
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json)
Hash identifier: hpugvdIXmWFn1gGa0l4qwPFNekpNJ+qodVhPM0RQVEI=
Subject key identifier: 8C:B0:72:C0:62:15:24:25:1C:A1:62:F8:C2:CE:B7:6F:67:C7:B7:6C
Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Certificate serial: 07FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
Manifest number: 07F3
Signing time: Tue 28 Jul 2026 21:44:10 +0000
Manifest this update: Tue 28 Jul 2026 21:44:09 +0000
Manifest next update: Tue 04 Aug 2026 21:44:09 +0000
Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: BSM05BdJ12Ibc2rMyhqcUE7e8/54W5Gg+/3mHcKUcbg=)
2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: yYH3PcU0cdRRsZ0s/WXAKj+o8DaLhXORjZzgZMVE1n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Validity
Not Before: Jul 28 21:44:09 2026 GMT
Not After : Aug 4 21:44:09 2026 GMT
Subject: CN=6a6922aa-70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:57:91:a1:b2:52:b5:5c:cb:11:4d:33:c3:
c7:1d:37:91:f4:67:c7:dd:5f:7b:c3:8a:85:8d:46:
11:b2:f4:3f:6a:64:28:28:3a:bd:b5:42:91:77:00:
6c:6f:43:2c:cc:1e:0b:54:b0:09:9f:5c:c5:c3:a1:
19:9d:f2:a0:98:5f:38:7d:38:22:0e:ac:82:9f:2f:
46:e8:86:92:5d:0a:32:b6:70:ee:6e:7c:3c:82:ee:
d3:33:c1:e0:fe:9a:0e:61:7e:86:6d:1b:1c:85:6c:
41:50:49:02:07:d1:a6:f6:09:07:f9:21:cc:74:43:
3c:fe:8f:f6:1a:32:8f:c7:f1:44:5f:6c:74:71:a1:
3c:5a:da:b6:ad:f5:f2:86:ee:d6:bb:ae:42:47:8d:
aa:70:29:53:2f:0e:76:0b:d5:a4:a5:0f:28:07:fd:
7c:71:fd:47:d3:55:b0:a8:2b:e0:18:f6:3f:46:3a:
f0:ae:6e:19:a7:5f:75:af:64:d3:ff:18:b1:3b:f7:
01:7e:52:2a:f1:92:4d:f9:9e:cb:e0:1f:d3:7f:b2:
ae:a2:3a:78:f5:03:a2:33:b2:92:dd:f1:d5:fa:42:
4c:da:81:11:cf:46:3f:97:94:63:dc:04:93:3d:4b:
7d:fb:d9:9b:b7:a0:6a:50:fe:f5:97:e8:9e:db:9a:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:72:C0:62:15:24:25:1C:A1:62:F8:C2:CE:B7:6F:67:C7:B7:6C
X509v3 Authority Key Identifier:
keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:26:16:be:f3:72:6d:e9:8f:5b:99:0d:e2:c3:a9:e8:c5:
5d:7c:38:52:59:08:ab:b0:e7:3c:96:38:56:1a:fb:44:6e:df:
78:92:a1:76:21:c7:b4:de:a6:78:d8:86:24:2f:2e:74:45:ed:
5f:8a:04:c6:a3:72:8b:f3:69:3c:28:6c:19:73:21:69:97:71:
7c:47:90:5e:3e:25:a8:ae:0a:3f:07:c5:50:33:f9:85:2b:46:
3b:63:e5:83:57:02:db:09:3d:63:e9:ac:77:9a:5f:3b:fc:0f:
af:57:a3:f4:6a:2d:59:82:3e:b3:04:40:db:43:9f:48:de:d1:
89:4a:83:18:21:81:aa:b0:73:4a:83:ad:d2:28:3f:37:54:35:
3c:da:e8:50:29:ea:0b:49:e5:d1:23:72:67:fb:4e:cb:d2:6a:
81:33:2b:73:42:f6:07:82:73:44:ca:23:16:aa:92:94:f6:d4:
67:68:a5:2b:b1:46:77:e5:d2:f5:1f:f8:04:9a:af:c4:8e:8f:
a7:19:20:a6:1e:1c:02:4c:b0:72:d9:cc:6e:79:9d:1e:69:63:
42:4b:54:9a:0c:85:b1:5e:16:5d:0e:a5:03:a8:92:1d:16:1a:
1e:d6:43:c8:89:b7:69:a2:2c:a9:4f:67:ca:5b:4d:58:a2:5f:
b8:62:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 04:03:16 2026 by rpki-client