
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: OlGkfb/VXEe1oPpxWYnhNMIr5QvBX0zsheuKQcHAzWA=
Subject key identifier: D9:CF:9F:20:C4:BC:EB:37:6B:63:DC:A1:FA:29:E5:90:B0:B3:08:90
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 0212
Signing time: Mon 27 Jul 2026 04:35:46 +0000
Manifest this update: Mon 27 Jul 2026 04:35:46 +0000
Manifest next update: Mon 03 Aug 2026 04:35:46 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: 8XS1Ufb8dK8G+wSCBSEJWvXnopylFphIDxDK84jBMoA=)
2: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: z4T+vvI8T+5oc2mgkAo/obM6X1bNreFY1igmcwM5xYk=)
3: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: y6hlqSgvXAjWJY7Sel1hIYuvC0A3C+jNhr6PU7c820I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Jul 27 04:35:46 2026 GMT
Not After : Aug 3 04:35:46 2026 GMT
Subject: CN=6a66e022-90e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:6f:cd:23:ab:59:28:37:3e:26:6d:31:ab:
82:72:aa:bd:5e:ef:e3:1a:a2:78:95:3b:ef:ee:f9:
13:f0:39:8b:63:c4:07:9a:27:04:a1:f0:04:c2:cd:
4f:22:c1:62:f8:5a:dc:75:d1:dd:b4:51:a5:85:c7:
e4:bf:6b:f7:bc:0e:51:c3:6d:5e:fe:1b:e3:65:0e:
f8:b8:1d:47:3a:94:ff:c4:71:c1:b5:9f:30:ab:ad:
5d:c9:57:1b:54:f6:43:97:c8:f5:9d:4f:2d:5e:17:
31:cc:e3:82:a5:fa:ec:67:af:04:2c:22:b5:5c:fc:
ba:bd:d9:6b:aa:21:c6:8e:a0:60:08:30:28:59:20:
f6:46:6d:87:96:c2:bb:b3:fc:8c:f6:64:86:61:fd:
2f:da:78:d5:17:21:7e:16:15:f4:69:93:4e:61:22:
33:0b:23:ec:2a:93:ff:1d:89:54:3f:cb:d9:d0:e1:
ca:bd:09:3d:e3:65:be:6e:80:fc:2c:76:00:d7:bc:
f2:49:c6:14:82:d9:27:c6:22:7d:d7:4e:2b:77:a5:
a9:d8:08:62:4c:c2:9a:a5:25:85:ea:48:ae:b3:71:
48:b3:d2:bd:f8:28:b2:b4:40:1d:5a:94:e4:46:de:
ae:3e:63:2c:5d:b2:9f:aa:99:20:3d:40:a7:61:82:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:9F:20:C4:BC:EB:37:6B:63:DC:A1:FA:29:E5:90:B0:B3:08:90
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:92:5f:a1:d7:21:24:e2:4a:3c:ad:99:93:4e:bb:9e:d9:
aa:ef:57:a8:14:4a:03:43:e6:53:91:98:98:20:f5:8b:a9:dd:
e3:c7:76:e4:94:68:ad:74:2d:2b:e4:6e:13:73:37:2c:57:7c:
b3:79:ea:ff:ec:57:f0:09:ee:86:06:ff:d1:11:eb:7f:08:9d:
4b:70:fc:2c:e2:72:a5:89:88:b4:90:7b:06:78:e7:68:ec:81:
9c:1b:c2:c9:23:74:78:d4:8a:b7:5a:8d:0e:98:3a:a1:16:82:
8c:9e:b8:14:94:ed:62:f3:71:1d:c4:b1:b5:56:c7:3f:46:ed:
13:cf:02:4f:d5:32:01:24:d3:0a:95:5e:c9:ff:4d:fc:fb:2d:
d9:2f:ad:df:f9:51:91:2a:da:2a:da:02:d6:df:20:ce:f4:64:
8b:8b:b7:5b:6a:3f:48:af:a9:25:f8:78:72:2f:fd:f4:b1:fc:
28:37:0e:88:25:ec:b3:bf:b9:ca:e4:1d:2c:b4:9a:ae:a5:ef:
08:2a:7a:65:47:9e:f7:6c:aa:d0:c9:54:63:64:4c:28:d2:81:
57:8e:cd:ea:73:c8:61:f6:93:47:aa:93:be:0b:7d:ef:af:5f:
de:65:a6:29:8d:ff:e6:f4:7e:33:cc:be:c8:c6:61:84:ca:d7:
ed:9c:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:48 2026 by rpki-client