
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json)
Hash identifier: LmS1NSFNlN98Q7fhBqKLY3AyURWbnYkrV8qGJP/uppo=
Subject key identifier: 1C:B7:F5:DC:9F:95:74:70:E9:AC:CE:FB:E9:62:44:15:71:45:4B:B5
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
Manifest number: 01E4
Signing time: Wed 19 Aug 2026 04:04:09 +0000
Manifest this update: Wed 19 Aug 2026 04:04:09 +0000
Manifest next update: Wed 26 Aug 2026 04:04:09 +0000
Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: RbqFeiC++HQ2WFdKXjh14xBSyHkYmiwHV73DnJMJ7Nk=)
2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: 4Xxfcn9vWAxmFmsir9WaEVwPirqEsxparkquZplonJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Validity
Not Before: Aug 19 04:04:09 2026 GMT
Not After : Aug 26 04:04:09 2026 GMT
Subject: CN=6a852b39-0fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:db:19:f1:8c:24:43:8e:f3:f3:9e:1a:09:
90:63:c8:ca:f7:21:89:37:76:e5:9c:61:52:2b:6d:
06:b0:8a:c8:b4:08:8e:0b:1d:36:97:bc:21:d7:50:
91:b9:cb:2e:b4:f0:d4:aa:7b:ec:f2:75:1b:a8:bc:
c0:13:6d:5a:80:35:c1:6c:e2:48:72:4c:1c:5b:ed:
69:de:f2:99:7c:92:6d:1e:15:42:7b:05:49:74:df:
4d:7b:d1:9e:80:0a:d6:47:e0:45:20:ec:21:ec:ef:
06:69:a1:6f:c5:f9:75:92:81:87:b3:f8:a2:51:7c:
84:e8:d7:92:52:22:16:de:59:84:7f:35:24:35:a4:
70:54:eb:37:74:d0:56:22:0f:94:f9:70:75:5f:a9:
46:13:46:03:90:ea:bd:ac:ee:34:73:fa:74:bd:94:
f4:84:93:47:da:b0:26:01:10:72:e3:4b:cf:1d:14:
26:94:0d:d3:af:56:86:b0:93:45:e9:0e:54:9a:a7:
0a:e1:31:fb:9c:8f:5f:23:21:f6:5e:51:9c:93:e9:
cb:f5:25:2a:b3:df:72:e7:64:90:97:9c:30:b0:62:
ff:05:cd:52:ff:b7:67:d7:62:a9:f6:c3:58:14:f0:
0c:d2:a7:71:10:73:e6:6a:c8:f2:5d:2a:d6:d2:a5:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:F5:DC:9F:95:74:70:E9:AC:CE:FB:E9:62:44:15:71:45:4B:B5
X509v3 Authority Key Identifier:
keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:7b:7f:36:97:44:0d:3f:d9:5f:e9:3b:60:97:39:b4:70:cc:
d8:ae:22:07:eb:80:98:e1:4d:ca:b9:04:0e:56:1a:be:5f:46:
1c:95:77:5c:0b:22:44:d7:ab:d1:75:85:e4:c9:12:43:7f:5d:
76:a2:a1:66:d1:10:e4:ad:1e:50:b1:96:11:57:9d:36:c0:84:
40:d5:aa:65:98:c0:be:03:83:42:1f:65:a6:81:c6:75:93:92:
cb:fd:05:ff:b3:7e:21:64:9d:cd:22:d2:46:63:35:56:80:2a:
b3:ad:46:4e:19:4a:ea:88:c2:90:30:3d:ce:8c:23:58:69:49:
2a:4a:ad:28:8e:84:f1:31:1d:88:ee:c3:db:73:4b:9a:bd:54:
c9:37:fc:56:a5:53:e1:f0:63:46:c9:b0:ef:c1:ac:6a:6a:b9:
a6:36:61:46:a7:f2:a1:c9:ab:ad:83:f9:22:ca:34:d9:01:00:
1d:cb:ac:0b:cb:a8:15:f8:d8:dc:40:61:73:4c:bf:41:57:c5:
c8:9a:5e:29:cb:a7:ae:06:ca:02:b8:4f:a7:da:6a:72:19:d3:
35:09:4e:6c:06:e7:46:4b:47:d8:35:ed:be:66:10:47:35:bd:
ec:75:35:4e:b4:54:a5:cc:33:f7:93:cb:4a:c7:76:22:c5:4d:
9e:73:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:45 2026 by rpki-client