
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier: 9KkyEN18WabSqPflO6s1T3NLgbiqnN6k7mWJpCaRvzE=
Subject key identifier: 53:89:69:5C:A8:35:D2:40:49:8A:E6:1C:63:67:45:31:55:9D:8E:57
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial: 02DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number: 02D4
Signing time: Wed 19 Aug 2026 01:39:45 +0000
Manifest this update: Wed 19 Aug 2026 01:39:45 +0000
Manifest next update: Wed 26 Aug 2026 01:39:45 +0000
Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: OTiyhg8u04apvSYauMr+qdRJCkZOWngY+iS8mv6il54=)
2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Validity
Not Before: Aug 19 01:39:45 2026 GMT
Not After : Aug 26 01:39:45 2026 GMT
Subject: CN=6a850961-3d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:0a:83:c2:8c:38:97:70:97:1c:23:ba:3b:
a0:fe:d7:0b:fa:f7:b2:81:8c:1b:27:fe:97:68:2b:
21:91:05:5a:6b:f0:d8:ae:40:10:81:86:f5:08:77:
2d:0e:ce:3d:e1:7d:ba:44:6a:9f:a0:1e:ab:7a:d9:
21:91:55:3d:b3:c0:03:f3:15:cd:c5:1d:3b:d7:36:
1b:06:39:72:1e:87:93:f2:67:6b:c8:be:f1:08:99:
42:44:d3:61:43:22:20:b0:4d:b5:b2:77:19:b7:7a:
71:c8:23:95:60:e2:84:68:ff:b2:6a:ad:cc:d8:d5:
80:1f:49:9b:5f:b0:c1:93:da:7e:5b:3d:07:94:4f:
69:b2:bb:34:cc:af:d5:b8:76:7f:9e:e6:d0:60:58:
fe:80:c9:6c:90:4b:50:f5:23:f7:97:c3:34:17:e1:
26:8b:89:41:65:d5:05:42:61:b4:ef:c3:d2:27:90:
a9:0a:7d:8d:94:d1:e3:e5:6f:e7:04:ab:5e:11:5d:
06:19:8c:b4:2e:5b:b6:3f:41:a4:7f:30:f1:4f:88:
bd:86:c0:e9:7d:a7:b4:ec:2f:1c:03:a3:50:43:34:
c7:24:0f:7a:7b:8b:c1:30:e0:cf:0f:96:fe:79:49:
c4:29:fc:2d:2f:ca:47:7f:a6:28:4c:49:1c:0a:6f:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:69:5C:A8:35:D2:40:49:8A:E6:1C:63:67:45:31:55:9D:8E:57
X509v3 Authority Key Identifier:
keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:a0:21:06:65:24:bf:e6:b5:a5:2b:cd:52:f3:87:df:96:
eb:4f:65:8b:74:93:9c:5f:07:54:72:0a:b4:6f:30:96:3b:40:
1b:b1:36:bd:df:38:1e:0a:c5:92:54:c0:eb:1c:c0:43:c0:6b:
66:7f:b0:83:2d:3e:8c:29:c8:1c:88:f4:71:73:63:01:e5:c4:
99:75:b4:8a:8f:9e:ae:01:bf:ec:fb:2b:51:94:90:d8:35:c6:
e1:6d:d5:fe:24:f3:57:cf:3e:4a:7c:b0:85:d9:a2:8c:a5:5e:
54:5e:35:73:ba:76:3a:05:7e:1c:af:b4:c4:78:2e:50:13:21:
e2:70:b5:20:89:f9:93:93:ce:82:d3:6d:9c:1c:9f:f2:7b:39:
c5:8b:72:3f:90:da:67:74:13:a8:b5:5d:de:b1:e5:08:90:3e:
12:cc:6f:aa:1b:0b:75:3c:73:27:2e:58:ab:dc:58:1a:45:e3:
11:d6:91:6f:7a:3e:94:e5:8c:54:db:70:6f:7e:00:12:e2:45:
e8:71:06:10:c6:f1:c8:98:47:03:ae:96:3c:12:60:ad:64:d4:
cf:c2:9f:d7:ce:46:ab:99:c4:bb:30:48:bf:3b:28:5f:44:9f:
59:a8:9f:b4:17:64:66:6a:82:01:53:ea:ea:df:96:5b:93:7c:
74:f7:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:19 2026 by rpki-client