
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: fOARSq2Gk6mMLZw3vyUfvsE+Fnb8M6gTq5PiUH9qK9s=
Subject key identifier: 0E:4B:5E:E1:2D:AF:49:14:9E:B6:22:9F:C3:85:20:E8:FA:AB:A1:00
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 07C2
Signing time: Sun 26 Jul 2026 22:14:14 +0000
Manifest this update: Sun 26 Jul 2026 22:14:13 +0000
Manifest next update: Sun 02 Aug 2026 22:14:13 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: M1xAHTFMBbj03Guo5EoLdQwvEkaiyDbvUjCkjxzgTQ0=)
2: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
3: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
4: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
5: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
6: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
7: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
8: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Jul 26 22:14:13 2026 GMT
Not After : Aug 2 22:14:13 2026 GMT
Subject: CN=6a6686b5-220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:93:09:ec:72:e5:31:ae:a7:1f:cd:e7:86:
18:75:bd:a9:50:6e:0b:46:26:d6:31:70:8f:47:b7:
ed:d1:6d:03:39:4c:a6:24:17:11:d8:10:6a:08:ed:
ff:36:bc:e2:31:b4:70:bb:c0:c2:dc:42:5f:e3:07:
6b:e6:4e:b5:3f:eb:c7:da:10:74:51:c5:7c:49:92:
d2:bd:8b:ec:1d:b3:6b:f1:b4:b6:71:18:cd:be:60:
63:10:ee:ca:ec:40:7c:b3:d4:29:a9:0b:9b:bf:eb:
be:f7:7f:39:67:ed:ca:59:b7:fe:f9:58:1d:7f:8a:
78:af:9b:32:d7:2f:83:d9:de:03:24:b5:0a:cc:c7:
7e:b2:ed:35:30:3b:ba:8b:5a:c9:c3:a4:b9:ba:b6:
77:d6:76:e0:14:9f:83:7b:da:f6:f7:f9:cb:1f:42:
57:63:11:89:5b:bd:17:d5:e6:54:44:ef:88:56:f1:
de:eb:a2:73:52:f8:a6:c9:42:65:98:50:73:9c:75:
26:62:92:04:6f:14:1d:07:03:0d:3b:0d:17:15:00:
bd:cd:c0:a0:4e:d3:de:81:57:1b:56:d3:a1:0b:96:
87:aa:d7:e2:9f:f8:ca:6d:a3:3e:d4:7c:45:ff:63:
8c:8b:df:92:66:5c:a3:79:92:93:1d:1b:b4:5f:2c:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:5E:E1:2D:AF:49:14:9E:B6:22:9F:C3:85:20:E8:FA:AB:A1:00
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:8b:36:2e:c2:bb:e3:2e:bf:ab:fe:f5:f6:96:e9:be:83:
e5:6c:5d:70:ce:b9:16:6a:92:d2:25:ea:35:78:41:d4:95:d9:
ca:99:6c:60:81:6a:c0:4f:b3:f8:75:72:f9:5e:4f:28:75:ec:
15:06:85:e1:a8:ce:46:a6:d5:f7:f4:2f:04:58:79:b6:60:57:
df:74:15:4c:69:2a:1d:6a:df:61:38:db:71:23:30:32:90:46:
63:93:fc:33:03:b3:8c:63:1c:bc:57:eb:ae:05:1f:ef:0f:e9:
98:a0:fe:69:04:d2:42:86:1e:ae:7c:d8:7b:da:2b:e3:96:69:
0d:5e:09:dd:06:1f:e4:23:26:06:95:68:3a:10:8f:50:bd:50:
8d:69:ee:56:ba:59:2d:e7:65:ae:06:3e:23:5e:af:42:83:ee:
a2:f3:09:f5:59:d6:ee:52:bb:99:8e:14:45:52:60:26:fe:5f:
79:89:7e:d4:1c:a3:24:77:52:11:b0:3e:66:de:30:29:4c:5d:
93:79:c3:fe:ea:54:ef:c5:51:6e:d2:6e:4b:1e:c3:6d:8f:c0:
fb:4b:6c:7b:32:a3:8c:e3:55:ac:36:40:f8:32:ad:f5:f6:5e:
32:8f:44:f3:a4:fb:a7:3f:33:fe:7e:dd:8d:16:61:3c:76:45:
96:86:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:31 2026 by rpki-client