
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: zSTHIDkLrDZcv+wsmoHdRLSGiycbyjaZ1EAv1D75Xrs=
Subject key identifier: E8:EA:56:81:66:E9:0F:CB:5E:37:93:6C:7F:60:37:0D:51:D3:AB:24
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 1615
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15F4
Signing time: Tue 28 Jul 2026 16:49:27 +0000
Manifest this update: Tue 28 Jul 2026 16:49:27 +0000
Manifest next update: Tue 04 Aug 2026 16:49:27 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: mSAim919jY35AOo92ExWzdtqOGFxpKyc0cFtBJYGm+Q=)
2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
3: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5653 (0x1615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Jul 28 16:49:27 2026 GMT
Not After : Aug 4 16:49:27 2026 GMT
Subject: CN=6a68dd97-7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:b5:49:aa:2f:0c:0e:4f:ae:ed:96:a3:e4:
59:69:d5:b9:4f:b9:4c:a1:ab:29:7a:db:ae:c1:a5:
75:4c:ea:8e:c9:be:cd:fd:06:ca:72:00:0e:2c:fb:
73:22:5d:19:6e:6b:f3:bc:12:3a:76:fc:0c:4b:00:
c4:aa:2f:7b:cc:cf:77:79:4f:0a:8a:ab:33:e9:cc:
f1:79:f1:98:2d:4b:30:c3:be:b4:f9:76:62:45:e4:
12:dd:49:93:3e:cc:5b:27:71:60:ec:0a:80:f8:8c:
c7:16:fb:da:73:70:67:19:50:09:a7:2a:49:23:a2:
bb:08:84:32:3b:ce:a0:3c:4b:58:52:2a:50:12:f4:
4f:2c:a3:d2:a0:59:29:a5:37:c1:c8:02:a2:06:b3:
56:20:b9:f7:6a:51:40:7b:26:8e:20:3d:df:27:a4:
8e:3a:ac:0f:26:1e:78:0e:84:8b:13:a7:87:d2:c0:
85:6e:08:37:76:c6:92:19:71:88:00:42:32:eb:69:
ad:85:ad:a7:f2:22:67:79:34:2d:59:7a:2e:43:29:
6e:cd:53:1e:0d:5c:6d:36:46:e0:11:50:2c:97:d0:
48:1b:a6:54:7a:bf:89:63:ab:23:41:36:b6:eb:9b:
cb:45:f1:ab:98:5d:ae:59:da:d3:d2:9a:57:5a:2b:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:56:81:66:E9:0F:CB:5E:37:93:6C:7F:60:37:0D:51:D3:AB:24
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:27:48:97:e4:31:22:f2:e5:81:73:94:50:2c:2f:ea:9f:
92:72:ee:4b:d5:9f:24:bc:96:9c:27:73:e9:c8:8b:09:03:76:
c1:8b:75:7f:5a:2d:07:62:d1:5b:c8:c2:e7:ce:56:5e:d4:39:
4f:ea:2f:f9:f2:28:87:54:f6:69:58:02:7e:50:80:1a:8a:7a:
75:51:31:ea:7e:4d:84:11:c4:25:a2:14:e5:58:1e:ef:fd:f7:
b6:7f:ec:8c:d8:13:b2:2a:68:0c:f3:fd:9f:2e:d6:ee:75:83:
d9:0f:12:f7:6d:f6:a7:19:b9:27:e4:8c:c9:f4:8c:9b:50:29:
7f:54:a6:6e:c8:df:bc:a3:45:6b:59:6f:12:c5:b8:47:88:5c:
1a:f1:2f:6b:56:be:a8:11:23:d6:6c:bb:ff:14:82:77:7a:c6:
71:1c:95:0f:a7:4d:ee:67:ff:91:d3:a4:b2:b5:5d:26:3d:68:
af:62:c1:a4:b7:a1:57:91:af:01:54:96:46:10:c4:7c:88:dc:
77:ff:f7:79:b7:65:37:5b:c5:3a:61:fa:b0:a9:dd:ff:ec:d0:
36:2a:fc:ab:55:05:b3:f0:32:28:ca:41:39:5d:9c:aa:4c:6f:
1c:68:f6:77:c9:d1:ec:50:26:54:10:e9:1e:79:f7:1a:5d:b9:
28:02:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:20 2026 by rpki-client