
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier: mmcLbpmt9DKgkhk1BIfhUX9fMzfhSeSfK5ZmuHS7AIk=
Subject key identifier: 20:71:CE:37:D6:76:35:F7:4A:DB:35:37:A3:93:93:1C:E1:FC:42:1F
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number: 07A6
Signing time: Sat 20 Jun 2026 21:26:29 +0000
Manifest this update: Sat 20 Jun 2026 21:26:29 +0000
Manifest next update: Sat 27 Jun 2026 21:26:29 +0000
Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: wuP35t9Oecw+k1ClnH384PHiZWn18KQxkQ5dYjNpsIM=)
2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 21:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Validity
Not Before: Jun 20 21:26:29 2026 GMT
Not After : Jun 27 21:26:29 2026 GMT
Subject: CN=6a370585-435f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:c5:c4:35:0b:9b:73:2b:17:f4:62:ab:f9:
f0:d3:e4:76:25:63:2e:fe:b1:a2:c0:28:e2:28:29:
e3:48:89:56:bb:b6:f8:ec:a1:d0:56:8a:3a:6a:fa:
0a:d5:aa:d1:28:93:44:ee:2b:67:79:e2:7b:d5:d2:
af:92:92:6f:2f:05:f6:7a:f9:ca:af:47:a2:c0:b6:
16:57:3d:fb:c4:1d:05:36:f8:e9:9b:48:ca:8a:eb:
6e:2e:d1:9a:f8:59:87:36:55:46:93:f2:18:61:e5:
ac:ff:1a:60:99:65:d7:24:9b:9a:6a:0e:4f:2f:9e:
2a:c3:82:7f:f1:f4:f6:78:4a:d4:0b:8d:af:11:7b:
02:2e:09:d5:28:d7:49:12:27:35:d1:f9:e6:2e:c4:
e8:ef:9f:cd:0a:1a:c0:ef:88:e6:94:6d:29:9c:49:
50:4f:8b:13:81:bf:3b:01:4d:91:45:c2:c4:0d:6a:
d7:3e:00:3b:26:a6:47:29:d9:6e:dd:dd:5c:da:6a:
08:3b:6d:78:b7:68:bb:e5:14:dd:61:a8:11:fc:90:
79:37:c3:84:a0:cc:7d:61:47:67:52:14:af:39:ed:
3d:ec:9e:46:aa:c1:a5:48:ac:d8:1c:1e:bc:47:78:
75:ce:bc:21:c3:b7:9b:a3:5c:b5:5c:85:34:19:f8:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:CE:37:D6:76:35:F7:4A:DB:35:37:A3:93:93:1C:E1:FC:42:1F
X509v3 Authority Key Identifier:
keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:63:84:1c:be:ee:41:45:7c:3e:6c:7f:d6:f9:77:2c:8e:
1e:23:19:53:28:28:aa:7d:86:9c:27:cf:cb:84:9e:b8:9b:9f:
fc:9c:4f:38:e2:e2:eb:a6:14:f5:1b:66:91:83:b6:29:44:f1:
88:3e:19:6f:97:29:76:74:66:41:33:70:56:d7:d9:e1:06:99:
e3:98:bd:82:2b:b7:e9:19:1e:a0:40:71:41:5b:74:75:54:32:
b9:3a:4b:32:81:34:81:b9:cc:dc:73:6a:69:68:ed:79:dd:2f:
2c:06:1d:4e:88:d7:e7:51:69:56:22:fe:8d:91:8d:15:75:b1:
34:e0:c5:ba:a8:04:7d:ff:48:0e:c4:36:fb:38:ce:04:e1:08:
57:c6:e7:b8:1a:b5:88:54:6a:dd:99:5a:56:f7:8e:0b:a1:22:
d6:3d:f5:df:0d:2d:c9:5c:55:6c:bd:de:e8:c2:7e:ec:c4:72:
8b:eb:5c:67:62:79:cf:11:71:74:e6:1d:97:ad:30:65:f4:b1:
fc:a6:11:bf:a7:8f:cb:49:2d:fb:af:b1:37:69:16:57:51:f0:
ed:2d:9a:3b:74:5c:6c:f1:b7:43:50:96:23:46:d1:10:c1:e7:
00:c0:7e:27:5d:3e:9a:49:8d:9e:d7:bd:37:9b:50:f4:d0:11:
a6:ab:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:38:25 2026 by rpki-client