
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: e42rZTm6s7Z8ACOxVQNk+Vap7iqhGReGsNPdP817UhY=
Subject key identifier: 92:0D:E7:A2:9C:2E:6B:00:94:1D:25:BE:20:7B:06:26:AC:CF:B7:86
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 152B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 14F6
Signing time: Tue 04 Aug 2026 16:53:35 +0000
Manifest this update: Tue 04 Aug 2026 16:53:34 +0000
Manifest next update: Tue 11 Aug 2026 16:53:34 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: TqW7QCwUnp89ur2a6JmQsdpUfMN92ngNYYMKrUipROg=)
2: 983A5536450611F093EC3A65C4F9AE02.roa (hash: rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=)
3: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: NqFw3mgMpkOvoVPWGjo2SvS7iIeakeWssWWni91l9EM=)
4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: HdUBPRtbQQrEcIOoId2r+rm38MPN/eH1nuT0g27/Ga8=)
5: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: vb+PgKr3CsY3jfH+MFyFgbnwnwtfBrgXKUjCdpIDvJ8=)
6: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=)
7: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: 4Ydikq6YDNqhVsd3RsOKhT3gtOyRUGklOgVJco/t5aw=)
8: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: jZuSh+WR7sCoYoKT4uhJCvNVaW6YZAz1ccOdtL1PD1o=)
9: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: LLmj75OnEITMWNmTNzFRCr8M2iJFtW1A7GWU5CHlz+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 16:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5419 (0x152b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Aug 4 16:53:34 2026 GMT
Not After : Aug 11 16:53:34 2026 GMT
Subject: CN=6a72190f-7d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:84:44:9e:ff:7e:03:3c:83:1e:fa:01:c4:
ec:60:53:40:e2:7a:64:4a:35:45:9a:5a:b7:25:24:
cf:35:9f:79:0b:2f:27:83:80:47:a9:44:93:93:61:
0c:08:07:94:d3:99:a7:17:5e:bd:b5:bf:50:94:22:
af:18:54:63:da:18:a9:df:9d:3a:14:e7:07:13:36:
ec:65:30:4f:19:36:45:96:1f:0c:0f:dc:58:96:ee:
b0:92:4a:2c:ff:b0:60:9e:9e:cd:0b:f8:22:7c:c7:
5c:79:16:75:9e:f1:b8:70:54:1a:a7:8d:15:a0:dd:
10:12:04:32:09:8f:51:00:9f:61:fc:18:17:7a:10:
06:2c:46:ff:69:78:30:16:0d:7b:f9:49:60:3c:a5:
e9:43:36:71:eb:f5:71:23:ce:61:33:f5:22:20:6b:
92:52:41:30:c9:ec:f7:52:18:af:a4:35:ec:73:36:
aa:6f:12:e4:8e:a9:59:63:bc:38:e0:38:1f:f7:1b:
e9:9c:2f:4d:54:86:e1:9b:d3:65:51:32:c2:a0:b8:
83:b1:48:d7:68:5d:fe:79:b1:9f:fc:b5:52:d4:ce:
cc:e5:d6:5b:ca:83:a6:5a:60:36:a3:b1:2b:e2:6a:
ae:e1:02:a6:0c:e5:e1:68:d3:33:1d:f9:7c:5f:4c:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:E7:A2:9C:2E:6B:00:94:1D:25:BE:20:7B:06:26:AC:CF:B7:86
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:ea:3e:0b:6b:59:0e:ef:b3:f8:ff:14:42:93:f5:4a:bd:
83:14:4b:62:21:03:2a:0c:af:b0:d8:69:52:8b:56:53:9b:8d:
b8:5b:d2:41:21:cc:26:b9:d0:b9:fd:db:3d:18:65:d3:c3:15:
33:25:b3:85:92:fa:c8:d3:9b:5c:84:74:82:09:9b:b6:d4:c1:
61:21:dc:74:c4:9f:94:fa:24:5f:af:ce:ab:0c:3e:e3:1e:97:
20:7f:b2:09:2b:32:05:cc:c3:86:46:16:c5:52:21:ea:c9:f7:
3c:d1:5c:da:27:02:9f:02:c1:a2:44:70:d9:7b:6c:99:32:0f:
ff:68:66:ce:c3:c2:dd:84:c7:39:78:1e:51:6a:1d:06:aa:72:
fe:2f:cb:41:02:84:ed:0f:70:7a:68:a0:f3:7b:5a:f8:c6:5e:
a7:75:f3:1c:26:d6:6a:e8:e4:b4:ad:78:ef:a1:a9:9d:41:7e:
43:24:22:a4:ce:39:a1:70:18:0b:c6:f1:57:fb:fe:fc:d5:24:
a0:bc:39:d5:1b:c2:44:12:da:1b:f6:12:03:93:38:47:71:e2:
4b:71:5f:a1:cb:f6:33:cd:ea:e3:44:17:41:8a:51:bc:47:27:
e3:bf:16:64:65:25:94:3e:b8:58:8f:28:03:51:bb:95:fb:21:
fd:7e:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 15:05:52 2026 by rpki-client