
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier: tgJxIl4r38mV/bn0E92Y9Yb1kgAeGJclT34t0Af2I3g=
Subject key identifier: 42:DD:6E:B2:7C:34:FC:01:86:17:6A:45:B3:7C:16:DC:2A:D0:20:B0
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 138B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number: 136D
Signing time: Tue 28 Jul 2026 17:04:35 +0000
Manifest this update: Tue 28 Jul 2026 17:04:35 +0000
Manifest next update: Tue 04 Aug 2026 17:04:35 +0000
Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: aQdqNBz8LsR5ys77fgQZnaYt+27ejlOxb/txgbBdS28=)
2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: EzDx+kZUXYs4cl7Q2Kezjy72skBAtO5dib4eJqomtiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5003 (0x138b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Validity
Not Before: Jul 28 17:04:35 2026 GMT
Not After : Aug 4 17:04:35 2026 GMT
Subject: CN=6a68e123-a719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:f6:9a:95:b2:e0:56:43:55:ea:81:9c:c6:
d8:87:84:40:59:e0:de:e4:e2:1b:8f:ad:14:69:9f:
0f:08:b8:c5:78:5a:0a:bf:1d:e8:34:cb:4e:30:03:
cb:30:d7:d9:4d:47:b8:1d:7f:b2:25:bb:f2:7a:0f:
13:c3:dc:48:d7:c4:16:de:69:51:d2:9c:f0:4e:26:
06:68:74:73:4f:ee:d7:5b:47:6a:46:ab:df:de:a4:
47:a1:5b:c7:d7:95:5f:e7:07:87:2d:36:4a:d7:84:
b5:71:ba:0d:f1:35:b8:f7:0e:6d:b5:c9:a3:ba:f7:
97:2d:7f:b9:fe:7e:32:90:13:48:2d:83:fb:ee:ee:
78:b6:8f:41:2b:2c:e1:80:42:3a:37:2a:15:a8:0c:
88:a8:e5:2d:32:e2:e9:8a:2a:48:0c:24:80:46:94:
e2:90:53:de:93:95:04:e5:fd:50:f1:c3:4d:24:2a:
64:72:9b:b2:10:3e:00:b2:25:e0:b7:28:28:56:c8:
dc:4a:71:63:54:ba:a1:82:12:31:43:03:28:4e:2f:
45:de:d8:19:5b:2c:96:f2:29:44:a1:36:39:d1:26:
74:c3:76:55:7b:73:0c:70:92:40:7a:d4:4f:36:30:
1b:72:09:4e:c0:da:8c:95:86:ac:66:72:ed:2c:a3:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:6E:B2:7C:34:FC:01:86:17:6A:45:B3:7C:16:DC:2A:D0:20:B0
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:28:8b:5a:2f:3f:b0:36:d1:30:b7:c7:2e:78:ed:6e:54:a8:
99:0a:07:af:e3:bc:c2:ac:00:91:75:bc:55:27:36:7c:f0:7b:
3a:ba:53:30:79:bf:5f:73:f9:c0:e5:d6:51:01:39:7f:d8:6c:
75:4d:7e:27:21:0b:27:6f:28:01:86:13:e4:4d:59:5d:c6:cd:
b5:b4:0d:6e:5c:62:d0:40:10:ed:0a:14:01:8e:de:25:6b:8a:
c5:27:b5:52:a3:65:a3:31:7c:9b:74:70:63:bf:09:03:90:b8:
2e:4c:f8:28:1b:76:61:5d:f1:70:e1:16:cd:87:33:01:36:ce:
fa:ed:bd:60:1c:3d:a5:82:ac:02:d3:8c:09:ec:df:80:e4:8c:
38:2a:cb:90:b6:5e:45:49:72:62:c6:be:9f:03:70:d0:cd:ae:
d0:c4:e4:1e:94:87:c4:69:b2:0e:b9:71:28:84:a4:b0:9e:2c:
32:1f:2e:59:07:73:b1:bd:ce:62:63:0a:d4:1f:bf:19:07:e0:
ff:7d:00:d5:38:3b:03:b7:e6:e4:56:d6:a9:6f:a8:44:90:d1:
b4:56:52:65:83:1a:48:f7:f6:f8:58:f1:9e:d2:d3:6d:c2:ae:
23:cb:5c:c5:44:e2:98:2f:f6:ea:98:cd:4c:d6:25:59:43:37:
7b:b7:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:35 2026 by rpki-client