
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier: nhY+8ID2IsTYzpLUsU6LecWTGv+YKiPlG9m3EJW50iM=
Subject key identifier: 89:DC:54:D1:B4:FD:A8:0B:54:5D:17:DA:2B:F7:FC:74:44:0F:4D:E9
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number: 7B
Signing time: Fri 17 Jul 2026 08:55:52 +0000
Manifest this update: Fri 17 Jul 2026 08:55:51 +0000
Manifest next update: Fri 24 Jul 2026 08:55:51 +0000
Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: yaE6popUNsuTnFJYsmvjAdKu+RKgMVVKzcYq4MQCjfM=)
2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Validity
Not Before: Jul 17 08:55:51 2026 GMT
Not After : Jul 24 08:55:51 2026 GMT
Subject: CN=6a59ee18-3508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:a6:cb:db:09:b0:fc:26:ba:ad:0d:15:bd:
f4:2b:46:69:3b:e9:4c:18:ca:34:48:87:9e:95:f0:
5d:04:81:61:4d:34:c8:5a:2f:be:33:ce:09:6e:98:
b3:4c:3b:d9:2f:19:65:4a:69:e7:93:d8:9c:a5:79:
82:d4:ae:f1:45:ad:89:93:e2:69:c6:bb:45:23:a4:
8f:37:f5:20:08:5a:63:ae:07:1b:4a:b2:0a:fd:8e:
97:4d:3d:55:4c:21:c1:3d:6d:44:63:84:83:bd:9c:
c5:63:b4:e3:5d:17:da:ee:1f:2c:9d:59:4a:b7:0b:
6a:13:3a:b5:3d:a0:99:75:1c:6e:49:ba:e9:84:7d:
b0:d2:65:5b:16:a3:12:d7:85:48:41:7e:e4:95:d3:
96:7e:6f:13:7a:6a:1d:43:91:cd:f1:83:d9:7b:85:
20:77:95:a7:35:9b:bb:e7:c9:ea:3f:cd:fb:2c:7d:
73:83:56:f6:7c:a7:41:8c:f7:eb:72:d9:2a:1d:3c:
d6:3c:da:6d:8c:a0:8f:20:ad:83:a1:86:8e:1f:7e:
76:5d:bf:0f:17:c5:d5:83:c2:db:84:9e:b4:f8:2e:
56:a6:41:32:a1:c1:29:83:d7:bc:a9:54:04:93:68:
02:bd:0c:86:bd:fb:b1:ab:92:cc:42:63:ed:27:82:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:54:D1:B4:FD:A8:0B:54:5D:17:DA:2B:F7:FC:74:44:0F:4D:E9
X509v3 Authority Key Identifier:
keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:65:bd:64:e7:23:51:25:e1:20:57:f3:ce:10:7b:e0:71:
dc:f7:34:8b:bb:56:be:17:80:2e:6f:06:8a:16:c8:e2:8f:18:
9c:a6:f6:24:a2:67:92:c7:2a:18:09:a9:0d:93:3c:67:92:73:
9d:b0:bc:67:97:d0:9c:45:96:d1:1d:04:77:5b:76:43:b0:10:
a7:46:3b:a5:8c:96:c3:01:61:55:34:06:e2:ea:11:65:b0:c9:
d6:55:d5:af:98:f1:e5:c6:93:8a:02:26:f8:a0:b2:bb:e5:19:
13:2d:f6:49:23:5c:e8:01:ac:1d:91:ea:d5:0b:e9:85:d9:ce:
1d:a2:27:89:69:a1:32:9e:36:fc:17:1b:db:f1:7a:f6:de:5c:
45:0e:30:3c:a9:9e:ec:6c:9a:eb:56:7e:1f:d9:9f:7a:c1:88:
f0:06:34:c1:53:fc:46:84:45:28:99:44:f0:01:1f:64:c3:43:
00:12:d0:88:6f:86:b3:71:89:0f:b9:2a:50:e1:ef:93:3b:b1:
70:36:0c:53:03:53:fd:12:32:38:1a:03:5b:70:24:0f:92:72:
3a:19:50:9e:f7:61:00:96:f6:24:3b:33:6b:bb:82:0f:b5:b6:
cc:cf:fc:93:1c:ba:e0:5f:0d:b5:e1:8b:ae:73:fd:df:87:b4:
87:b1:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:53 2026 by rpki-client