
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: wwJ9PuftZIU0GoYfAsj4gu5q53keCXOdae2T+o8xx5I=
Subject key identifier: 17:3C:0E:0F:E9:63:7B:3A:34:40:60:5F:20:03:72:73:55:B6:22:41
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 14F2
Signing time: Tue 28 Jul 2026 16:55:39 +0000
Manifest this update: Tue 28 Jul 2026 16:55:39 +0000
Manifest next update: Tue 04 Aug 2026 16:55:39 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: xj3+AYloVEvLtqFZuEgq7RrXzAdkRjevqEndAwLttw8=)
2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=)
3: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: jZuSh+WR7sCoYoKT4uhJCvNVaW6YZAz1ccOdtL1PD1o=)
4: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: NqFw3mgMpkOvoVPWGjo2SvS7iIeakeWssWWni91l9EM=)
5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=)
6: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=)
7: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=)
8: 983A5536450611F093EC3A65C4F9AE02.roa (hash: rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=)
9: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: vb+PgKr3CsY3jfH+MFyFgbnwnwtfBrgXKUjCdpIDvJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5415 (0x1527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 28 16:55:39 2026 GMT
Not After : Aug 4 16:55:39 2026 GMT
Subject: CN=6a68df0b-c8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:46:6b:b0:44:1a:dd:a2:04:af:2e:5f:55:
d6:9c:5a:01:55:ed:88:71:c9:ec:5e:78:95:6d:10:
47:6e:73:20:b6:43:ba:1e:9b:69:13:9b:3e:2b:e6:
ba:87:cb:a1:aa:b1:d6:03:70:6c:59:18:14:f3:61:
00:0a:3b:59:7d:dc:32:4a:9c:96:42:7a:87:1d:b9:
91:71:a5:87:ff:a9:cf:31:6a:48:0b:82:d8:08:7e:
b5:05:a4:6d:5a:da:3b:3a:d9:5f:40:ad:78:01:19:
70:cd:f5:4a:f6:c6:4a:32:85:32:80:a6:e6:93:a4:
ef:4e:73:8a:29:77:74:26:29:da:19:24:47:1e:17:
30:83:74:9f:68:e1:47:8d:a6:96:92:69:85:ac:0f:
44:cd:f7:fa:09:d4:b9:67:c0:8d:36:fb:5a:60:1e:
e9:39:19:1e:f4:7e:95:a4:f4:b1:f7:8a:5c:56:82:
fe:93:cc:ea:f4:9e:5b:78:77:03:5c:f6:d3:d6:db:
00:0e:31:e7:f3:28:0c:13:1c:9c:c3:3c:eb:96:37:
97:49:e4:d4:f1:51:b9:64:cf:47:9f:6c:d7:92:05:
68:7f:38:79:7a:2b:1d:d5:10:fa:d2:1a:8e:91:01:
06:39:05:c9:59:f5:93:c3:fd:15:54:ce:8d:48:95:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:0E:0F:E9:63:7B:3A:34:40:60:5F:20:03:72:73:55:B6:22:41
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a7:28:30:3f:a0:08:8f:cf:64:fd:01:76:f1:bb:36:85:42:
1c:d4:1a:6a:35:dc:26:a3:88:35:0c:e5:92:e1:5e:6b:67:8d:
3c:71:ae:e2:70:ce:28:b0:d2:dd:fc:aa:e9:1d:64:24:df:95:
46:c9:e1:e0:66:34:24:2e:5e:11:b6:90:98:9d:e9:1c:8f:ae:
56:80:be:1d:c8:ce:d6:0b:ae:d0:fd:7f:d9:49:84:8d:a2:6d:
54:5b:37:83:d7:f9:3b:d7:e5:7a:d6:d5:96:87:94:7d:87:58:
c4:65:82:63:46:a6:59:2c:d1:c0:48:7c:5b:20:68:96:3d:05:
0b:74:40:68:95:90:0d:50:d4:71:e0:46:0e:83:72:3b:f5:62:
2d:ca:f2:e0:06:4e:58:25:23:b3:e0:2c:1e:f5:a0:b4:70:6f:
e5:d8:96:5f:d1:a9:b0:00:ef:9b:54:be:8f:97:ec:ca:b7:4b:
ca:99:4d:2c:54:a2:4e:7e:e2:82:f0:19:67:36:f4:43:43:29:
3e:80:c8:f1:4b:60:b2:e7:bf:e5:23:8f:a2:84:c2:89:3b:53:
cf:06:ef:7a:b4:cf:c3:87:1f:a9:c9:9b:79:ae:61:d8:d9:17:
de:51:5e:1b:d8:c5:34:44:94:a0:c2:68:be:26:83:76:72:89:
4d:cc:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:27 2026 by rpki-client