
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json)
Hash identifier: JumQzT6Xt69gefISYjGjlHFdmRRjbl6wD1ISepC8kvw=
Subject key identifier: A9:36:40:63:D6:10:4A:1D:5D:13:0B:41:E5:57:25:2B:40:C6:FF:B0
Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Certificate serial: 0DCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
Manifest number: 0DC5
Signing time: Tue 28 Jul 2026 18:01:42 +0000
Manifest this update: Tue 28 Jul 2026 18:01:42 +0000
Manifest next update: Tue 04 Aug 2026 18:01:42 +0000
Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: VGkRrbSHxEd9SU+Nbw4lkUOyU2k0mL/OkkojzI9QUCc=)
2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl
rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Validity
Not Before: Jul 28 18:01:42 2026 GMT
Not After : Aug 4 18:01:42 2026 GMT
Subject: CN=6a68ee86-c650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:bb:b7:b0:be:23:d7:59:47:0d:08:27:f4:
91:a4:d7:b2:84:7e:3e:c9:19:2e:02:57:c0:31:4c:
5c:f9:f2:c5:3b:ec:d9:9b:5f:78:fa:88:f3:c0:af:
19:48:80:69:79:e8:f6:09:84:89:de:72:63:e1:3d:
fa:a8:c7:35:0e:9e:ce:e8:62:db:b1:9a:f0:ac:24:
88:bd:7c:51:88:50:20:34:96:65:ab:1f:31:ff:2a:
67:72:4f:6e:50:3c:e5:9a:c3:1d:a9:57:67:0b:34:
8a:fc:b6:41:6c:49:b0:c0:7a:01:0d:a8:a2:19:a7:
51:7a:af:d1:01:55:69:7c:39:b9:71:15:29:4a:c4:
35:a7:b6:ae:ce:0f:14:2f:d7:2e:88:1f:0b:26:66:
1e:67:29:f8:4e:d0:60:ac:6c:5c:fa:ce:62:e0:50:
29:08:e5:b5:5a:7c:7f:6b:00:b1:db:20:86:71:21:
78:29:3a:d6:46:52:3b:95:08:1e:32:df:a0:09:fc:
55:44:a0:36:71:b4:d1:65:1b:98:e3:e2:9e:69:95:
82:9a:bb:b1:57:f9:b2:57:91:28:1e:81:73:9b:2e:
17:21:10:47:44:fb:b9:6b:20:06:a7:f5:1d:d3:b9:
94:cc:63:e8:3e:93:28:8c:a8:23:e5:ed:e7:ae:39:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:40:63:D6:10:4A:1D:5D:13:0B:41:E5:57:25:2B:40:C6:FF:B0
X509v3 Authority Key Identifier:
keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:49:35:f8:10:7d:0e:80:08:9e:5a:be:88:21:65:0f:f4:c8:
d4:5b:81:01:51:7c:48:22:1e:2a:12:43:ee:80:ee:44:c1:20:
43:19:7d:de:69:f4:37:0e:49:f6:5a:21:7d:2a:16:bb:b0:f4:
f0:d9:5b:a3:d7:85:9e:9f:8a:25:7e:71:7f:46:e0:db:28:89:
5e:67:aa:96:8f:a9:5f:ed:2b:43:f2:9b:77:b7:11:e6:81:ce:
54:94:2c:b4:53:45:85:05:ba:43:99:2d:07:c9:f0:4f:0b:75:
da:f4:fa:ef:2e:19:e2:19:8a:dd:21:4d:23:56:76:71:84:6a:
df:e2:d0:2d:4c:21:50:0f:f8:c9:52:a0:28:bb:a3:b7:c1:f6:
6d:b7:f6:5e:20:b7:cd:de:23:b1:87:70:a5:b9:c8:a1:0f:2f:
db:34:14:5b:c0:31:9f:71:5c:b6:60:32:ec:de:55:3e:94:7b:
96:14:6f:41:af:07:38:05:66:1f:9c:69:88:97:8e:ee:eb:a9:
2c:e3:f7:44:0f:37:87:0f:67:9a:65:c2:83:29:4d:0c:2b:98:
45:7b:6f:af:dd:71:8e:5a:00:02:22:c3:ef:db:86:c3:c7:df:
e7:85:44:35:48:be:96:f5:25:8b:b5:42:6f:a9:38:f7:10:ec:
f8:10:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:02 2026 by rpki-client