
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier: P+bxTGakLsoSOfXaJr2lYkbsw5GUs4fBDHxq0Lg5LLk=
Subject key identifier: 15:7B:0C:E8:3D:AD:6B:FB:B7:99:A3:5F:3F:1B:27:E1:46:2A:C4:03
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 0624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number: 0604
Signing time: Tue 28 Jul 2026 23:36:38 +0000
Manifest this update: Tue 28 Jul 2026 23:36:38 +0000
Manifest next update: Tue 04 Aug 2026 23:36:38 +0000
Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: uRe2nJ2iAmwg+rOWtxK3gcmUAk9qS+aXqTzzWaAYUy0=)
2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=)
3: 6DD2A340714011F191B402BC77A30FBC.roa (hash: a48AG/pGOmK4TOseQPCOrM/Wg8LOw5p4urOR/siiycQ=)
4: A486779E6FED11F1B401E8288CA30FBC.roa (hash: ZNuiSSyrHubK4AwyZlfjhIr65U0V5dbY5FcmNw+d+MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Jul 28 23:36:38 2026 GMT
Not After : Aug 4 23:36:38 2026 GMT
Subject: CN=6a693d06-4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:de:de:35:cf:1f:f2:8e:fb:16:6a:1f:8f:
3c:d3:4e:f1:6e:77:2a:4a:78:f3:9c:f8:3c:57:1a:
2e:a9:81:42:b7:5f:e7:66:e7:26:74:5a:e4:9b:69:
8a:4d:9d:0c:04:5e:9a:e2:3d:31:6c:ab:4c:9e:80:
51:0b:e9:2c:14:14:f8:37:c2:3b:19:1e:0c:30:0b:
f8:ca:1a:5c:0f:c1:95:61:1e:c9:83:1a:57:b9:b3:
93:d7:4e:95:8c:9d:4c:0f:f5:43:83:51:96:c9:02:
be:e3:fb:e3:fa:b6:6f:aa:36:11:61:6e:6e:5c:2c:
13:57:30:f1:63:1f:03:20:e0:56:7c:5a:d6:49:dc:
e1:59:5a:9d:c5:b4:2b:df:a5:b8:1a:05:85:7e:89:
09:22:50:12:3f:0e:4c:e2:c6:0a:ae:d2:de:62:af:
e8:ee:d4:35:ee:7f:66:a1:08:66:3c:10:35:71:a9:
f8:31:37:47:b7:bf:17:ba:e8:ae:2e:9e:29:14:7c:
0e:34:88:3f:c8:07:4c:eb:22:73:51:c9:78:75:44:
ed:73:0d:07:a6:64:7d:23:bd:3a:9b:24:e6:7b:a7:
63:76:42:4a:49:c4:d9:b7:c4:62:9f:dc:dc:2b:71:
f3:db:b2:ac:3a:fc:92:e6:a1:07:3f:63:2d:10:2f:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:0C:E8:3D:AD:6B:FB:B7:99:A3:5F:3F:1B:27:E1:46:2A:C4:03
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:46:a9:fb:4f:4b:f8:89:55:71:b5:99:71:52:fc:b9:9b:
1a:37:09:a4:30:f9:32:95:d7:d2:28:af:7b:9a:63:18:84:3d:
e9:a1:35:05:34:f4:f2:37:e2:f4:bd:db:fe:5b:18:cb:71:ad:
0e:43:f7:30:60:8d:92:89:c2:17:ac:a3:f7:80:9d:4c:26:91:
0d:b6:bf:01:da:ba:7d:46:5e:e4:e3:ff:3d:78:05:ea:47:da:
c4:f7:18:55:b7:5b:2d:79:14:1c:48:3f:18:af:c8:44:24:2f:
86:41:73:8a:3a:2b:58:b6:4a:90:99:c8:c9:50:05:06:bf:89:
92:3b:61:78:9a:64:dd:96:00:a8:56:ea:4e:6b:9a:61:4c:a7:
06:3e:01:29:32:5d:8d:c5:f1:9a:96:15:60:63:2b:a8:cb:b0:
ad:2a:5f:84:b4:cf:c6:5f:85:9e:c0:a3:6d:21:3d:76:f0:0b:
0f:e1:65:82:70:69:b0:ca:ce:c7:84:18:2e:9f:57:07:3b:94:
fc:5b:2c:fa:ee:88:8c:1a:ec:21:1d:b3:20:3e:f7:bc:74:2a:
f3:b4:8f:67:0b:60:1a:03:24:bc:bb:66:3f:3e:59:4f:59:44:
76:48:62:bb:7c:3f:3d:4c:15:63:63:38:33:a9:22:83:dc:97:
95:b3:54:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD
Njg0NjNFQTcwHhcNMjYwNzI4MjMzNjM4WhcNMjYwODA0MjMzNjM4WjAYMRYwFAYD
VQQDEw02YTY5M2QwNi00YzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAne3jXPH/KO+xZqH488007xbncqSnjznPg8VxouqYFCt1/nZucmdFrkm2mK
TZ0MBF6a4j0xbKtMnoBRC+ksFBT4N8I7GR4MMAv4yhpcD8GVYR7JgxpXubOT106V
jJ1MD/VDg1GWyQK+4/vj+rZvqjYRYW5uXCwTVzDxYx8DIOBWfFrWSdzhWVqdxbQr
36W4GgWFfokJIlASPw5M4sYKrtLeYq/o7tQ17n9moQhmPBA1can4MTdHt78Xuuiu
Lp4pFHwONIg/yAdM6yJzUcl4dUTtcw0HpmR9I706myTme6djdkJKScTZt8Rin9zc
K3Hz27KsOvyS5qEHP2MtEC/1zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV7DOg9
rWv7t5mjXz8bJ+FGKsQDMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB
REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP
aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVNFGqftPS/iJVXG1mXFS/LmbGjcJpDD5MpXX0iive5pjGIQ96aE1BTT08jfi
9L3b/lsYy3GtDkP3MGCNkonCF6yj94CdTCaRDba/Adq6fUZe5OP/PXgF6kfaxPcY
VbdbLXkUHEg/GK/IRCQvhkFzijorWLZKkJnIyVAFBr+JkjtheJpk3ZYAqFbqTmua
YUynBj4BKTJdjcXxmpYVYGMrqMuwrSpfhLTPxl+FnsCjbSE9dvALD+FlgnBpsMrO
x4QYLp9XBzuU/Fss+u6IjBrsIR2zID73vHQq87SPZwtgGgMkvLtmPz5ZT1lEdkhi
u3w/PUwVY2M4M6kig9yXlbNUCg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:59 2026 by rpki-client