
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier: ZK+mMbomBUvp9vIMGJD2S2ZRcHbKovHD2Dsgl40YBTQ=
Subject key identifier: 92:4A:FE:41:DA:05:25:18:11:28:5B:C7:4E:6F:5E:BC:41:04:95:45
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 35D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number: 359B
Signing time: Tue 18 Aug 2026 14:39:55 +0000
Manifest this update: Tue 18 Aug 2026 14:39:55 +0000
Manifest next update: Tue 25 Aug 2026 14:39:55 +0000
Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: yGDMi3KJPFPBrtjfSXtStO1fQyN1xjJ+iQVxCHAY44w=)
2: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=)
3: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=)
4: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13779 (0x35d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Aug 18 14:39:55 2026 GMT
Not After : Aug 25 14:39:55 2026 GMT
Subject: CN=6a846ebb-79d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:0a:9e:69:0f:d3:94:b8:71:5e:35:90:91:
b4:cd:ce:0d:42:02:67:a9:85:51:44:54:1d:f6:fc:
9b:a2:c9:f9:8b:73:21:4d:42:c3:e7:a9:06:a2:54:
44:ac:1e:66:af:e0:ee:0e:8c:9c:62:3e:54:70:6e:
39:1f:d9:36:ce:2e:75:b9:42:06:8a:db:d1:0f:34:
70:5a:bc:4c:c2:ab:e1:12:14:ff:c1:fe:bf:09:bc:
0f:39:09:b2:26:2f:47:34:36:2b:1f:7a:a3:c2:ba:
3c:7c:11:c4:ed:32:0b:bb:b8:27:2b:49:97:d7:4f:
5e:c2:19:41:4c:8f:2a:96:46:de:49:e5:2c:3a:28:
64:6c:58:be:99:6b:a1:f6:72:b6:42:40:9f:2d:25:
4f:24:35:61:04:4e:ec:3d:31:b0:42:3e:d6:29:fa:
91:48:f5:ee:32:83:1c:c1:9a:1f:5f:6a:b4:f2:40:
97:c0:89:99:51:49:eb:aa:dd:92:a7:87:b7:5c:7f:
96:a7:9e:f6:c1:5a:66:e4:fd:ad:b5:b5:89:2f:19:
09:ab:9b:3d:76:b5:6a:be:3d:dd:65:16:f1:0e:59:
43:06:76:a8:64:ec:65:fe:47:1c:d9:4b:45:76:fb:
be:e0:11:0c:8f:b8:39:4c:b5:74:dc:5a:63:4c:f5:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:FE:41:DA:05:25:18:11:28:5B:C7:4E:6F:5E:BC:41:04:95:45
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:1c:07:29:6f:34:2e:ae:3d:0c:43:14:5f:33:7f:95:5d:
25:e9:a3:7e:5d:b2:62:61:f9:6e:fe:cc:87:ac:13:bf:61:fa:
dc:b9:c2:93:70:cf:71:8e:e5:06:3f:e4:10:5e:de:6b:a3:63:
1c:1a:c1:30:50:a5:78:4a:1b:91:bc:a1:fd:6c:15:ce:d4:8d:
d5:82:7a:7d:42:50:49:b1:69:7d:4a:57:50:a9:c5:32:2a:0b:
d6:e0:20:a5:ca:30:23:c1:90:e9:99:61:22:90:f8:5c:75:3a:
ef:3f:57:47:84:92:94:52:ae:51:cd:fe:4f:37:ae:38:cb:eb:
3e:44:32:fc:90:8e:83:f1:ae:21:a3:0f:6a:05:ab:27:25:0a:
58:44:49:67:e5:44:20:cd:89:17:aa:ce:05:ae:73:bc:4a:cf:
6d:d0:ec:02:51:3c:4a:38:f8:d6:32:90:91:bf:e6:26:89:9b:
3c:f8:69:61:c5:97:c7:08:6f:43:94:e8:ea:db:d2:ad:de:84:
ee:a2:e4:7b:9f:df:81:aa:ab:7c:ab:9a:65:d3:1d:f8:3d:c4:
67:92:eb:02:f4:8d:12:06:cb:64:ca:a4:40:8d:c6:20:ba:33:
36:ea:dc:8e:bd:dc:82:cb:0a:e2:a3:4b:80:98:26:69:58:70:
18:e8:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:20 2026 by rpki-client