
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier: q+n1i65oGw6o2pzym5kAFzzyPW01FGztxBmBK1ss6xo=
Subject key identifier: 75:89:1E:92:74:1C:1B:89:D9:90:2E:7C:F6:74:50:18:52:2F:CE:34
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial: 090A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number: 08FB
Signing time: Tue 18 Aug 2026 20:38:51 +0000
Manifest this update: Tue 18 Aug 2026 20:38:50 +0000
Manifest next update: Tue 25 Aug 2026 20:38:50 +0000
Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: Q5LbydgrhG1H1aQxxgfhCDOmVLNEVxhhzLKmVZkCjyI=)
2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=)
3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Validity
Not Before: Aug 18 20:38:50 2026 GMT
Not After : Aug 25 20:38:50 2026 GMT
Subject: CN=6a84c2db-8a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:49:74:97:57:c4:f1:24:d4:2a:b3:dd:3e:
10:3d:48:c6:6b:fe:3b:ab:3e:56:23:eb:4f:48:10:
4c:01:e4:ac:04:31:e8:13:d1:ac:13:c8:33:c2:43:
ea:3c:77:05:64:21:7f:34:8f:dc:3e:90:1c:99:0e:
b3:67:c0:76:8c:c2:c9:14:06:4e:d2:62:8c:85:8c:
3c:ed:12:98:e2:ea:df:82:c3:9c:93:f0:d8:7a:c7:
29:d6:87:50:33:1d:e5:59:dc:11:5b:ac:14:e9:ef:
d8:80:15:61:15:17:c7:a5:35:e4:a2:0b:d9:f2:6a:
79:4d:fe:eb:ef:e4:a5:cc:b5:a6:24:a0:50:35:f1:
ec:ad:7d:61:de:f7:7b:a9:8d:21:ea:9f:ce:69:90:
e4:44:f5:c2:87:0b:4c:0d:f8:eb:de:9e:9a:5c:de:
13:33:e2:d2:9e:62:af:86:e8:a5:2b:30:53:21:90:
a9:6e:2d:70:f8:04:b6:94:03:da:aa:e6:56:82:7b:
51:c9:1a:66:fc:c4:8f:df:6f:a0:68:24:5d:21:b1:
3c:44:31:8d:48:13:b9:6e:ae:42:d6:5a:bb:68:63:
19:e0:2a:54:9b:de:75:9b:16:be:61:f4:84:ae:e8:
39:9f:75:4b:0d:5a:f4:0c:dc:c9:80:89:78:11:3d:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:1E:92:74:1C:1B:89:D9:90:2E:7C:F6:74:50:18:52:2F:CE:34
X509v3 Authority Key Identifier:
keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:91:aa:d1:b4:20:20:29:34:1a:b9:46:0e:03:66:d0:12:
ee:75:45:f9:4f:82:ed:da:dd:20:5e:e9:e7:bc:cb:63:b3:ce:
72:14:0f:ab:37:f3:65:e0:02:7a:e7:10:83:bb:27:67:29:ee:
67:04:a8:16:ad:5c:6f:7e:dc:06:4b:a9:5b:0d:02:bb:de:70:
1d:8b:11:61:31:02:54:2f:fd:8d:17:6e:da:a6:35:27:a1:8f:
5e:6c:05:26:25:f9:83:8b:51:f1:4f:f3:aa:3e:c9:97:29:97:
12:42:6f:1d:ef:48:b9:ca:1a:80:46:03:73:d7:d2:c1:c1:ce:
8b:9f:98:1c:13:ef:29:48:20:0d:b4:71:3b:21:01:f0:45:ba:
3a:77:f3:06:d7:74:31:5a:b7:fd:9f:af:4c:1e:05:b5:38:8f:
f0:1f:4b:91:28:fc:e9:43:26:cf:da:66:6c:78:e2:0e:7c:61:
8e:dd:4c:00:74:7c:df:a9:6f:2e:39:0b:9e:bf:f1:81:9f:9f:
22:64:f1:d8:25:ff:d8:58:58:47:e9:9b:c4:5a:be:4a:4b:4a:
ed:f6:7a:9a:41:7d:ad:dc:9d:30:b8:c2:18:34:e5:83:c1:71:
69:aa:13:c9:81:cb:18:16:ed:a4:e9:15:02:1f:c3:b9:e7:d6:
3c:09:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:59:07 2026 by rpki-client