
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier: BYZDEPazj5GitRf91EOWg3uqEGIWBT0utftqF2mU+IY=
Subject key identifier: 5A:41:25:EF:F3:42:DF:49:BE:1F:65:85:8C:CE:4E:86:47:46:C7:6B
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 07B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number: 077F
Signing time: Fri 12 Jun 2026 21:40:26 +0000
Manifest this update: Fri 12 Jun 2026 21:40:25 +0000
Manifest next update: Fri 19 Jun 2026 21:40:25 +0000
Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: LOhxXu5Mm0Yc96XnNqCavT+DzbGvGMNLiQ7Mz5JQNTQ=)
2: 05F05106586011EE9399A92EC4F9AE02.roa (hash: d5Czd9F+MkzuB9PBir/JbWAghXpmJN+auVy0L4FfZfQ=)
3: 34956990D75511EF80E68A39C4F9AE02.roa (hash: t2VblrPsPkg3OLGXiwM69R4XdRcwB3mySF4/73qDgbo=)
4: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: hn072ZUt0QkiLvSmGaoI0bZ5eHexJ3APJASDMCiyA2M=)
5: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: JyT9d9OOCJrRzpFBrxSBmC+CtEx3ZAy2eSQHymf45+s=)
6: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: GtRv2G1MeWMHZlw+kEpfpaWB79CdGXzgFC1k73nj5d0=)
7: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: mr8KwOkVa8RAea/BYVd3YUG6na4L4IGVAN/w6VWKUIw=)
8: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: 4thkndOJT3+vXRn8C465Fs6jq2L+GeTYNEVafFWoUXs=)
9: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: aSxgIlw8nZiN+6lgLNU5XvZ1FdnFtkSevs0pTTJMvJY=)
10: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: vtp4YKFz/A5Vi0zg64GLZs1k3ocvwIIzZCuiJxmejGs=)
11: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: phlxZambGxwdatRQWNb2Yjt/alGa6e8xzyqiiNU2+mQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Jun 12 21:40:25 2026 GMT
Not After : Jun 19 21:40:25 2026 GMT
Subject: CN=6a2c7cca-62a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:66:ab:0c:5a:ea:ab:db:a5:07:2b:e9:1e:
6a:a0:ec:ca:77:01:b1:79:60:55:f9:41:1d:4b:b6:
31:f8:84:b8:8d:8c:86:70:8a:7f:8e:96:b9:44:b7:
3a:33:d8:9e:63:45:d2:c6:9a:f7:c3:83:bb:3c:ad:
f9:29:6c:ae:63:1b:d5:5b:56:83:67:09:97:22:ce:
f8:05:df:d7:25:f7:db:f5:39:db:f4:0f:66:ae:5b:
3b:7a:60:9c:d9:54:04:ba:51:57:83:7b:5a:c1:eb:
9f:07:21:83:c4:86:0f:1e:c0:df:a6:83:cb:77:6b:
45:2d:6c:1c:52:d7:52:30:98:01:f9:ae:4f:b1:bb:
21:dd:fd:0e:ef:76:0c:1b:65:b8:c0:61:c2:9d:43:
17:86:50:84:eb:d3:95:b3:a7:9b:15:5d:fe:a9:ac:
51:68:5e:4d:67:19:0e:fd:63:ce:a0:d4:28:72:28:
d4:d8:e6:2a:0f:75:31:dd:92:fd:ee:5e:38:d2:45:
87:da:85:f4:9c:18:6d:ae:cf:62:0b:8e:32:e5:f1:
3a:1d:49:de:3e:52:8c:75:52:ad:11:eb:75:cf:c3:
b1:90:33:c4:6e:51:5a:13:18:0a:5f:c8:14:f6:f6:
8a:12:09:70:27:d4:f6:54:0d:c0:d9:b2:98:3d:64:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:25:EF:F3:42:DF:49:BE:1F:65:85:8C:CE:4E:86:47:46:C7:6B
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:be:14:05:5c:ab:10:27:1f:61:f2:94:cf:ad:2c:ac:cc:bb:
fc:75:8b:c3:22:7a:05:ac:99:cf:cc:54:ca:7f:ca:ba:e3:37:
1b:fb:94:a7:d0:3f:c8:ad:53:d3:a9:80:5c:13:a1:ad:57:53:
73:89:63:ec:0b:ee:39:83:84:59:c8:7d:a9:2d:77:8f:28:03:
4b:9f:7d:8d:34:ea:70:03:ee:65:8b:3f:1e:b0:8f:a9:8d:3f:
b9:89:02:40:ec:18:55:27:0e:55:73:62:92:ef:5f:be:ef:3e:
fe:ea:91:20:43:5e:37:b0:f2:b7:54:95:d5:f7:4d:c5:9d:94:
50:fc:be:b1:be:34:86:3e:4e:81:c0:5d:79:f6:f0:b0:13:f3:
04:8d:50:5d:de:6b:d7:fe:0f:8b:b5:6f:ce:10:63:5c:0a:e4:
e2:db:28:63:6c:ba:d6:0d:dd:56:d6:fe:f1:1d:46:23:f4:89:
ca:fd:eb:c3:80:03:94:b4:14:30:65:93:85:c1:ec:21:4a:6a:
7c:43:b7:2a:54:83:2c:a4:3d:fd:82:ae:e4:92:de:5b:95:83:
ce:3a:3a:9b:e7:1d:26:1a:39:0f:85:5e:d8:26:8f:ac:cc:86:
7a:3a:9a:6c:54:6e:8a:54:f1:0c:8c:71:6e:1a:3f:3d:89:6d:
d2:c1:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:57:36 2026 by rpki-client