
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: cdPPDXwA4kqZZfOTmYILADWGKMHldvJEc2qiY6F36C8=
Subject key identifier: 1C:EF:D0:09:91:C4:4A:3D:20:11:DE:61:56:7D:29:19:8C:CC:CC:B7
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1B38
Signing time: Tue 28 Jul 2026 16:22:56 +0000
Manifest this update: Tue 28 Jul 2026 16:22:56 +0000
Manifest next update: Tue 04 Aug 2026 16:22:56 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: TOUXYGVht8w4+dr2xSE14eTpuSE0bnnnXUBaAKN8Sys=)
2: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=)
3: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=)
4: A704B6CA4E9611F1B39189EDBB833773.roa (hash: E4Gh/Hv+zCrfZWmDryHxww+Tu0R+4hjamnHpY0bEw4U=)
5: EF9C17344E9611F1BFD1AE0BBC833773.roa (hash: gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=)
6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=)
7: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7057 (0x1b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Jul 28 16:22:56 2026 GMT
Not After : Aug 4 16:22:56 2026 GMT
Subject: CN=6a68d760-0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:69:ca:64:c1:fc:a2:41:dd:24:69:ff:57:
a4:ff:78:40:fc:a1:80:b5:4b:ab:9c:82:98:11:0e:
92:76:03:05:aa:2d:40:ab:8b:0e:74:91:25:6d:ca:
eb:49:a9:90:8b:e8:77:f0:c9:c0:f1:a1:ce:bc:b2:
c7:30:9f:79:8e:85:6e:d9:7b:6f:df:db:ee:33:6f:
7a:a0:68:eb:e1:c3:f2:07:8c:07:d5:9c:88:52:b7:
77:ab:9e:00:e5:76:02:50:37:00:2f:3c:5b:d2:6f:
bf:7e:98:f1:c5:1f:8d:87:31:c8:24:37:68:a1:64:
0d:38:27:c8:13:3b:33:ac:bf:35:d4:c5:76:83:e8:
73:a8:af:30:10:18:9e:b8:25:52:e8:7d:67:2c:b5:
9a:6a:df:a9:7a:2d:e0:43:03:87:51:51:32:0d:8b:
52:f8:3f:1f:5c:d3:c5:89:77:42:72:14:8e:68:97:
07:47:41:c2:a8:79:78:da:dc:1d:cc:6e:b1:83:b9:
af:8c:e6:bf:5c:e1:32:4a:b7:d4:cc:e7:71:e9:0e:
fd:4f:b4:56:80:a4:eb:9f:b2:97:76:6a:ea:68:1b:
60:9d:9e:fd:fe:fa:a3:34:a4:af:5a:04:a5:cf:59:
f4:c0:fc:a3:9f:93:ea:d2:f7:20:2c:52:c5:63:5b:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:D0:09:91:C4:4A:3D:20:11:DE:61:56:7D:29:19:8C:CC:CC:B7
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b4:3b:49:ec:be:42:52:aa:80:9c:cc:0b:5a:80:a7:40:d5:
a6:9a:71:33:61:c8:69:33:e9:7b:42:46:a7:8a:6f:42:62:ac:
bb:f6:b8:d5:be:21:14:70:bd:d0:3c:b9:33:51:da:42:4f:f4:
2f:61:e5:2a:14:80:cc:4b:8b:88:3c:df:af:0b:35:f6:77:12:
3b:2f:8a:d2:02:17:9d:aa:c9:34:1c:71:da:97:e1:66:40:a6:
f0:36:47:5a:74:57:6b:55:ee:6b:20:36:65:63:fc:57:c8:68:
0f:1e:80:dc:40:17:f4:17:74:d5:9b:41:2b:62:58:a3:f2:ee:
d5:de:92:9e:8b:c9:f0:f7:8e:4d:9f:a3:45:52:6b:25:37:52:
b2:bd:1d:2d:cb:76:7f:ab:5a:40:3b:45:c6:6c:33:29:66:81:
c4:6d:0d:8c:ec:7a:03:9c:a4:b7:13:2a:cd:c9:91:02:48:e8:
bf:b0:36:8e:a9:45:6d:0b:27:2a:8c:01:87:9c:63:6f:78:c3:
17:16:9c:95:c3:a8:29:74:2b:9d:b7:4c:0b:37:93:ae:1c:a7:
44:87:9a:41:0e:7f:87:c7:bf:00:15:0d:bd:96:4e:ec:e5:e9:
26:78:fa:c3:04:ce:5d:ba:94:d5:56:a4:e4:62:d1:4e:01:16:
7b:86:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:19 2026 by rpki-client