
$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: JhW/l+9I/9jhwrdCnJz+ttg6txnoM7PBUQmw1PqM7KY=
Subject key identifier: A9:A9:AE:F9:B1:BF:6F:07:B9:09:2C:AF:5B:92:81:FE:01:62:6B:DF
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C7D
Signing time: Tue 18 Aug 2026 18:55:35 +0000
Manifest this update: Tue 18 Aug 2026 18:55:34 +0000
Manifest next update: Tue 25 Aug 2026 18:55:34 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: ZczSy1X5ZNONtrEyhIaYAjNvuMhWvv6MgRVJFMTsy5A=)
2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3220 (0xc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Aug 18 18:55:34 2026 GMT
Not After : Aug 25 18:55:34 2026 GMT
Subject: CN=6a84aaa7-95a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:27:4a:76:2c:1f:28:65:d9:ec:82:4c:e9:
46:bd:6a:7b:b0:f6:d6:d8:3b:b0:1e:b1:95:1f:63:
ed:9e:09:58:ee:fe:1e:cc:5c:a6:e6:83:02:63:56:
35:68:ce:10:de:d8:28:e7:d9:1d:d2:a1:9d:59:ef:
94:b3:ad:9d:8b:a7:df:63:cc:b1:47:ff:92:b1:01:
2a:8d:2e:83:54:9f:eb:b4:9a:77:d7:87:90:c0:19:
a2:d1:aa:78:ed:c3:e2:83:d7:0d:ac:af:b6:bb:14:
88:2c:2b:1c:ee:0b:98:34:96:5a:94:3c:16:ba:9f:
e7:83:7c:ca:b0:f4:6b:11:f7:3b:2c:ae:54:e4:35:
ae:03:19:ac:c8:e8:72:0f:c5:3d:b4:ae:a9:bc:63:
22:0f:3d:4e:a6:ec:84:31:a1:8f:00:ef:28:39:f4:
54:db:69:b5:64:7b:50:c6:ad:2d:ae:ff:02:b4:5e:
d8:bf:61:15:eb:6b:ec:37:5a:e4:f8:0f:f3:56:d7:
42:4a:89:ee:3c:91:81:72:aa:ad:fc:d9:5f:61:04:
77:c8:33:7f:d7:6a:16:ef:e3:55:56:8c:d2:fb:14:
43:1b:f5:42:4b:52:58:ad:d0:28:03:2a:f6:88:5b:
8a:82:5c:b8:c7:1f:9a:bf:5f:cf:a9:af:f7:6c:a9:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:AE:F9:B1:BF:6F:07:B9:09:2C:AF:5B:92:81:FE:01:62:6B:DF
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:32:fc:d9:dd:96:fe:83:6a:a7:c6:9f:e1:90:ce:23:ac:
63:a2:c1:e3:49:f1:59:63:66:28:f6:d3:f8:b5:3e:22:30:39:
e3:a6:bb:46:67:9a:e8:45:c0:fc:92:fe:e3:83:07:a2:37:4d:
17:6d:bf:fb:34:d9:ca:c8:cd:6f:d4:3f:fb:87:1d:45:ba:5b:
fd:da:9d:f5:71:63:b7:1c:93:06:cd:c0:54:5a:e5:ab:a8:b5:
cb:4c:2b:81:bc:44:aa:b5:88:26:0b:20:c0:55:73:47:91:c5:
7f:ea:0d:38:48:48:2c:40:53:59:ec:6d:e1:dc:40:b3:1b:d3:
1c:50:be:e2:76:55:38:ad:4b:b0:af:dc:f9:48:94:ab:16:90:
bd:15:15:5f:d6:26:ce:d8:69:27:66:99:71:3b:0d:1a:bd:60:
92:1f:b0:20:ba:23:9c:a2:8d:00:d8:e0:03:3b:5b:f8:e0:5d:
48:fd:44:22:e0:c3:36:11:6d:b5:0d:90:a3:2b:be:a0:b5:cb:
9d:98:56:8b:98:8a:36:94:33:98:b3:64:83:e3:ac:89:1e:ed:
5d:ec:f5:d9:4c:03:e4:0f:12:a9:2a:2c:c1:1d:07:8b:c3:eb:
b3:7b:c9:ea:36:19:22:0b:ef:fb:4f:83:ad:a5:28:57:9d:89:
7a:11:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:58 2026 by rpki-client