
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: 6+adUsE2sZz1TKImBUw6Cj2qDu7dhRkT/vWaqdqQgNw=
Subject key identifier: ED:5E:08:C4:D5:37:52:E2:15:E2:48:0D:E7:FE:21:A0:2F:74:D8:59
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 0881
Signing time: Mon 22 Jun 2026 20:41:53 +0000
Manifest this update: Mon 22 Jun 2026 20:41:52 +0000
Manifest next update: Mon 29 Jun 2026 20:41:52 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: APS7AVsEGJOGR4KVtzwiKGsJx/gp0v9QT9dnJvZ+jTE=)
2: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=)
3: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=)
4: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=)
5: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=)
6: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Jun 22 20:41:52 2026 GMT
Not After : Jun 29 20:41:52 2026 GMT
Subject: CN=6a399e10-c979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:a4:e0:c0:42:9c:d8:da:0f:6c:a7:c5:40:
b4:3e:05:a2:9a:1d:f3:76:a6:5d:a8:4d:13:ad:6f:
85:ac:9d:42:11:cd:ac:26:2f:16:5f:45:da:9a:27:
9b:4a:7d:3f:1d:22:48:92:89:d1:1e:64:77:bd:41:
fd:19:8f:34:8d:75:b4:41:ea:44:15:20:67:68:49:
0c:81:fc:22:85:1f:44:e6:bf:13:05:28:32:65:29:
d9:58:30:d9:d5:28:3c:ff:21:15:b5:7f:ea:13:c7:
83:f1:2e:ed:5b:34:36:ba:78:2d:4c:6d:9c:a5:65:
01:7a:af:23:bd:bd:5c:b7:c6:9f:f9:b4:35:e4:15:
04:99:47:18:7f:6c:ad:da:72:0f:21:83:36:7f:19:
3f:7e:a3:68:54:29:0d:40:a6:fc:c9:a9:58:e9:d7:
34:9f:85:ee:81:3d:9f:09:8d:e6:9c:b5:96:6b:8b:
da:15:7f:4d:99:dd:e5:66:e0:29:74:42:8b:fa:e5:
b1:09:b0:e1:dc:7d:c4:66:45:d7:87:d8:ff:7b:a2:
af:cf:ee:b3:94:97:54:db:c2:79:4c:29:6f:57:cf:
90:75:d1:42:89:57:ad:6d:02:3f:85:7c:37:d7:e6:
25:25:1d:34:52:a0:03:d4:8b:53:28:04:a2:25:e6:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:08:C4:D5:37:52:E2:15:E2:48:0D:E7:FE:21:A0:2F:74:D8:59
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:89:64:43:68:26:e7:55:72:9e:d5:1b:a5:ba:89:b8:14:
1f:f6:87:e5:94:a4:cf:5c:cc:37:8e:3b:1f:12:29:9b:24:f5:
15:43:b2:95:24:9a:04:9d:32:29:28:34:9b:e2:29:4c:57:bd:
0f:61:ad:b4:0a:40:77:b5:41:a7:f1:de:d0:f2:3e:e3:0e:60:
64:3c:8e:32:04:f6:d1:94:30:e0:ad:50:a3:9e:1a:88:92:ec:
c2:13:40:e1:8d:98:30:db:3c:9f:e7:db:27:46:7e:c9:c9:11:
8c:84:bb:c5:14:ce:31:8d:45:78:a7:dc:25:3e:2a:d9:86:5e:
e2:72:27:71:e3:f3:2f:b0:1a:86:53:8f:42:29:01:64:cd:76:
4a:6e:63:e1:e1:2d:f5:51:95:5e:ea:c7:34:2a:42:ef:4c:97:
de:66:9f:35:95:5d:86:cc:b1:f2:f0:95:55:c5:90:12:a7:36:
cb:40:10:88:47:2f:14:9b:10:9f:e5:57:92:26:0c:7b:a8:4b:
e6:1f:a6:fb:f3:42:8d:82:fe:84:bd:bc:d6:cc:c3:0f:3a:09:
b4:7f:05:20:3d:76:de:24:c2:04:3d:cd:68:2e:d1:87:8e:74:
f8:ea:dc:4a:f9:91:8b:cd:f9:09:85:6c:fa:b8:e2:6d:72:8d:
9a:9a:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:30:44 2026 by rpki-client