
$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json)
Hash identifier: a0oPThN1fHn+H6NfpxM0csSJmFXocRyY+2M9jQryEoo=
Subject key identifier: 7A:05:E7:7B:D9:37:F4:E3:B0:C8:32:16:4B:DC:79:89:C5:5C:05:30
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial: 18F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
Manifest number: 18DC
Signing time: Mon 20 Jul 2026 16:35:00 +0000
Manifest this update: Mon 20 Jul 2026 16:34:59 +0000
Manifest next update: Mon 27 Jul 2026 16:34:59 +0000
Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: JrhYeLIaKQPkj0SYe1jv/Lq/EqMyD8Mxu6qs1IVcGJ4=)
2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: f8X+npi+JLQaJzm85+PGyFP1DtvAuywwMt9O4+IYXEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6385 (0x18f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Validity
Not Before: Jul 20 16:34:59 2026 GMT
Not After : Jul 27 16:34:59 2026 GMT
Subject: CN=6a5e4e34-a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:e9:52:5d:6d:cc:62:0c:02:f6:0e:7e:32:
56:6b:47:b0:4f:5a:c9:2d:ab:0a:00:61:f9:a1:c0:
41:ff:16:d8:30:a3:2e:e9:4f:fe:90:4e:f3:e1:6c:
8f:9f:ee:31:df:8d:65:0f:8e:69:47:09:7d:3a:6f:
c2:3d:d7:e0:ec:c2:f9:d0:ab:3b:89:46:69:d7:9e:
bb:86:58:83:a3:06:04:7c:9b:15:fa:bc:6e:c3:f1:
d0:32:42:95:42:33:6c:61:a9:43:e0:6c:fd:a5:26:
87:b2:6a:97:51:78:24:c7:91:d6:b7:42:f4:1c:74:
fc:43:f2:08:cd:84:40:0e:02:01:a1:a3:83:2c:e3:
4b:b7:48:1a:24:c0:a5:1c:1c:b7:45:f4:67:30:cb:
31:52:e7:11:da:ce:e8:32:3a:cf:65:aa:16:aa:5d:
cf:02:02:89:8e:0d:d3:65:95:c8:80:27:48:da:55:
4b:ce:f2:aa:3d:a2:8c:38:6a:f3:8e:22:d8:2b:1b:
ee:03:be:64:ed:3b:07:89:df:c2:c7:2e:4d:73:5f:
54:b1:43:71:e7:3b:4f:c1:28:34:93:91:b5:db:9e:
6b:77:ef:6d:8c:ae:17:2b:32:08:30:c3:69:4e:6f:
f0:db:52:92:2c:dd:ff:fc:aa:71:f3:80:e6:e8:e3:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:E7:7B:D9:37:F4:E3:B0:C8:32:16:4B:DC:79:89:C5:5C:05:30
X509v3 Authority Key Identifier:
keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1d:16:b3:48:06:93:2c:c6:18:2e:c3:88:14:96:fd:4f:70:
b2:a9:9f:70:15:22:71:1c:50:ec:fa:a2:8e:28:5e:1a:b7:61:
eb:93:59:67:9d:2c:6e:6e:b8:ac:0b:58:19:4b:12:ed:1c:2d:
35:4e:ad:42:6f:ff:db:29:6c:7c:00:4d:25:cc:3e:ab:61:dd:
0c:fc:1b:2d:88:79:dd:82:16:ad:5e:16:1a:e3:38:2e:5d:b0:
d4:b2:c2:e4:33:02:a8:c1:19:fc:d2:35:76:85:04:4b:7f:ff:
7a:05:18:c7:0d:14:67:e6:bd:2a:ba:a4:c2:e8:60:c2:c7:ee:
97:ea:59:0c:db:ff:64:e4:bb:5b:a3:33:db:89:c3:91:74:69:
f3:95:eb:48:a5:5a:34:03:a4:aa:c9:c3:9e:dd:f8:78:7f:5b:
58:3e:91:6e:15:20:64:a7:49:a6:2c:61:9e:21:44:8b:3d:a0:
03:a0:7c:45:c7:f8:ff:a3:5d:2b:bc:71:1c:8b:d3:73:f6:aa:
5e:1a:20:5d:bb:cd:10:af:50:68:f6:9f:19:81:09:34:aa:2c:
d9:0c:9e:b3:f0:fd:5e:6b:70:35:fb:dc:0a:ff:e8:58:f4:66:
52:b9:9d:03:88:30:c8:78:28:00:b7:b3:b4:cc:60:12:3b:1d:
ef:07:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:49 2026 by rpki-client