
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier: wziNkCIMmjcbimCtEp8G6N5WtBaVdYhwsuEpfhP1oCg=
Subject key identifier: 53:5F:CF:36:CE:F6:C7:D5:98:06:5A:81:36:58:40:9C:16:61:14:D5
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number: 01A2
Signing time: Mon 27 Jul 2026 06:00:38 +0000
Manifest this update: Mon 27 Jul 2026 06:00:38 +0000
Manifest next update: Mon 03 Aug 2026 06:00:38 +0000
Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: CjOy66PEq1LC1Xl7WbksMfvN1kkUFEI5IA8N4G0JdUc=)
2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Validity
Not Before: Jul 27 06:00:38 2026 GMT
Not After : Aug 3 06:00:38 2026 GMT
Subject: CN=6a66f406-b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:40:25:4d:dd:b6:cc:0b:90:ff:d4:1a:6f:
09:a7:09:08:a7:6f:8b:10:ab:dc:c9:3a:2b:56:04:
6c:48:18:33:e5:24:9f:8e:2c:0c:0e:b9:dc:ee:b5:
03:7e:e3:79:fb:c7:b3:ab:50:25:8f:98:eb:26:a8:
6d:ba:c7:84:fe:75:3b:68:a9:40:f5:89:f2:69:f6:
7b:93:e9:c5:4f:51:b3:7c:dd:3f:45:48:a3:4f:ff:
c4:f8:7c:1a:05:46:4a:36:8b:66:28:fa:75:92:3a:
83:54:f5:29:e3:e7:bd:d7:b1:4c:8e:fc:1b:17:10:
7c:8f:2f:80:6b:c2:ba:2b:1b:0a:d0:c8:3c:03:97:
7b:c0:1b:b0:b2:c1:84:80:fe:69:d8:e1:db:9e:eb:
fc:d9:7a:b4:90:94:b6:8a:52:eb:fd:3d:9b:a5:af:
97:7d:e6:5c:79:d5:7c:62:4a:b4:13:f6:cb:b2:b9:
d1:b3:46:b4:56:97:f5:04:d9:d5:97:8a:e4:f8:cc:
0a:95:fe:62:a6:7f:d4:51:58:c2:ed:f0:b7:10:72:
72:bc:da:4e:6d:24:4b:9d:8b:fd:a5:3b:f6:99:b4:
2f:37:9e:f6:3e:65:19:5e:0d:9d:db:a9:1d:e9:b0:
5c:d6:5b:89:a8:ef:66:5e:1c:2c:6d:8b:93:14:e4:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:CF:36:CE:F6:C7:D5:98:06:5A:81:36:58:40:9C:16:61:14:D5
X509v3 Authority Key Identifier:
keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d3:f7:18:de:64:2a:86:5b:63:3e:50:2f:73:77:a1:48:7a:
48:00:9d:49:95:f9:ff:48:ec:fb:a2:b2:80:e7:56:9d:0e:9d:
cd:4c:05:ce:f1:c9:5e:12:45:b2:42:bc:d5:fc:1c:f4:ed:5f:
5d:11:70:8a:c7:9f:10:48:c6:b1:ac:03:85:5c:b0:f7:cd:48:
eb:28:22:0f:6e:38:5d:53:d5:15:54:ad:13:e0:5c:b3:97:ad:
2b:0d:e7:11:cb:f4:02:13:01:5c:44:90:50:47:c8:e7:37:66:
ea:67:ed:7f:d4:41:a4:85:f8:cf:f3:20:5c:38:8d:8a:62:61:
fb:09:b6:21:48:23:4b:35:c9:53:f1:03:d6:4d:40:cb:fb:9d:
98:98:97:e0:f5:05:b9:6d:1d:25:e3:90:e2:06:b0:f8:a1:1e:
73:91:13:5b:05:ba:13:13:3d:aa:eb:cf:7c:66:4b:9b:b5:fc:
61:97:c2:f0:44:bf:ec:fa:b6:9b:f1:95:38:88:03:4d:00:c1:
93:fa:83:5d:d9:fc:ee:47:bf:08:e5:77:f4:d9:58:6e:6d:3a:
21:74:e2:4b:0c:45:c4:b3:d5:8d:fc:83:42:fa:a3:40:95:df:
90:e4:f3:1b:18:f7:46:03:d0:5d:d8:a5:41:43:73:c9:70:92:
9f:6f:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:34:13 2026 by rpki-client