
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier: Pj1D6P2O7qTmwhX2cBEW7oUk2jh1WDuxMCn2DGOm2aM=
Subject key identifier: 10:30:1E:84:51:29:F0:2D:0B:E3:47:04:F5:86:65:21:C4:F2:B8:C4
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 1465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number: 1427
Signing time: Tue 04 Aug 2026 16:59:33 +0000
Manifest this update: Tue 04 Aug 2026 16:59:33 +0000
Manifest next update: Tue 11 Aug 2026 16:59:33 +0000
Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: OwNwDnh3mZ7JjoTnBOYHpewa/LqF7wjQZ3qP3V5rh2k=)
2: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=)
3: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=)
4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=)
5: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=)
6: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=)
7: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 16:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5221 (0x1465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Aug 4 16:59:33 2026 GMT
Not After : Aug 11 16:59:33 2026 GMT
Subject: CN=6a721a75-6dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:6c:95:28:00:e7:77:ce:68:f6:22:39:5a:
f2:27:1e:83:26:7a:9b:96:76:9a:04:ee:6f:d9:18:
31:d9:41:80:16:8f:61:7e:d8:be:b5:97:2c:e5:d5:
3f:02:aa:c9:9e:c9:07:2d:d3:0d:8e:54:68:ae:23:
50:ce:fa:7c:d6:e4:bf:e7:e3:e9:91:59:d6:57:06:
0b:f0:92:88:00:12:f0:99:8e:2f:b2:e0:1c:94:50:
d6:fc:a8:f6:a7:2c:32:57:6c:43:09:93:85:a2:6b:
bb:8b:1d:32:8f:bd:18:d2:f9:66:fe:90:12:aa:15:
ef:fc:7d:84:8d:83:b0:0b:c5:bf:b1:cd:7b:5c:64:
c8:22:85:fa:57:b4:8f:37:2b:16:5b:3a:69:69:c6:
77:6c:1a:64:ff:b6:d6:33:f4:d3:c2:27:f2:39:a8:
01:67:ee:c2:21:40:29:e9:95:1b:41:67:df:d5:23:
5e:cd:5b:b5:63:ae:a4:e6:5d:95:43:fd:b6:4e:23:
5b:92:c2:2f:aa:e1:3d:df:9b:ee:81:3a:05:dc:2f:
61:07:3a:4c:44:2f:9a:80:2a:52:c4:8a:d2:29:26:
c7:7a:2a:ea:d2:a0:bc:2c:e2:bd:ab:09:3b:cb:84:
29:33:db:8e:ee:81:bd:c9:dc:9b:6b:dd:70:fd:f3:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:1E:84:51:29:F0:2D:0B:E3:47:04:F5:86:65:21:C4:F2:B8:C4
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:a3:36:38:dd:48:75:c1:a9:d0:e2:b3:54:89:5a:3d:e6:51:
b9:17:70:f0:4d:12:e5:bd:a5:df:ec:64:30:96:21:cc:1f:94:
49:02:ab:ca:3a:56:e3:e0:6b:c1:7f:3e:14:cb:4c:15:88:8c:
ad:d8:cf:85:d6:8e:d4:c0:31:9e:3c:8e:ae:83:cd:60:db:2f:
bd:19:0f:26:06:57:e7:77:5f:27:13:51:b3:5a:fe:f3:a0:c6:
e0:1e:37:d0:50:29:c1:e1:25:47:69:83:21:fc:b5:53:98:06:
d2:b6:3e:a0:87:bf:26:3c:6c:d0:b5:92:a1:a1:da:95:c9:b2:
88:d0:c3:e9:0b:bc:78:34:bd:3d:6b:da:9d:67:a4:68:f3:ef:
05:bb:2c:6e:8c:9c:a7:78:33:aa:48:f8:1e:24:b4:38:d9:66:
72:7d:59:48:d9:16:1d:5b:3d:8a:9c:6a:b4:1a:0a:a3:9c:cb:
a1:39:5a:83:fe:f6:ed:c0:e5:d0:9a:8e:02:41:5d:41:27:c4:
68:e7:82:74:db:9e:8b:c6:42:fb:e5:17:c7:ec:f8:8b:18:59:
bc:c9:6a:d2:63:d7:f5:b9:cb:81:27:7d:bf:e8:7e:67:84:a1:
15:88:6b:64:13:21:c4:10:04:02:65:65:03:09:4a:e5:14:9d:
18:d4:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:38:03 2026 by rpki-client