
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier: 79k8DRXteaLQXNzlFb9EwqvzNsNHTIdyzLfjrfnSSA0=
Subject key identifier: A2:3B:0F:F6:F5:5E:BA:AE:53:1B:BE:01:4F:89:5C:AD:66:71:93:C7
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 048B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number: 0483
Signing time: Wed 19 Aug 2026 00:24:42 +0000
Manifest this update: Wed 19 Aug 2026 00:24:41 +0000
Manifest next update: Wed 26 Aug 2026 00:24:41 +0000
Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: A+XfQnHcMpKcPb7hCAb2xIBVGHzHFqElCthUBsOGNBY=)
2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: u6yx2TVGgoUMskQa1Rs/+SjZrQbYdcLPC2mmciXAt68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163 (0x48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Aug 19 00:24:41 2026 GMT
Not After : Aug 26 00:24:41 2026 GMT
Subject: CN=6a84f7c9-e9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:ee:be:f0:cb:01:d3:81:ed:0a:e8:0d:d6:
df:ed:99:e5:0b:25:08:1a:d3:3f:58:62:99:af:fe:
31:2d:91:30:35:b3:50:dd:66:b0:b4:0a:70:58:6d:
e7:23:79:72:99:e7:5e:e0:eb:37:87:06:43:d9:b3:
d2:0b:65:3f:08:c9:89:c9:18:b5:9e:1a:4b:a1:be:
26:7d:2b:72:34:69:0c:25:ca:1e:53:e7:e8:aa:84:
f3:ab:0b:1e:cd:0d:10:57:58:94:50:76:3d:1b:6a:
9e:59:26:0e:9d:f8:4f:fb:b0:ed:4b:9a:3e:d3:26:
d8:78:41:3a:b4:cf:d1:d0:f6:52:27:43:c5:04:db:
51:5b:0d:f5:af:67:94:f8:00:2b:0b:f7:b3:09:9c:
e0:64:fc:2b:fb:64:f1:59:8a:fe:5b:4d:66:a7:0e:
50:7d:dc:5c:09:1c:6f:96:f5:9a:7c:4d:bc:cc:5c:
5e:c7:e9:04:f1:c6:81:06:fa:b1:8b:fc:a2:83:fd:
e4:58:78:1d:5f:6e:93:ce:bc:6e:35:76:3e:b5:b6:
20:ae:76:9b:a8:53:6a:19:19:fa:10:6c:39:f2:b2:
df:26:03:6c:50:4d:83:42:c2:e1:50:a4:67:e6:fe:
4c:07:75:65:c9:63:82:28:98:75:d2:27:67:ac:da:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:0F:F6:F5:5E:BA:AE:53:1B:BE:01:4F:89:5C:AD:66:71:93:C7
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:81:ba:d3:78:25:25:eb:6a:ae:db:3a:60:69:11:0f:91:
d2:71:b0:11:c3:1a:d5:60:c4:9e:c9:d4:7e:53:24:20:6f:16:
39:92:93:6b:4a:66:86:5b:43:2d:fe:c3:38:08:82:13:27:5b:
d5:2d:0f:dc:6b:d5:70:7c:e9:b2:cd:16:5f:7b:94:e8:c6:d4:
d6:a1:35:64:77:85:79:a4:c4:ca:38:70:c4:58:ac:56:3c:41:
e6:d8:d6:9b:5b:a2:a2:15:01:7b:a8:cf:a0:22:fb:c7:89:c6:
f1:77:83:19:44:e3:a8:58:73:c1:da:c7:f8:15:c8:ee:d6:1b:
12:5d:cf:1f:c1:30:b6:0b:52:cc:d1:df:1e:2e:2a:b1:cd:37:
f1:d9:be:51:f6:a4:93:7e:dc:2f:dd:9f:e0:1b:30:e7:b6:85:
41:ea:7a:88:2d:c4:db:d7:ae:46:18:e6:48:68:36:50:f6:bc:
7a:99:f5:d9:b9:cb:c1:1f:30:37:9a:69:af:c7:8a:3f:37:a0:
da:29:48:9d:7a:b4:e9:7c:ff:df:8f:01:d2:6a:b0:bc:db:b4:
30:9f:44:3e:c3:e6:57:fd:7b:35:43:1b:6b:7a:00:30:e0:bb:
a7:6b:38:2f:34:4c:4c:69:5e:3e:90:0f:23:86:b5:b7:94:66:
70:41:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:18 2026 by rpki-client