
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File: AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier: IVIYcJvEpYulIcRDJxKC355I90F4VbTpP8ishNaNrTU=
Subject key identifier: 38:B7:2B:59:E6:D3:8E:16:AF:45:55:30:8A:D9:7B:15:E8:7C:A1:65
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial: 24AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number: 2478
Signing time: Tue 28 Jul 2026 15:52:39 +0000
Manifest this update: Tue 28 Jul 2026 15:52:39 +0000
Manifest next update: Tue 04 Aug 2026 15:52:39 +0000
Files and hashes: 1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: oiAGe9qWlLMw1caQhRF13Ppdnm6F1pR0813DjAnAIMs=)
2: EDC8B49086EE11F19E006003A7EE528E.roa (hash: h+jWpQU5RPeD0V9iWjQpKIX46qoIpgt7mOA43N2WPl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9387 (0x24ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Validity
Not Before: Jul 28 15:52:39 2026 GMT
Not After : Aug 4 15:52:39 2026 GMT
Subject: CN=6a68d047-b21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:6c:6b:8f:4c:c5:b4:08:7f:34:8c:1c:80:
1b:8a:bf:17:fb:47:10:d5:d5:72:76:d3:42:c0:a9:
84:b5:cf:f1:8f:db:c8:43:15:04:fb:ef:55:e8:e6:
4c:e9:4b:3d:b4:97:16:42:88:95:08:d2:4e:e9:69:
6b:45:5e:b9:eb:4d:86:c2:89:4e:43:07:d6:57:db:
8b:0d:df:43:63:a6:15:15:be:5b:4f:17:7f:54:cc:
b1:c8:33:36:54:6f:30:3f:d3:6b:0a:06:bf:c8:90:
ef:5a:a4:ba:45:97:91:fb:48:d6:57:7f:d8:87:7e:
9f:e3:5f:ae:0d:58:72:ed:71:03:46:90:40:98:22:
88:27:78:5e:dc:6e:74:94:64:62:88:be:d4:e7:26:
81:40:13:c3:fe:07:94:8e:23:69:6c:45:13:17:95:
a9:e6:56:9d:99:fe:e6:eb:ae:95:2b:b2:a3:b3:d1:
32:b3:0a:fa:ac:a8:a1:9f:de:78:ce:f5:9d:41:53:
20:18:30:f6:d6:67:38:40:7c:cd:0c:ad:03:ed:d5:
29:7a:e4:db:0d:68:95:ab:a2:ca:6c:d3:4d:8d:70:
a5:e3:b6:56:ae:41:41:37:c3:53:35:72:6d:db:1b:
90:34:04:0c:0d:80:6d:ea:ee:45:f2:09:d5:a8:67:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:2B:59:E6:D3:8E:16:AF:45:55:30:8A:D9:7B:15:E8:7C:A1:65
X509v3 Authority Key Identifier:
keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:1c:2a:46:98:bf:8f:db:1e:0e:94:c1:41:98:ec:57:a3:e6:
dc:37:b4:bd:0f:d6:86:0e:ed:63:3c:96:8f:a2:cc:08:75:38:
27:55:3a:53:8a:9a:e1:f1:ba:92:a6:30:35:8b:20:45:22:5b:
af:18:f6:f4:7e:d8:ca:43:e6:c0:28:30:c7:d0:4a:87:58:fb:
50:5d:d6:ee:42:3b:28:63:e3:f0:71:05:8a:6d:f5:3c:30:0d:
9a:31:1b:f3:44:35:6d:cc:49:14:fe:01:ed:d4:bd:d3:f9:e4:
84:bd:18:df:3b:27:dd:f3:f1:42:90:71:31:2f:38:63:46:05:
9b:d1:32:c1:90:63:a2:d9:b0:f0:77:21:2d:e8:e5:ca:7c:90:
1d:ef:c6:08:ba:72:79:64:94:3f:d3:7d:9a:66:c8:d9:01:55:
09:27:98:fa:02:d6:18:2d:31:4f:9a:68:ca:ab:5b:5a:88:52:
6d:9d:82:fa:2c:a7:c6:3c:56:90:2f:ca:de:b6:8a:63:31:95:
b6:15:20:3a:d6:e6:d3:9f:61:9b:67:19:9e:d7:d1:f2:24:a2:
af:e9:bb:0e:7a:9e:11:e7:a9:69:44:10:2b:29:70:cf:f6:e5:
b3:27:b3:31:41:bd:0a:b5:7f:0d:81:fe:61:77:f6:5c:11:07:
62:17:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:03 2026 by rpki-client