
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier: shuV+6wm72nSSbTBX3eDDDnmalIbbDSlQzjcUp4DOt8=
Subject key identifier: 11:43:86:36:40:C9:FB:13:54:D5:02:33:71:47:BF:E3:29:37:7E:EA
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial: 0EC4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number: 0EB4
Signing time: Mon 20 Jul 2026 15:40:41 +0000
Manifest this update: Mon 20 Jul 2026 15:40:40 +0000
Manifest next update: Mon 27 Jul 2026 15:40:40 +0000
Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: pMfoWh3oU2zjTb/URfNTWFAr2oYkYWfvT93K8t9eQNg=)
2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: +AnMnxmKTZyscWe5AeUEPNU2Nvb8Uu/NJlADVWANwr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Validity
Not Before: Jul 20 15:40:40 2026 GMT
Not After : Jul 27 15:40:40 2026 GMT
Subject: CN=6a5e4178-8d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:bd:20:1d:22:ab:83:0b:ff:3b:37:42:e5:
e6:a5:27:0c:e3:b3:15:2a:a4:8d:d6:c0:60:e6:25:
52:37:8b:b7:1c:43:a5:bc:0a:7c:c0:12:24:76:db:
f2:a7:c9:e2:96:c5:89:e4:a1:dc:d5:c1:4e:f8:23:
34:46:db:9c:96:b0:6f:a2:af:e5:7c:b2:8b:6c:db:
b6:42:33:b1:44:40:43:96:c8:2e:0c:ec:eb:4f:ff:
d4:85:6a:7c:e0:71:d0:43:41:b9:33:2d:1b:fa:a5:
19:d7:64:30:f2:2c:e5:40:f4:a4:58:2e:b0:63:86:
2b:8e:9c:22:a4:df:7d:0d:a6:83:09:62:d8:8e:aa:
a5:6c:de:7e:91:6d:de:20:0f:13:ec:ed:c0:ef:60:
e5:a5:17:34:dc:cd:4d:fc:39:a5:4a:11:11:17:14:
45:bc:d3:24:59:08:99:e6:d2:c4:09:84:cb:28:ef:
81:29:ff:d6:60:16:b4:dc:f4:54:de:d5:05:35:69:
69:b8:2f:b0:2f:9e:f5:ad:83:87:f4:f8:ed:1c:1b:
3b:0d:90:32:4a:32:68:d2:05:21:c2:56:27:0c:76:
fe:0a:ca:f0:01:d4:4a:f7:66:58:fa:de:08:22:2b:
6a:b6:08:60:35:a3:f4:aa:fc:50:6b:e8:1f:58:46:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:86:36:40:C9:FB:13:54:D5:02:33:71:47:BF:E3:29:37:7E:EA
X509v3 Authority Key Identifier:
keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:47:6c:fe:83:da:58:ea:62:1a:66:f6:6c:5c:52:c3:05:c0:
2f:aa:24:28:33:45:ab:1d:ec:1e:fa:58:13:94:db:ce:49:59:
d6:fa:15:35:fc:21:e5:95:e4:06:6d:50:84:9c:c1:a5:e8:48:
b3:7a:d8:01:86:7f:5f:2c:6e:13:97:2e:4d:3b:19:ae:8f:62:
a4:6e:1f:06:40:c7:eb:0f:e3:3e:f0:71:2e:e9:b1:13:df:85:
70:e6:41:9e:b6:07:60:1a:0b:22:5e:62:53:59:2e:bf:59:1e:
2f:ce:e2:cb:65:bc:f1:29:79:90:0b:72:d7:a3:79:7a:2e:4a:
0c:9d:8a:9e:fa:b5:27:01:48:b6:c9:04:a2:a0:e5:60:ae:ea:
0c:66:7d:13:0b:a9:b5:53:ce:0c:1e:68:f2:84:0b:4f:c6:5b:
41:48:5b:be:70:e5:4f:06:3f:0d:5a:b3:e3:8e:6c:ab:1b:21:
76:d0:97:3f:e3:db:0f:63:57:ea:d6:ff:f0:a3:ed:04:a5:af:
78:f3:a9:25:1b:79:7a:22:15:62:f6:61:90:16:e9:5f:18:4f:
fb:ba:c2:d7:1d:3b:b5:db:e2:ab:a6:3e:f2:f4:65:8b:be:0d:
84:d8:54:f3:5b:fe:7b:25:16:c9:19:f3:01:f1:d1:e5:e4:b1:
fc:99:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:38 2026 by rpki-client