
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: efr3wZsf+QNwImNYB0ZiWJ5RaoUUatzv7IFhBCFcjyo=
Subject key identifier: D4:D1:8A:7F:80:6C:E0:64:92:88:E6:3A:1A:6F:40:CC:B8:68:D5:87
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 03C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 03B2
Signing time: Tue 21 Jul 2026 01:33:25 +0000
Manifest this update: Tue 21 Jul 2026 01:33:24 +0000
Manifest next update: Tue 28 Jul 2026 01:33:24 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: Coo9mh0jLYBiiOShwe3Rv8RDlOaJK1dmC7Zh6lsoQ84=)
2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: Jul 21 01:33:24 2026 GMT
Not After : Jul 28 01:33:24 2026 GMT
Subject: CN=6a5ecc65-73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:d6:cc:d9:34:87:8c:46:f9:a7:b7:ca:8f:
4c:b6:ea:8f:4a:05:fc:09:fe:95:16:d0:d4:b5:19:
77:14:2a:5e:a2:a0:05:39:eb:ad:d2:2f:ca:c5:17:
33:04:f3:95:b3:b2:ed:4d:13:6f:12:62:20:14:12:
93:99:69:07:0e:03:bd:9d:ff:42:ce:54:59:31:da:
df:fe:a2:3d:a7:27:80:c2:cf:00:e4:b9:e0:2c:ef:
f5:4f:e9:d7:d0:75:c7:09:1a:f9:e3:bf:c7:32:ed:
7a:be:65:8e:45:1b:aa:e2:3b:95:d3:c4:4e:1d:bf:
a7:ee:1e:d8:e0:aa:6b:3f:70:66:21:32:f2:95:ee:
a9:f6:75:2d:96:5d:9b:f0:6d:37:45:fd:50:a0:cb:
eb:a8:08:fa:79:84:fc:bd:03:7e:b2:9c:da:f9:60:
53:9e:57:e1:9e:58:14:57:fc:07:c3:2f:9a:69:ae:
9d:3d:11:5c:e0:59:93:21:34:bd:eb:b9:ac:f0:ae:
44:e8:ad:99:bd:ff:1d:a6:13:9a:12:2b:a0:3d:3a:
d6:13:9f:3a:bb:61:3f:9a:be:60:af:0c:18:a2:90:
18:73:56:36:db:e4:f1:48:2d:71:12:3a:cf:c1:f3:
19:8d:18:0b:9c:96:1a:76:12:fc:f3:e9:77:6e:76:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:8A:7F:80:6C:E0:64:92:88:E6:3A:1A:6F:40:CC:B8:68:D5:87
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7a:e4:da:41:43:fa:7c:c0:62:76:71:a1:c8:f8:3b:87:12:
cb:9f:3e:61:e6:87:b5:8a:a4:6e:d0:35:d0:89:8d:ff:7d:1b:
2a:96:12:b4:49:45:90:7b:45:3e:b0:1d:51:21:18:66:69:5c:
28:fc:d1:c4:f6:ec:cd:07:eb:8c:3e:93:63:30:06:55:73:77:
fc:75:3a:62:51:10:45:cb:13:99:43:f4:aa:d5:f1:36:6f:ae:
13:35:7b:0e:c8:ef:0f:79:0e:90:5d:2b:d4:bf:34:50:b7:64:
9d:c9:67:59:fc:05:ff:09:53:96:d9:2e:2d:10:e6:eb:06:a2:
ec:35:d0:21:a1:43:7c:d4:27:26:f6:b4:7c:64:3c:22:10:90:
e5:1a:8a:a8:00:fb:03:78:36:2e:c1:c1:e3:f9:5d:57:4e:82:
3f:38:82:0c:ff:66:05:39:eb:6f:95:cc:8f:5d:6e:ac:18:74:
b2:22:05:c5:53:99:73:ad:36:c0:81:b4:74:25:70:15:17:33:
0e:a7:3a:63:aa:fd:92:5a:46:36:f8:fe:8f:a7:d3:a4:6c:27:
7f:a9:22:04:b6:9b:ea:99:a8:18:c5:82:0a:d9:9b:b9:10:ac:
d3:f5:41:20:0f:ed:81:6c:38:21:db:86:8a:3b:54:eb:41:a2:
56:76:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:35 2026 by rpki-client