
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: jUjCKRG++HdR4/derA6N76+PEveJ8NgPcMFWofiZoIk=
Subject key identifier: D7:18:00:B8:A6:F5:7D:C4:4D:7A:89:3A:3E:37:7B:4F:64:9B:84:72
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 36AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 3621
Signing time: Tue 28 Jul 2026 15:03:48 +0000
Manifest this update: Tue 28 Jul 2026 15:03:47 +0000
Manifest next update: Tue 04 Aug 2026 15:03:47 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: Vdo9XFKYDRovCRtI8zYpTX1TiNvnLt7ylLb6NGTLZLY=)
2: 14C7EB3E4A0311F188B4A0B8BF833773.roa (hash: uuHcdBkxccty/weIenIOJopCypBlJDPkgRjWEztGkA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13995 (0x36ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Jul 28 15:03:47 2026 GMT
Not After : Aug 4 15:03:47 2026 GMT
Subject: CN=6a68c4d4-4b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:ed:55:39:e4:e1:eb:61:89:4e:8d:35:3a:
1b:68:3b:79:95:92:8b:e9:68:7c:ec:3b:17:90:67:
13:98:e5:55:24:a6:d2:ea:f5:b7:40:3a:c7:e0:87:
bf:12:f9:94:d7:c0:f7:30:42:25:8e:26:49:68:8b:
5d:38:7f:d2:c5:47:52:b3:b3:23:41:0d:b9:8b:67:
e4:78:1a:b7:3c:01:9c:e3:6e:e1:0f:17:46:7e:98:
57:44:38:57:c8:80:16:cf:fd:55:f3:f8:72:0f:e5:
eb:19:66:65:eb:37:85:c0:c8:c6:3a:99:65:74:fa:
bf:f2:90:a1:33:c4:dd:8a:5b:6e:5e:55:63:2b:3b:
ac:00:52:bb:97:3a:69:3c:4a:4a:77:58:4b:35:9e:
98:47:65:50:71:96:47:1a:c6:89:f2:93:2c:59:e0:
49:c7:22:12:38:1f:28:94:63:48:6a:31:34:2d:84:
a4:c9:58:41:25:25:64:f5:95:ee:b8:88:cd:24:d5:
05:15:f1:41:10:2c:06:2e:07:bc:33:82:57:b1:15:
9d:b4:39:a5:a8:32:d1:01:9d:f6:6b:50:2e:d8:b9:
36:91:24:05:27:b7:d3:94:04:2d:75:74:68:24:43:
89:70:81:ba:45:8c:cc:bf:b7:6b:41:ea:d1:59:a4:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:00:B8:A6:F5:7D:C4:4D:7A:89:3A:3E:37:7B:4F:64:9B:84:72
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:0b:0f:0b:88:53:44:fa:70:b8:1b:e8:d9:1e:6e:3e:a3:1d:
d2:fd:98:1f:12:83:5f:f4:05:4c:87:51:bb:19:10:12:8e:b9:
f1:e9:17:7f:0e:ee:11:5d:8d:ab:6b:34:dc:b4:7d:f4:ee:e1:
67:64:6c:3f:37:11:a3:63:03:cf:9b:2c:23:a3:80:3c:79:bf:
0e:0b:bf:40:4e:d0:2f:4c:81:21:39:7d:db:16:3d:ae:10:f2:
9b:1e:17:68:34:4f:ac:97:7e:ac:bd:6c:20:4a:ef:bd:ed:c0:
7a:74:19:64:f7:8e:50:af:1d:95:16:27:2f:e1:7c:49:f6:33:
fc:a0:3f:64:34:23:85:87:9a:1c:ff:6d:90:8b:37:24:4e:bc:
58:96:d9:e6:ff:1e:ac:c6:b9:a4:26:62:3e:91:61:7d:33:a0:
07:6b:73:a4:9c:9d:9e:1f:46:f2:44:99:a3:e8:c6:16:7a:35:
c5:99:26:c0:84:a8:1c:bc:cf:6d:7d:61:7e:2c:fe:bd:73:56:
b4:da:07:25:08:bc:e6:f8:ce:33:22:70:20:c1:92:f5:c5:8c:
04:d2:05:dd:f2:b5:57:bd:c5:0f:f9:58:f6:0d:b7:98:02:59:
77:39:23:4e:c7:4b:0f:cc:12:4e:06:aa:60:f9:de:5d:b9:07:
82:54:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:53 2026 by rpki-client