
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: PvaxLglW+AY5JYSaYRmu0pdNIkLJW1shEhGuVgnpSro=
Subject key identifier: FE:3C:AA:8B:1A:1A:E8:DB:DA:34:EA:5E:DF:DE:9A:B7:69:6D:31:16
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: 0111
Signing time: Mon 27 Jul 2026 08:02:51 +0000
Manifest this update: Mon 27 Jul 2026 08:02:51 +0000
Manifest next update: Mon 03 Aug 2026 08:02:51 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: lEFZYyttXTcB+S/v5LchU7LvE1Os5kJTSx379+/ex30=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: Jul 27 08:02:51 2026 GMT
Not After : Aug 3 08:02:51 2026 GMT
Subject: CN=6a6710ab-a3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:96:6d:a6:91:8a:5e:a7:16:cb:d4:67:df:
6f:13:55:51:28:19:0d:9e:38:68:eb:68:59:1c:21:
58:c1:f1:53:07:42:8c:8c:61:57:bd:14:dd:5e:41:
74:a2:7b:12:3f:6f:ff:82:28:29:58:05:00:be:98:
54:36:d4:de:8d:bf:56:6e:77:bb:d0:8b:74:93:8a:
73:b3:7b:c6:ee:42:2e:50:4a:c2:b4:e4:a9:d6:9f:
ec:6a:cb:20:cd:bd:49:8e:c4:d7:89:b3:b1:f6:33:
96:86:22:c3:61:70:eb:97:a4:5e:15:01:18:cf:e3:
a0:75:b7:dd:56:01:83:53:0b:ef:92:40:7f:88:47:
b1:dc:aa:d6:60:27:f8:c8:dd:d5:de:fe:92:59:62:
04:51:80:95:18:39:8c:8e:ed:36:8d:df:b7:7b:35:
19:b7:09:99:d6:9b:b5:4c:fd:6c:10:b0:69:49:83:
1a:c3:a1:b5:78:84:0d:a4:af:e2:c2:c1:0b:a3:34:
78:53:53:bc:81:2f:42:35:e1:22:52:a1:d3:6b:1a:
ef:f1:57:83:3b:0c:66:0f:e2:f1:e2:b5:78:54:e0:
6a:1d:f9:4b:b0:6d:4a:81:da:03:9d:4a:70:34:ea:
2a:fc:a9:fb:0e:0a:37:7b:25:b3:bd:d3:f2:81:ee:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:AA:8B:1A:1A:E8:DB:DA:34:EA:5E:DF:DE:9A:B7:69:6D:31:16
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:7a:a5:14:e2:2c:39:5c:26:18:79:b4:29:6c:ce:97:52:
6a:50:4d:7f:11:b3:8e:5e:27:bc:38:5f:2f:72:ed:ef:08:dd:
b7:f6:49:02:44:98:f4:ba:40:b7:2a:83:9e:7a:ea:e4:79:9d:
d1:ba:73:31:48:99:1e:30:50:18:67:cd:ba:9d:48:be:0c:a9:
77:19:13:4a:1a:63:ec:d5:cb:37:78:97:03:3d:f9:e0:13:43:
17:f7:71:f3:15:df:e0:b8:f4:57:32:8a:d2:69:10:38:1c:69:
1b:cc:a8:31:9c:0c:4a:5c:9a:68:40:4a:81:37:e5:0c:e5:23:
0a:a6:55:30:53:9a:27:09:c7:0d:3a:1b:dc:80:53:13:7c:8d:
35:9b:3a:24:69:1f:ca:78:92:94:7b:69:bd:a7:3e:f7:85:45:
f0:a2:24:b8:e6:29:d5:82:e1:6d:90:02:a1:0d:8d:56:b3:46:
e0:9b:e1:2b:12:17:bd:b8:37:dd:62:5e:4b:86:95:85:cb:f6:
6d:c1:d6:f6:bb:e0:48:b0:5d:c1:0d:47:1c:7b:2b:9a:29:0d:
62:0d:25:b9:43:ed:63:25:08:01:3b:13:85:29:84:2e:03:4a:
86:9b:00:49:9e:69:d8:fa:47:e8:51:76:52:67:2d:07:a8:00:
14:61:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:53 2026 by rpki-client