
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
File: 05gN65FABIn5D_5q7xfErdhrEh0.mft (raw, json)
Hash identifier: ta3R98c1iyiREad5eP4hPVnDYirJs9Bpz2foHN2If0E=
Subject key identifier: 49:B1:E7:E3:89:35:BF:41:E9:71:21:E8:95:BB:1D:72:82:6F:0F:4C
Authority key identifier: D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
Certificate issuer: /CN=A916D6BA/serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
Manifest number: 1F
Signing time: Tue 07 Jul 2026 10:11:59 +0000
Manifest this update: Tue 07 Jul 2026 10:11:59 +0000
Manifest next update: Tue 14 Jul 2026 10:11:59 +0000
Files and hashes: 1: 05gN65FABIn5D_5q7xfErdhrEh0.crl (hash: CtlDj6JiAta9a9UAzCQDcdDTjCcxL+FvyYv0uhJgBag=)
2: 990DC3124B5E11F1A334296EAF833773.roa (hash: ZrU1yEE9T1CVij7RmKAnUigJhTMs5XRxyKi/FLpZjq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl
rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6BA, serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Validity
Not Before: Jul 7 10:11:59 2026 GMT
Not After : Jul 14 10:11:59 2026 GMT
Subject: CN=6a4cd0ef-d693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:b8:76:ea:98:32:b3:1d:1c:7a:3b:9f:2c:
32:d3:5e:28:1c:db:21:d3:c0:f7:16:90:f5:0c:f8:
29:93:57:66:a0:0f:ed:4b:da:e4:af:07:9b:e2:90:
e1:b0:1c:8c:58:cc:9f:7d:17:51:68:09:a2:29:5b:
7d:ba:80:62:11:d6:70:9d:8e:99:33:76:8a:b7:d7:
49:61:97:b0:f5:d8:77:db:c3:60:6c:36:5f:7d:6d:
f8:3a:45:61:7c:5b:9c:0e:31:a7:4c:87:cc:99:a9:
6f:81:08:b1:14:50:17:ac:ab:b7:63:b6:d5:33:48:
64:ca:fc:0f:03:19:34:a5:2e:5e:d5:c5:be:95:96:
18:e2:60:9a:42:73:d3:c0:54:83:4d:1f:9a:68:7f:
67:20:40:8b:6f:44:c4:31:1d:96:fb:b5:57:e9:08:
f2:fa:04:98:49:5e:2c:0f:65:70:85:17:9a:9a:37:
ea:7e:55:f5:33:a6:86:f2:c9:33:fd:28:72:b0:4e:
2b:27:aa:4e:3c:2b:17:16:4b:a0:b6:02:6f:b6:c2:
9c:28:cb:8b:a4:34:5f:41:f6:a3:83:ee:a9:d5:cc:
1c:72:75:62:68:7b:45:e2:85:6a:0e:a9:29:5f:92:
d4:b1:4c:b2:1e:3a:9d:1d:3f:c8:a6:17:d0:6c:5d:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:E7:E3:89:35:BF:41:E9:71:21:E8:95:BB:1D:72:82:6F:0F:4C
X509v3 Authority Key Identifier:
keyid:D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bb:39:d5:8c:6d:97:2e:7a:95:58:67:f7:70:59:ea:21:04:
ac:54:ef:cc:dd:16:70:0b:be:42:27:7b:e7:7e:7f:d0:b2:fb:
ea:42:be:96:c0:5f:9f:73:ed:9c:ba:32:f0:33:3e:bd:13:60:
a8:39:a2:40:06:30:95:21:22:b2:d5:b3:9c:3f:4d:e4:c0:f5:
01:09:33:39:32:5f:f6:d0:fd:38:94:65:0b:6f:22:fd:24:4c:
c2:3f:8d:f1:82:9f:85:42:89:3a:8f:48:aa:c0:86:22:d8:10:
3b:db:b9:87:50:1d:c2:62:7e:3b:0f:c8:45:f7:f4:e6:27:4b:
cd:2d:97:e5:ed:1f:00:d6:6b:f9:35:22:11:c3:99:64:40:3f:
34:77:6d:ab:88:49:81:e5:ba:da:23:dc:69:7b:b0:a0:cf:72:
bb:d4:42:e5:4e:eb:39:ea:f6:69:7d:79:13:ea:88:04:a9:71:
5e:ee:fd:43:41:49:96:18:f8:d2:2d:3b:6a:09:7c:72:92:48:
59:20:e2:76:fa:71:bc:9f:aa:c8:64:8e:98:60:d4:9a:03:ae:
3e:6b:c1:ca:f4:5b:5b:e1:14:2d:24:c9:98:ec:52:29:fd:56:
ff:93:1c:be:84:de:4c:54:49:c7:de:f9:f1:24:c5:43:dc:55:
89:18:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:35 2026 by rpki-client