
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier: Ab8KyhEzRFOsMuPn5Aw7Gjn6+dA+moOuDxvAb0d7rcE=
Subject key identifier: 47:C7:B7:9C:59:34:85:03:E7:A7:E9:80:23:36:DA:35:90:B6:8B:8E
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number: 020A
Signing time: Thu 21 May 2026 03:07:10 +0000
Manifest this update: Thu 21 May 2026 03:07:10 +0000
Manifest next update: Thu 28 May 2026 03:07:10 +0000
Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: z4IuVAanBeQinA+eZD8IOXAkXHJNSzCsfS+hsTrloBw=)
2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: YLQ7yflAgMKuFttC7CpmBZs+3zOwW6N2rvXK4lKqfAw=)
3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: nh4J30ldV6euRi2gtjyBB84BcovSsS6aKNr/8qxVkj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Validity
Not Before: May 21 03:07:10 2026 GMT
Not After : May 28 03:07:10 2026 GMT
Subject: CN=6a0e76de-dcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:1a:c5:4f:20:31:c2:05:e0:2c:ca:eb:15:
b3:f9:a0:78:81:b0:6a:a6:1c:4c:5c:bf:6f:f0:c2:
2f:c6:a1:27:9d:78:88:1e:e2:b3:9d:7f:6c:5e:fa:
ea:62:3c:13:aa:eb:e5:50:2a:55:e7:da:e5:9f:98:
22:76:e0:5e:41:d1:4f:e9:03:43:b6:9c:e3:7b:20:
00:db:07:3d:6a:77:bc:2c:ae:77:0f:f8:15:32:f1:
09:78:fc:cc:f9:4e:42:83:a4:ce:73:06:dd:70:7b:
b6:ed:f4:34:52:6a:78:49:18:3d:53:d0:a7:39:0b:
5d:2d:a1:7d:4a:d4:3b:73:0e:21:3f:40:25:a4:ac:
77:bc:a2:64:e4:46:91:c0:e9:b2:30:ea:fb:1d:dd:
ab:83:ee:aa:39:c4:71:b6:4e:e4:06:f0:60:ab:b6:
e5:0e:cd:c8:0c:0b:c4:cf:fd:8d:50:03:d6:29:95:
bc:a8:50:3e:e6:77:ea:a6:02:c0:5d:12:aa:b1:e1:
01:6b:5c:8d:f6:d4:75:21:02:b0:96:3b:b9:b7:36:
5a:22:09:5b:68:26:15:89:10:c4:53:eb:81:1f:25:
68:a4:3b:fe:06:cd:17:fb:0a:05:fc:41:d0:8c:80:
96:f2:b9:bf:09:50:ee:cb:08:09:7d:4b:11:a7:ea:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:B7:9C:59:34:85:03:E7:A7:E9:80:23:36:DA:35:90:B6:8B:8E
X509v3 Authority Key Identifier:
keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:bb:89:a3:b7:85:19:8a:01:f5:f0:fa:ab:27:39:16:2e:
81:27:fd:48:56:32:8f:8d:7c:60:16:3e:b9:b5:8b:fd:d2:b3:
5e:a3:87:eb:d3:97:47:a7:f3:41:d9:f5:5b:fb:34:e9:56:65:
d5:53:f7:5a:48:ca:0f:88:95:05:ab:cb:f7:9c:e7:cf:4a:96:
35:59:da:44:60:f3:45:2e:02:8f:d6:49:6c:23:62:19:1f:fd:
e8:71:db:98:5d:e9:35:6f:23:7d:25:38:74:78:bc:a3:aa:74:
d4:04:ab:16:78:0d:95:0d:35:23:7f:0c:88:e7:2e:c7:b9:a5:
78:f1:9f:7a:4a:03:ac:70:ed:a1:8b:dc:27:45:ff:09:be:f1:
c6:81:31:85:c7:cf:1f:15:2b:dc:3f:ea:ef:0f:3d:5b:09:32:
49:4d:37:4e:a3:b8:b8:aa:90:a9:ff:bd:d4:b1:3e:47:9b:82:
5e:05:65:67:9b:2f:0c:30:7d:ad:60:ef:00:6c:35:6a:b5:af:
ca:68:4d:7d:9a:c9:84:e3:5c:6a:53:83:c8:90:8b:1f:ce:ce:
14:f2:e3:55:67:7b:b9:67:dd:34:ba:57:cf:5e:6a:24:84:8a:
23:55:a4:b3:d0:63:e0:91:72:1a:3d:74:2b:bd:32:da:0b:f8:
9a:f8:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:14:19 2026 by rpki-client