
$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: snx/qhjeOkfxz2lpKrtiXpOnMqeZHusmKur8S+b/OhM=
Subject key identifier: C1:DB:B3:B2:6F:48:69:9A:06:56:25:60:5C:BF:FA:49:F4:4C:9F:D4
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C72
Signing time: Tue 28 Jul 2026 18:53:04 +0000
Manifest this update: Tue 28 Jul 2026 18:53:04 +0000
Manifest next update: Tue 04 Aug 2026 18:53:04 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: X7rXbfR90g5kA2gNl1l+NHlhEQeiHN+EdGVHPCzGiZI=)
2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Jul 28 18:53:04 2026 GMT
Not After : Aug 4 18:53:04 2026 GMT
Subject: CN=6a68fa90-5a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:a7:5f:70:d5:54:4c:d5:40:b1:a9:7f:6b:
8f:f7:74:17:0c:fa:b1:20:9f:73:08:67:ba:6b:18:
c6:59:d9:5b:fd:60:6a:7b:3d:07:a9:e1:39:a8:1c:
62:b5:bb:62:e7:b7:9d:1c:db:c9:26:ad:8c:b9:0b:
11:76:18:01:48:64:cc:19:99:c6:13:24:f9:f9:b7:
a2:ea:55:cd:03:af:c4:26:53:0f:93:43:10:ad:67:
e5:46:09:19:dc:ab:98:91:16:32:d3:b2:5c:e2:e1:
0c:33:60:a9:ae:93:96:4b:1c:f0:ca:19:b2:80:88:
3b:ee:a1:86:0f:2e:e0:fc:7b:f3:b1:9f:82:32:d4:
05:21:7f:bb:10:e9:49:6a:c6:01:13:ca:ed:27:fc:
be:5e:fc:18:8e:6a:fb:78:8e:4a:14:cb:24:2f:1d:
1e:38:89:1d:67:36:8c:42:39:b8:5f:14:22:71:fb:
21:9a:51:f3:2b:d9:fe:ab:4b:da:6e:fb:32:db:35:
f0:d2:a3:77:98:c4:41:ed:c7:68:b0:16:f8:e9:da:
95:41:1c:35:e9:94:e7:fa:a7:36:60:08:ac:9d:cf:
f7:ee:df:76:71:97:0c:27:4a:c7:9b:89:29:89:c8:
8d:dc:46:66:6b:a4:03:8b:e9:e4:73:70:38:0f:7d:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:B3:B2:6F:48:69:9A:06:56:25:60:5C:BF:FA:49:F4:4C:9F:D4
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:16:54:7f:2f:6d:64:a3:b9:6c:ce:4e:75:23:e4:65:54:
20:9e:9c:28:91:a0:f4:63:c5:42:26:2b:03:4a:9b:17:20:a0:
96:0e:db:17:a4:b2:2d:a4:be:3a:e8:ec:a9:57:2d:d0:3f:bd:
55:01:f9:77:17:1d:48:6a:e5:b3:b2:f8:cf:30:67:67:56:fe:
43:5c:cf:56:d6:c4:a0:dd:12:b3:02:27:4c:c6:e8:6e:91:9b:
92:f1:cc:a3:07:98:d9:f5:63:ea:a4:8f:dc:1c:7f:0e:58:f1:
42:5a:1c:9a:4d:78:5d:46:82:1f:89:b3:13:01:21:d2:ad:36:
51:d5:46:d6:c7:0e:59:ac:31:0d:8f:a8:43:b3:1a:98:12:b9:
0d:47:6d:99:a9:2d:0c:22:2b:6a:9c:7a:00:da:2f:3a:1c:6b:
4d:a5:46:9e:9c:83:55:df:ad:fa:4b:02:c0:c9:50:30:cb:99:
09:9e:1d:1e:e9:55:64:d6:8d:00:93:42:01:da:9f:38:39:27:
b9:2d:0c:b6:1b:12:6c:af:60:ca:46:5a:93:b0:2b:e0:8d:31:
4b:78:77:89:e7:11:08:37:20:5d:a0:59:f7:03:d6:00:c4:40:
4c:df:45:a2:88:bc:d9:3c:36:2e:01:be:b2:8b:47:6b:c2:7f:
84:e6:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:44 2026 by rpki-client