:e6:cd:88:ef:63:e5:1c:df:ae:
c8:b6:97:1a:ae:9c:fb:0f:37:56:41:4b:02:b2:2f:
01:97:f5:a6:0d:bf:d9:61:f9:3b:aa:c9:0c:c9:04:
48:9c:7a:b1:72:2c:b2:92:51:d4:8a:69:18:f5:c3:
df:77:cc:3e:d0:6e:0b:85:ad:17:16:a2:47:2e:92:
eb:56:76:57:3c:ed:5e:2c:4c:46:65:42:99:be:b4:
64:6a:4a:94:33:07:f5:ca:b1:24:a2:08:a2:30:07:
24:18:9c:c2:eb:36:62:16:6e:13:d3:89:84:49:03:
7c:4f:36:a5:ce:7a:09:e9:a3:96:55:06:0f:1a:e0:
df:4d:b7:8a:29:1e:a6:f3:ff:64:17:f4:2a:96:ae:
23:c7:5a:f9:7e:84:ba:d7:5d:e8:32:97:5c:f3:7e:
6c:e5:a8:9d:d2:5f:b6:f5:a0:71:b1:0f:d0:cd:8e:
b0:57:60:4d:bf:19:8a:5f:55:3f:90:14:12:68:bf:
3a:bc:54:19:02:bd:32:0a:d9:80:f5:5a:86:84:b4:
5d:2b:83:bc:01:90:fe:e2:c0:d0:62:dc:b7:d6:1d:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:F7:AF:AD:FB:43:D4:FB:90:8B:50:91:D2:15:A4:48:A9:4F:B9
X509v3 Authority Key Identifier:
keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ae:6b:2c:fb:8b:ed:7d:08:32:af:52:ac:2b:d6:2c:0c:8b:
34:eb:0e:74:0a:cc:bc:08:ae:c0:39:7f:2d:eb:20:c2:80:aa:
61:5c:47:2f:2b:3c:9e:c5:86:28:1c:ed:cd:35:a7:ff:68:a2:
16:7f:4c:e5:ef:94:9a:94:b0:a1:b9:c0:2b:6d:42:79:b2:bb:
27:2a:83:1f:47:9a:a9:6f:21:ed:95:44:41:63:80:dd:b4:7e:
c2:70:78:72:6c:01:80:e2:59:fa:1f:2b:78:ad:e6:02:e6:89:
f7:e5:8c:f1:a1:da:3f:7c:c0:57:75:76:e4:8c:37:29:32:a6:
29:4d:e0:b8:9e:69:83:cc:0f:45:15:31:a4:ed:0a:20:9f:bb:
84:5c:52:c6:41:b4:76:96:c8:38:62:07:6a:d5:aa:2c:6c:a2:
12:6d:02:38:b1:fc:8d:f7:77:ea:d6:94:82:f4:7e:23:e6:82:
b2:24:96:8e:d6:c2:a9:2b:16:50:43:1a:6d:54:3f:fc:0f:62:
15:9f:f4:c3:43:26:85:69:41:c9:cb:f8:f4:9d:3c:21:74:f8:
95:7c:67:1e:ca:ba:32:fb:d6:77:bd:fe:b5:52:56:ce:00:66:
8d:b7:5a:e9:94:04:77:77:95:e9:78:3c:a6:05:ca:c6:7d:1f:
f8:41:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:15 2026 by rpki-client