
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier: U09ljUdP0y5hxtTZ4AVsLiMPjG928O132UwtZVXFZks=
Subject key identifier: 72:9A:3B:E1:6E:91:B3:BB:F4:DB:FA:23:7E:B5:38:F7:67:8C:E6:A7
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial: 08F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number: 08DF
Signing time: Mon 20 Jul 2026 20:53:09 +0000
Manifest this update: Mon 20 Jul 2026 20:53:09 +0000
Manifest next update: Mon 27 Jul 2026 20:53:09 +0000
Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: zypXI+bUUQ1XsrcXzSEJDX0dV5FJ+jHIlGsb/jUmmZk=)
2: F814843E7B5D11F18BA834705CA30FBC.roa (hash: AT7rrFZJqkI2hbdK4qhTUnlkzryBAjkZxDGmC95snVM=)
3: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Validity
Not Before: Jul 20 20:53:09 2026 GMT
Not After : Jul 27 20:53:09 2026 GMT
Subject: CN=6a5e8ab5-5e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:ff:73:27:07:e0:11:f0:3e:76:ad:16:3f:
df:c9:5f:ba:12:24:57:b1:b9:a8:da:79:fa:07:c1:
bf:cd:19:eb:38:48:ce:10:f9:c5:d5:ef:39:3b:79:
4c:46:7d:28:8b:0c:5e:86:50:81:26:c5:b9:bc:43:
be:44:7a:b1:aa:51:07:c7:25:28:9f:18:a4:89:de:
ad:e7:ee:26:53:85:ca:90:38:ef:d7:f5:9f:43:4a:
e7:02:4c:7e:e4:c9:f1:91:30:18:89:00:b8:fa:16:
bc:84:ce:3c:8a:c0:a8:c0:15:e1:5d:cc:28:fe:61:
88:ff:a0:a1:2b:99:79:20:e5:a1:5a:14:e3:e2:3d:
20:54:5f:8a:6d:b6:91:68:3b:77:26:24:89:5a:08:
41:e2:7d:44:b1:22:4c:53:27:0e:13:13:7c:09:c6:
5e:b3:a5:15:40:61:30:6d:6f:03:55:f3:fa:1b:20:
10:7f:1f:7a:fd:56:9d:96:df:8f:d2:71:37:7d:01:
37:55:e9:69:f5:ed:33:74:2c:71:8d:3e:76:7a:df:
07:5e:9d:70:c9:b8:54:07:64:01:db:47:f5:18:bd:
7c:17:24:27:d5:c9:f7:ce:fe:24:04:a6:4e:46:0b:
5a:4c:9f:e5:66:18:93:eb:69:e6:de:3d:61:f6:00:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:3B:E1:6E:91:B3:BB:F4:DB:FA:23:7E:B5:38:F7:67:8C:E6:A7
X509v3 Authority Key Identifier:
keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:8f:6a:f8:f2:e9:57:33:de:fd:6c:ac:1c:c0:e7:f6:36:
dd:c7:b1:87:c5:f9:a3:36:4f:4d:32:f2:5c:2a:6b:93:d7:65:
b6:ab:f0:11:21:f0:5a:c9:5c:bd:5d:fb:b3:ff:55:91:df:46:
d5:be:17:2b:69:ec:92:3e:ea:f9:0e:3e:2a:71:9b:b9:9a:9e:
ae:a7:db:c4:59:46:2d:64:1b:c2:17:c9:88:aa:34:2b:54:de:
b7:b3:48:28:d8:bb:ab:3b:90:c0:33:7e:04:42:71:77:f3:af:
7d:a4:94:c1:2c:86:29:25:49:99:c1:10:2c:6c:da:0f:6f:27:
07:31:01:af:0a:42:7f:9f:f4:e0:9b:d2:18:5d:1a:09:27:10:
d0:2c:7c:eb:85:97:c2:42:ab:23:5b:94:61:2d:87:63:0e:92:
32:b5:3e:5e:ed:81:52:0d:e3:43:92:e3:94:35:56:33:ea:13:
80:9c:4a:dc:be:13:e7:55:2e:39:9a:11:de:5a:d1:f6:4e:07:
52:95:52:83:5f:fc:96:d0:3e:4a:ee:ac:b8:eb:21:37:33:94:
63:6a:21:fa:f3:80:95:44:91:58:2d:0a:f8:0c:61:c3:29:25:
ef:82:36:14:b3:5d:db:4f:70:5d:95:4a:c8:01:de:df:0c:80:
2c:94:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:09 2026 by rpki-client