
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier: I8gAP5w+85XZBsFc4CkuQZkS7+dZG3BpphOYtt6PaDw=
Subject key identifier: 1A:F5:74:F0:45:0E:B3:61:BA:D0:B4:8C:17:0F:1F:FA:B6:B1:A9:EC
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer: /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial: 22E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number: 22D0
Signing time: Tue 28 Jul 2026 15:55:59 +0000
Manifest this update: Tue 28 Jul 2026 15:55:58 +0000
Manifest next update: Tue 04 Aug 2026 15:55:58 +0000
Files and hashes: 1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: W4DOnFlsz1UUVA4n5g0SqKFbsCOAyhPEWtz5VvkRLrw=)
2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8931 (0x22e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Validity
Not Before: Jul 28 15:55:58 2026 GMT
Not After : Aug 4 15:55:58 2026 GMT
Subject: CN=6a68d10f-9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:18:6c:e3:4a:6a:8e:55:43:b8:5e:ac:ee:
58:4c:7b:fe:7e:0c:44:39:94:9b:7d:21:9b:96:42:
29:6a:d3:06:69:d0:00:97:05:9a:08:78:75:71:f1:
c1:45:15:24:9e:b6:e9:0b:1c:aa:16:45:9f:ca:04:
bc:29:09:5d:0a:95:aa:fb:e7:c2:89:09:be:33:8a:
2f:75:0b:28:e0:c9:24:76:ce:4e:d7:de:bf:96:a5:
ba:66:82:3e:03:ed:f3:1a:e5:5d:e2:d5:f6:f6:4e:
fd:65:1e:5f:3b:28:8c:0c:b6:ba:79:70:2c:38:aa:
39:84:c2:86:a1:f7:83:46:7b:15:ca:be:e6:05:57:
cd:61:30:73:5d:ab:1c:b6:80:26:e9:55:62:58:2b:
2b:bb:9c:a4:45:9e:86:f4:e5:34:19:a1:84:1b:23:
ba:06:81:32:61:2d:40:2a:67:42:de:50:0d:89:09:
d0:85:33:ab:cc:66:69:b6:68:cc:18:1c:80:8e:49:
bb:34:93:fd:7c:52:ef:b7:9d:b5:77:27:b6:b2:e1:
15:75:c9:27:a4:57:fd:08:c7:a7:93:b9:7c:2b:73:
e0:e2:55:fe:d9:e0:98:4f:46:11:8c:16:0b:ff:f3:
f0:78:91:a2:38:42:8f:f8:5c:99:1d:7b:93:0d:a0:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:74:F0:45:0E:B3:61:BA:D0:B4:8C:17:0F:1F:FA:B6:B1:A9:EC
X509v3 Authority Key Identifier:
keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:34:b5:b1:62:cd:3d:3a:3b:09:19:b8:a5:5b:5e:1e:d4:
39:0d:d8:f4:45:46:58:a8:01:2a:d4:30:ee:1e:2b:ee:36:d4:
23:35:7b:2e:47:7f:18:d3:73:38:a6:1c:eb:2a:0c:30:0e:67:
cd:34:3b:2b:f3:5b:e5:fa:02:19:f0:ae:6f:a0:31:d4:a8:e6:
b5:5e:55:c8:f2:c2:cf:2b:05:5d:b1:8f:39:c9:5c:a6:be:5c:
20:fc:b8:8e:56:d5:2d:02:f6:30:e5:3e:63:d9:17:37:07:79:
35:19:0c:f1:6f:aa:d2:5e:4b:1d:f8:a9:3c:5d:e0:41:11:e9:
e2:d7:2d:8c:9b:c1:2a:f2:e8:29:35:e3:2c:bd:e0:eb:be:bf:
d0:28:f1:bd:44:71:4f:56:bc:e7:4f:8b:23:7e:77:9e:01:1b:
26:20:5d:6f:7b:81:0d:78:73:f2:c3:73:68:a3:52:5d:31:4f:
4c:4c:f7:f5:ba:5d:e0:c8:c0:f3:b9:9b:1b:cf:cd:ae:22:d4:
ec:02:e9:85:50:19:23:5c:c8:2f:1f:2d:19:7f:e1:1d:ed:f7:
f6:e4:5d:ad:6c:e4:07:04:69:47:2c:d1:bf:71:ac:2c:59:6a:
10:26:34:2d:a8:b2:7d:67:bb:ff:58:48:ee:c6:08:7a:0d:fc:
d2:55:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:16 2026 by rpki-client