
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
File: _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json)
Hash identifier: WLVBCBw2LyjAjGOJhrp/EgLxaayCefgZCLq0eir79TA=
Subject key identifier: D2:DF:9F:F5:57:45:E0:33:F8:1F:CD:8B:37:82:35:5B:8E:E4:C5:14
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
Manifest number: 53
Signing time: Sun 23 Aug 2026 07:56:49 +0000
Manifest this update: Sun 23 Aug 2026 07:56:48 +0000
Manifest next update: Sun 30 Aug 2026 07:56:48 +0000
Files and hashes: 1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: pqTAEgYno32h3gxd/YC1SY9Nso50ywwA1lL4co5Ec7I=)
2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 07:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Validity
Not Before: Aug 23 07:56:48 2026 GMT
Not After : Aug 30 07:56:48 2026 GMT
Subject: CN=6a8aa7c1-4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:48:2d:7f:83:d4:fe:32:46:7d:e1:5c:23:82:
96:65:3b:22:cf:80:71:72:e5:ed:b9:30:95:55:bf:
5d:cf:4c:b9:3c:2e:64:4a:77:f1:ba:df:7e:09:ad:
cb:01:be:08:d2:a2:bb:d9:df:0d:6a:2e:55:65:73:
41:b7:47:a7:7f:70:6b:ef:56:63:fe:55:e8:2b:76:
66:87:14:71:3c:fe:41:c2:8b:12:54:03:5b:37:c2:
a2:a8:47:fd:d0:a7:ff:c5:4b:84:6a:92:3e:a9:f8:
02:9d:42:7e:42:c4:5a:42:da:0f:d3:f5:85:22:9b:
48:e2:a8:30:fc:92:6f:b3:0c:73:49:46:f4:d2:83:
bc:b3:d9:f6:7d:64:92:9a:c6:ee:e1:6f:32:15:fb:
91:6f:0c:df:7e:b5:46:95:28:37:ca:da:c7:9a:3e:
a7:4f:b6:af:70:33:d4:33:6f:1e:10:bc:a2:23:f8:
1e:33:a7:d0:17:4c:8d:51:59:d2:9e:57:9a:4c:42:
ee:6d:33:f1:8e:9b:34:1a:21:2d:d8:21:89:fa:dc:
0b:7e:37:f3:f3:49:c2:d4:e6:74:01:1e:ca:36:07:
05:0b:95:b9:da:8f:20:14:81:1b:2f:85:77:7a:28:
00:1b:f7:c4:78:e1:56:38:30:e1:fc:d5:bc:c5:38:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:9F:F5:57:45:E0:33:F8:1F:CD:8B:37:82:35:5B:8E:E4:C5:14
X509v3 Authority Key Identifier:
keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:4f:80:ad:92:0b:01:90:15:b7:de:cf:a1:26:9f:93:cf:
3c:ae:5d:2d:e9:75:89:0b:1c:c2:de:6c:b8:01:cd:79:c2:c1:
82:be:0d:2f:45:73:4e:fe:15:e1:2b:b4:37:fa:a0:be:0b:a7:
01:df:13:55:ec:38:e4:92:6d:b1:b5:14:4f:0c:5f:ac:ad:d0:
4c:b5:38:10:fd:13:59:be:fd:83:3f:a9:d0:26:59:32:be:41:
00:52:83:ee:b0:2c:5f:c0:c2:0a:e2:db:d2:14:6c:68:43:89:
2e:94:09:d0:ba:28:97:bd:4e:e8:79:fd:ef:0b:52:e7:71:49:
53:22:41:4b:2f:d1:ef:f4:49:32:75:d9:db:89:a7:e6:fb:00:
37:3f:db:2a:21:44:12:51:74:e4:78:09:28:a3:86:2b:ba:25:
44:d5:ae:d6:22:87:a1:16:a1:99:71:b2:50:89:eb:63:13:61:
da:20:8b:64:43:8f:93:07:18:b5:5c:a6:44:8f:2b:ee:3e:b8:
e0:09:2a:93:4d:bc:72:6d:ba:c2:38:5c:75:a1:13:45:fc:8d:
1c:90:28:0c:9d:f5:4a:d3:5e:3f:7f:c1:d1:c0:dd:cb:e6:4d:
a2:61:c1:e8:e7:4d:32:5d:16:f5:75:0d:0e:bf:1b:b9:ca:0e:
1c:45:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:16:58 2026 by rpki-client