
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
File: -mtidXvK1FesoHClHEgItLfJM3A.mft (raw, json)
Hash identifier: GM8tW4EFrbT0rrp3xCgx3TW6duAI/2KeXEor7J3lq4o=
Subject key identifier: 85:C8:2D:77:05:C8:32:F4:F8:C6:C2:A5:79:D6:2B:68:08:FE:61:30
Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
Manifest number: 59
Signing time: Wed 19 Aug 2026 08:56:23 +0000
Manifest this update: Wed 19 Aug 2026 08:56:23 +0000
Manifest next update: Wed 26 Aug 2026 08:56:23 +0000
Files and hashes: 1: -mtidXvK1FesoHClHEgItLfJM3A.crl (hash: uC3H24RDeW2b2GgkRWGHoqe03sqt4b6pa+GzbuluQQ8=)
2: 824F8AD0187711F1AF6111A7363D8C67.roa (hash: OrnpOdJKnCgLpJvnuyIAECeq3kEpUYn5ubA/jjG/jvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Validity
Not Before: Aug 19 08:56:23 2026 GMT
Not After : Aug 26 08:56:23 2026 GMT
Subject: CN=6a856fb7-fdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:98:eb:f2:96:da:ae:ae:99:71:52:20:53:96:
1c:7f:a8:fb:09:b0:99:52:f7:f9:8b:bb:d8:cb:21:
2b:a6:c1:f9:4d:f9:58:9f:fd:28:c5:56:c6:c7:e3:
5b:91:7a:74:e6:73:a2:10:36:5b:e3:8c:a4:60:d3:
90:df:96:65:73:a0:c3:7c:d3:42:f4:3d:98:ec:c3:
41:48:33:71:f2:46:bf:83:f0:17:0e:17:5c:14:58:
5f:5f:04:cd:6b:1b:36:be:35:1d:23:10:96:3a:61:
12:87:dd:88:73:89:1e:ef:46:99:fd:cf:7c:f0:b3:
60:cc:21:77:0c:93:4e:66:31:83:3b:19:f5:a8:33:
49:49:6e:d6:90:47:a1:20:24:6d:40:2b:8f:be:c9:
0a:a5:aa:0b:3a:c4:cb:fe:3d:aa:1a:f5:04:fa:60:
70:ef:a5:7e:95:b2:7b:fc:5a:cb:17:ec:a1:e7:3e:
09:af:af:b3:5a:bd:c4:d3:28:29:0f:60:94:32:ed:
8e:31:82:49:31:10:6a:b2:41:85:38:fa:40:f0:26:
04:3c:05:8c:88:6c:eb:8a:53:1d:b7:8c:02:4b:62:
f2:92:11:d8:a9:67:bc:81:9c:5b:1c:61:12:23:4d:
5a:6a:09:5a:6f:1a:16:65:db:03:1a:36:fb:68:65:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:2D:77:05:C8:32:F4:F8:C6:C2:A5:79:D6:2B:68:08:FE:61:30
X509v3 Authority Key Identifier:
keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:89:10:59:f2:d8:fd:e3:f4:ac:e1:3e:60:94:37:c6:7f:71:
56:38:1a:af:f1:07:ff:3d:80:27:39:3a:68:87:4b:c4:92:2f:
fc:26:bc:e4:b9:ca:0e:f6:61:3c:bf:0f:67:82:5f:eb:f2:4b:
0e:74:fb:58:56:38:f4:af:3e:c1:12:92:01:4c:9b:c2:7f:4d:
1a:54:94:36:be:0d:d7:59:de:2c:ee:fc:89:65:c7:a2:e8:82:
d4:28:cd:e3:29:fa:41:c2:d1:2f:8d:85:4f:7f:f8:81:b3:a0:
79:84:c2:be:77:d3:e7:2e:17:46:7d:02:b5:22:10:f2:53:7d:
6c:d6:66:27:87:11:d1:c7:81:19:97:1a:32:29:a4:3e:2e:52:
72:3a:98:7d:e3:0d:27:e8:da:c6:98:91:12:b0:3b:8d:95:16:
a2:04:23:ad:56:7f:fe:2d:79:c0:6b:4c:e4:10:54:28:b5:05:
49:5a:65:e5:45:ff:5c:c8:31:17:70:cf:3b:e4:f0:c2:18:09:
04:0b:68:31:d8:50:2e:dd:5b:bb:cd:db:6b:7f:c8:e0:b3:80:
ba:28:9b:44:d3:a9:86:79:f1:27:0e:03:27:b6:f0:39:f5:0a:
51:0c:c7:da:2c:b6:15:07:8e:1b:85:3f:d7:3b:63:50:68:ea:
24:c2:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:21 2026 by rpki-client