
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier: Z/yDxjGxtKgaWtj4SrC8mh0n2LvvcFpq/qeS6q33bnQ=
Subject key identifier: AA:8C:42:FA:51:4A:EA:7B:3F:7A:BB:64:C6:1B:36:6E:78:A8:FB:9F
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number: 08E5
Signing time: Tue 28 Jul 2026 20:46:39 +0000
Manifest this update: Tue 28 Jul 2026 20:46:38 +0000
Manifest next update: Tue 04 Aug 2026 20:46:38 +0000
Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: 0LQxEhivMqLVrDCMeQ/NMEJ7vWFg1jBK7cKXDfh6oxg=)
2: 3C475446878F11F18AE5988497EE528E.roa (hash: /6A587A9HCmnScWOxHp2OA3/5iYDoN49Z/tEBQPE+Zk=)
3: F814843E7B5D11F18BA834705CA30FBC.roa (hash: BGdG3Z2i/UHLBFfG24gABQVx30SUCWPEfFJ2XJDewf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Validity
Not Before: Jul 28 20:46:38 2026 GMT
Not After : Aug 4 20:46:38 2026 GMT
Subject: CN=6a69152f-b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:d8:66:55:0a:d9:8f:74:12:c0:05:5e:3a:
c6:91:5f:bd:b5:7c:ca:2f:ca:a8:7a:3f:b2:29:90:
59:59:cd:09:8c:c1:3b:89:7f:c7:69:4e:28:88:95:
0e:15:3c:34:a3:b1:7b:b1:1c:33:03:a1:c7:3d:66:
2f:40:8e:6d:2e:5d:ff:71:b2:8d:09:50:57:a9:47:
65:85:76:14:30:42:60:d8:0e:3d:63:76:5e:29:de:
6e:8e:19:db:c5:47:92:64:61:17:51:14:ab:c1:0d:
d5:30:89:b6:d7:42:3d:cc:c4:ac:12:a9:fb:24:01:
16:65:de:fd:d5:46:5b:b3:e6:e4:35:52:42:56:80:
1e:e9:e9:3c:c3:f3:dd:30:61:71:ad:fc:f5:1d:34:
62:f0:e7:ae:b2:21:19:85:39:f8:75:0a:6d:42:d3:
fb:fe:35:43:db:c0:58:3b:b8:d0:bf:0f:44:91:b5:
9d:12:91:78:37:a7:05:f8:1d:4b:70:ac:d4:ec:63:
f5:89:c6:2e:dc:34:28:9e:eb:f7:90:a6:40:06:18:
63:db:4e:1a:27:97:85:27:93:1d:c6:6e:5c:73:12:
1a:c3:94:4a:f9:4c:f4:cf:56:bf:12:69:a8:c2:ba:
4e:34:c4:34:78:25:9e:7e:59:3e:b7:61:fb:d4:38:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:42:FA:51:4A:EA:7B:3F:7A:BB:64:C6:1B:36:6E:78:A8:FB:9F
X509v3 Authority Key Identifier:
keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:e0:c6:f6:cc:c3:af:d2:a6:e5:63:c1:b0:f9:5c:c9:72:
da:58:8d:37:38:f6:4d:bc:eb:1e:64:54:c0:0e:f9:71:bf:61:
3c:2e:77:b6:2b:84:87:ff:96:f8:95:c7:29:96:85:f3:6b:61:
b0:c6:5c:0f:66:4d:53:ea:23:eb:b1:27:60:f0:f5:7b:19:dd:
83:09:e2:e3:b3:fa:a6:91:e2:93:3f:55:a1:e7:5c:84:0c:81:
84:0f:15:19:26:de:76:30:72:e3:c6:a1:32:5c:c8:87:34:95:
5b:11:25:e6:e6:92:f4:18:cc:ab:c9:bf:0e:df:d8:2f:ef:ef:
54:e8:52:fa:eb:ff:48:b2:e7:af:25:96:45:a6:4e:dd:56:ee:
0e:b9:54:32:e7:99:8b:a2:1b:48:91:3f:f6:8d:cd:cb:1f:56:
71:e8:19:e7:24:a0:be:07:d0:67:5b:80:23:4b:81:fe:48:31:
78:87:b5:ad:69:a9:a8:21:50:0f:c4:b4:be:c3:48:30:2b:b7:
56:b0:76:98:97:30:01:cb:d9:db:f5:3b:04:ff:a5:eb:20:9a:
38:22:b5:f1:3c:2d:f3:1d:bb:4a:1d:e3:bf:25:c7:fc:c7:5d:
36:d8:24:77:d4:74:df:8e:46:ba:bc:fe:0e:b3:cf:81:98:41:
91:b9:d7:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz
RjgwQUY1MDIwHhcNMjYwNzI4MjA0NjM4WhcNMjYwODA0MjA0NjM4WjAYMRYwFAYD
VQQDEw02YTY5MTUyZi1iOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHfYZlUK2Y90EsAFXjrGkV+9tXzKL8qoej+yKZBZWc0JjME7iX/HaU4oiJUO
FTw0o7F7sRwzA6HHPWYvQI5tLl3/cbKNCVBXqUdlhXYUMEJg2A49Y3ZeKd5ujhnb
xUeSZGEXURSrwQ3VMIm210I9zMSsEqn7JAEWZd791UZbs+bkNVJCVoAe6ek8w/Pd
MGFxrfz1HTRi8OeusiEZhTn4dQptQtP7/jVD28BYO7jQvw9EkbWdEpF4N6cF+B1L
cKzU7GP1icYu3DQonuv3kKZABhhj204aJ5eFJ5Mdxm5ccxIaw5RK+Uz0z1a/Emmo
wrpONMQ0eCWeflk+t2H71DgbXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqMQvpR
Sup7P3q7ZMYbNm54qPufMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux
RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2
a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADK/gxvbMw6/SpuVjwbD5XMly2liNNzj2TbzrHmRUwA75cb9hPC53tiuEh/+W
+JXHKZaF82thsMZcD2ZNU+oj67EnYPD1exndgwni47P6ppHikz9VoedchAyBhA8V
GSbedjBy48ahMlzIhzSVWxEl5uaS9BjMq8m/Dt/YL+/vVOhS+uv/SLLnryWWRaZO
3VbuDrlUMueZi6IbSJE/9o3Nyx9WcegZ5ySgvgfQZ1uAI0uB/kgxeIe1rWmpqCFQ
D8S0vsNIMCu3VrB2mJcwAcvZ2/U7BP+l6yCaOCK18Twt8x27Sh3jvyXH/MddNtgk
d9R0345Gurz+DrPPgZhBkbnX4w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:05:34 2026 by rpki-client