
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier: 5zAedoRU2zxn4Lij2qIObIt8Yx6JKPlKh0qSS1r2zfU=
Subject key identifier: 15:0B:CF:DA:9B:B4:C9:AD:25:28:A4:80:1D:3D:AE:09:ED:09:72:2C
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number: 0248
Signing time: Mon 27 Jul 2026 03:53:17 +0000
Manifest this update: Mon 27 Jul 2026 03:53:17 +0000
Manifest next update: Mon 03 Aug 2026 03:53:17 +0000
Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: +nhcOZH8NWFVYS1aKT9MSg+yXAn3sKghK3Ey3S/NiOU=)
2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Jul 27 03:53:17 2026 GMT
Not After : Aug 3 03:53:17 2026 GMT
Subject: CN=6a66d62d-4b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:2b:4d:67:f4:ed:66:78:33:c2:ab:f5:53:
72:44:ce:84:11:ed:5d:28:56:82:ce:d5:e2:36:e0:
d1:24:73:62:2e:81:10:d5:10:eb:28:05:5f:af:b3:
a8:80:4d:be:35:15:7b:67:ca:44:47:81:dd:48:16:
61:9b:12:e4:a5:41:7d:17:23:61:6d:92:a3:86:95:
52:b8:97:2c:8f:7b:cb:e5:3a:60:9b:ff:ec:e6:d8:
6e:5e:07:b5:b1:6e:4d:7a:e1:99:ed:c9:a4:6d:fc:
39:cc:41:e0:64:d8:10:2c:07:43:22:64:be:01:46:
43:3f:b6:2a:f2:41:8c:fa:37:69:03:24:30:12:e3:
43:1f:9c:c7:98:60:56:ee:de:a1:44:8c:eb:68:7b:
d3:e7:ea:ab:00:66:7d:e5:03:52:9c:0c:4d:42:d5:
c2:dd:c1:f1:a8:df:3e:89:42:cf:bc:fc:de:f1:3d:
e2:28:0f:65:17:24:ff:cd:85:df:de:5e:c2:6b:0d:
63:06:d0:38:cd:08:e3:6c:98:98:59:5e:0a:34:72:
69:b4:95:e0:3a:17:5f:8e:ff:a6:4b:f5:16:10:69:
b3:66:76:93:9f:82:20:6d:0a:af:dd:5f:5a:1b:1b:
78:99:ff:48:3c:5a:59:f0:59:9a:12:ec:6a:74:63:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:CF:DA:9B:B4:C9:AD:25:28:A4:80:1D:3D:AE:09:ED:09:72:2C
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:db:6f:cd:20:21:35:c2:d2:88:d4:c0:0d:c8:7b:68:76:
da:c7:1b:cc:f7:c5:5d:73:99:92:35:61:7d:af:61:00:8f:c0:
8a:67:b2:21:02:f3:a4:a7:2f:56:cd:7d:09:53:b8:b1:30:e6:
22:7e:3d:42:ba:50:06:11:10:6b:1d:7b:8e:c7:56:a9:95:9f:
57:89:65:73:66:fa:23:4f:40:cc:4e:9c:54:33:81:bb:1f:a1:
df:66:8d:66:ae:36:59:8d:5d:b3:b9:35:b5:e4:d9:3d:7a:13:
02:97:e1:32:2d:db:bc:35:dd:20:ef:ff:d6:f0:8d:16:6a:58:
2c:3e:8b:94:b5:ef:dc:a9:02:9f:a2:cf:87:4c:44:de:52:07:
31:72:19:ff:3a:1a:72:2e:fd:40:f1:71:bb:b5:90:d9:13:e1:
b5:2b:0a:4a:25:20:7f:7e:a1:c5:9d:96:1e:8f:3e:2a:30:f8:
ff:21:73:7e:39:a4:02:8e:d8:8d:e6:25:0e:64:63:7d:08:bb:
eb:5a:d5:ea:41:86:3f:75:7c:14:64:6e:1e:29:06:f9:5b:2b:
80:e3:ef:30:f4:b6:e4:bd:17:c9:31:d4:9f:6a:e9:ae:7f:02:
17:6a:9a:10:29:af:0f:a4:e5:e9:7c:de:49:83:14:1f:e7:34:
d9:12:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:40 2026 by rpki-client