
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier: W+zpL1rUjFIsGSLfCKDXGiE8ZfV2Vk5/HLAWNW9WpCw=
Subject key identifier: D2:A1:77:98:56:FC:7B:B5:72:CB:A6:1E:10:DB:05:6A:2E:9B:7D:21
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial: 21E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number: 21E4
Signing time: Tue 28 Jul 2026 15:59:10 +0000
Manifest this update: Tue 28 Jul 2026 15:59:10 +0000
Manifest next update: Tue 04 Aug 2026 15:59:10 +0000
Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: tffpLgSuEiOa70sCtE14djGeJA9dOybmY1AXn8SpSmI=)
2: 84C953D2688011F1B19CA9CF6847A888.roa (hash: voJSjqqTjn3/MPxyjI4+2Lxaf6Fn/26o8TVNpvFJyz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8679 (0x21e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Validity
Not Before: Jul 28 15:59:10 2026 GMT
Not After : Aug 4 15:59:10 2026 GMT
Subject: CN=6a68d1ce-6e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:60:e5:85:1e:b8:8c:be:d8:86:7c:21:80:
66:47:35:cb:3c:a2:87:84:13:06:a7:1e:4f:55:f5:
ba:5c:82:8d:35:88:e3:20:40:1e:7e:a6:09:74:b2:
be:2b:78:11:3a:25:1e:9e:98:b3:db:03:db:a9:6f:
eb:55:fe:12:18:25:d8:0e:7c:ae:b3:e1:ea:33:a2:
99:7b:10:f3:92:11:3a:ff:45:26:ea:a7:9c:2b:1b:
62:88:59:82:ca:6f:8b:3e:52:e4:10:57:67:c4:f9:
c9:f6:8a:7f:33:37:78:0e:d5:7d:d3:b9:2d:fb:7a:
9c:c5:45:14:5a:59:a4:ca:03:cd:dd:66:ca:a2:4c:
67:b9:78:c0:e4:5c:83:b9:a3:b2:e4:2a:31:9e:b3:
19:d2:c2:af:9e:9f:d4:9a:9b:f1:9d:91:89:38:ae:
a2:79:e9:fb:fd:3b:ed:a4:87:2b:6e:63:4c:e0:38:
01:0f:e8:07:bc:9e:94:32:4d:75:7b:c2:e3:3d:29:
0e:c5:13:00:49:25:48:2d:fa:0e:33:b5:d8:4c:ca:
82:23:b9:b1:ac:9c:b6:f3:91:c6:cb:9f:48:36:6d:
30:8d:73:fe:28:28:65:6f:61:d2:19:36:68:78:a3:
f2:ce:ae:c6:4d:0a:25:1c:33:ee:f0:82:34:58:40:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:77:98:56:FC:7B:B5:72:CB:A6:1E:10:DB:05:6A:2E:9B:7D:21
X509v3 Authority Key Identifier:
keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:b2:e5:e3:07:5d:4c:a7:68:2b:ff:10:8e:92:5d:0f:38:
a1:c5:c8:5e:49:5b:e5:3b:b9:8b:a9:83:38:e4:4e:5c:46:0a:
07:4e:d3:38:73:50:dd:18:69:45:8f:9e:01:b4:86:4b:2f:9e:
3f:75:0c:7e:ab:2d:75:2f:6e:10:0d:4d:cd:97:23:89:49:97:
73:55:26:08:9f:89:3d:49:fc:7d:c4:a2:d2:7f:7d:30:f8:fa:
74:f8:76:e3:b8:8f:b9:ab:cf:37:1f:a1:22:63:ca:19:3b:8a:
7f:ba:3a:dd:37:54:b4:8b:60:1e:13:7f:9c:53:78:67:e0:49:
9c:37:bf:1f:21:15:f5:f5:d8:64:b8:b9:58:5c:3f:48:30:99:
87:ea:7e:7c:80:60:7b:34:d9:22:17:5c:07:bb:c3:21:ae:a2:
2a:3b:a1:9e:00:06:69:2e:aa:e0:02:89:74:66:6f:e0:c9:e4:
cf:0a:57:3e:92:ad:56:b7:8d:09:95:09:b9:fa:0b:33:ee:d6:
52:9a:86:d0:d3:27:96:26:cd:5c:f0:15:3a:cf:ba:e7:11:30:
17:95:59:67:91:96:0b:b5:61:f8:be:df:2b:5d:07:16:18:98:
40:94:1a:90:6c:c6:ac:6e:5e:62:1a:ea:38:9e:ba:0c:2e:65:
e7:e2:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:20 2026 by rpki-client