
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json)
Hash identifier: xoDrWE5ijXbVCt+B/VYjFhyMNeesrnPRxh0SFJjt1iM=
Subject key identifier: 09:F7:CE:A3:A9:22:AB:8D:4E:4D:7E:F4:36:91:A5:6A:E6:7A:56:D6
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
Manifest number: 26
Signing time: Fri 17 Jul 2026 10:09:16 +0000
Manifest this update: Fri 17 Jul 2026 10:09:16 +0000
Manifest next update: Fri 24 Jul 2026 10:09:16 +0000
Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: 9je//Q12MFeGPNQjicUE/9ebu1Pu/EMb09iw8Ps+jDM=)
2: A66886B4491F11F193C776FB9E833773.roa (hash: AM5l48c14FagzjhiVljacWktMvN3ORmA7Ru/n9zKl8c=)
3: A6F2C5C2491F11F193C776FB9E833773.roa (hash: UYXcv3ua2KvUcQTw3hjviZWaO6Oocz7OB4734PgJciM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: Jul 17 10:09:16 2026 GMT
Not After : Jul 24 10:09:16 2026 GMT
Subject: CN=6a59ff4c-a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:72:f2:33:66:85:4a:79:60:a4:7a:50:ab:
50:9e:40:35:5d:f3:6b:fd:16:a5:16:9f:6b:29:f6:
c9:e3:73:44:e3:4a:ba:10:1d:9a:de:7c:22:ea:7b:
d4:42:d7:22:4b:7b:2f:db:bb:cc:8a:12:bc:05:a4:
f0:66:a9:61:d3:d8:b4:d4:a2:5b:0c:e9:2d:0f:13:
18:88:9c:0e:ab:4f:65:ff:b7:3c:72:cb:95:60:22:
a3:17:3c:c4:9f:45:8d:26:c7:ea:0f:0c:45:18:ea:
85:d3:82:77:5a:7e:a6:78:fe:43:f9:2e:3f:17:77:
41:1c:22:39:06:11:98:85:55:3b:53:27:3f:29:ef:
41:58:cf:81:94:ef:1d:da:66:65:d3:8a:c5:52:e2:
1b:c4:b8:36:dc:11:45:4c:c0:a0:0c:c7:80:86:6f:
5c:27:4c:87:b5:78:4e:8f:05:7d:e5:0b:8c:d5:b4:
46:59:26:68:61:87:83:86:5b:e8:61:0a:f8:4d:c3:
88:9f:08:42:a1:36:f0:1e:bc:48:6b:d4:88:5b:fb:
1d:a2:11:9b:3e:75:e7:54:aa:51:06:4d:f7:5b:19:
f6:dd:da:af:2b:da:23:f3:bc:62:4e:ae:88:26:66:
a9:e4:32:80:ad:70:bb:7f:aa:cf:e2:f8:82:9d:c9:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:CE:A3:A9:22:AB:8D:4E:4D:7E:F4:36:91:A5:6A:E6:7A:56:D6
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e5:df:cc:47:4c:f6:6e:3a:0c:30:cd:56:e2:e0:b9:f0:49:
a1:48:1f:2f:64:2f:73:1f:3c:56:35:79:5f:bd:49:85:99:22:
98:ed:77:7c:92:dc:98:97:39:4f:dc:07:70:7b:8e:80:62:01:
28:68:42:69:59:05:fd:47:d0:90:66:26:8f:03:4c:3f:57:af:
10:f7:01:cd:61:7f:6f:0c:ed:1b:f3:8f:dd:9d:91:5d:3c:2f:
f7:12:bf:c7:af:b1:d9:d0:07:47:6e:93:1b:e9:5b:67:d9:bf:
08:a3:f5:14:84:54:8c:47:5f:ee:5a:5e:77:0c:f3:ce:94:20:
89:08:05:11:e2:0f:b5:d9:b3:10:af:f8:ec:ba:8b:2b:7e:3f:
85:ad:fa:c9:79:19:c5:91:f8:8f:0c:26:e9:2b:f2:2f:d4:c5:
b6:da:23:ce:bb:aa:20:19:2c:17:49:b4:b0:9e:6a:a6:66:45:
6c:15:c9:ce:24:ba:b7:d3:f5:ba:e1:9f:0f:0f:ce:c3:62:0d:
8e:d4:6e:ee:2e:1c:2d:0d:76:aa:59:d8:67:b3:32:a6:82:a3:
44:ff:dc:8e:6f:41:3d:43:51:ff:21:e9:0f:81:a1:9d:b7:b4:
5f:f4:59:df:58:b7:f2:14:01:37:7e:7b:15:7c:a2:70:56:cf:
f0:5b:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:00 2026 by rpki-client