
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: 7MErCFUBNIKNT45qDelkTh7FirudLm3TTUh+O6kc5ik=
Subject key identifier: 08:2D:28:63:4F:B8:76:82:79:F7:AF:13:76:95:BE:37:80:BC:B2:B2
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0B64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0B4A
Signing time: Thu 16 Jul 2026 19:26:55 +0000
Manifest this update: Thu 16 Jul 2026 19:26:54 +0000
Manifest next update: Thu 23 Jul 2026 19:26:54 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: XDIe957/87aWE0Pn4hRu8kkodQd0E2EpqFidclaKfF4=)
2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 19:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Jul 16 19:26:54 2026 GMT
Not After : Jul 23 19:26:54 2026 GMT
Subject: CN=6a59307f-a74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:5f:42:dc:ef:2f:7b:56:58:fa:48:46:2c:
5b:5d:c4:dd:62:17:b2:e2:7a:24:89:d1:17:b4:b7:
2e:8e:3d:08:cb:b4:a4:52:fc:37:64:30:f5:60:e1:
3e:87:2d:64:c8:98:c5:4a:96:9b:68:e6:9a:f9:af:
0a:7e:b2:a3:75:0e:3d:af:49:86:cc:c3:f5:12:93:
69:1a:99:9c:bc:20:e4:81:b0:d8:32:b6:04:f6:57:
cc:e9:ba:de:04:e2:14:74:bc:ea:11:a8:a2:ce:3e:
df:a5:11:94:87:3b:9e:f1:55:4d:6f:4e:fb:77:65:
e5:0d:51:68:1e:97:57:fe:bc:4c:cf:01:79:a9:1b:
78:61:af:e8:81:d5:83:25:c5:53:58:12:17:d3:9b:
9a:ad:14:0c:9d:e8:70:5e:89:12:aa:dc:e5:c6:e6:
dd:3d:ab:c6:25:9a:4e:b6:20:01:d8:ca:2a:27:45:
d1:98:7c:b3:54:24:9b:1a:16:ee:31:bb:d0:8a:a2:
8f:30:a0:93:4a:aa:1f:54:9a:23:da:6c:66:9a:df:
5a:53:fa:fc:1e:5f:a6:4b:cd:1e:35:94:43:12:bb:
09:d8:95:52:d3:e5:6c:b8:0f:aa:8a:d3:7f:05:d2:
2c:c3:9c:72:22:f9:6c:a0:63:aa:bb:af:63:34:dc:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:28:63:4F:B8:76:82:79:F7:AF:13:76:95:BE:37:80:BC:B2:B2
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:af:9b:cc:56:e0:5b:fc:96:30:89:85:45:d9:15:26:37:
60:50:9e:e5:07:e4:de:b1:4d:a1:87:6e:fc:7a:31:f7:b0:be:
3b:b8:84:0b:4e:09:7d:e4:b9:1b:69:e9:d2:8c:95:46:bb:e3:
de:3f:25:2b:46:00:16:0d:5b:1d:63:6a:05:de:82:d3:9b:6b:
7e:5a:f9:8e:eb:a7:9c:ae:b8:d1:ab:83:d8:63:06:fd:06:0d:
85:6f:99:bb:ff:f5:1e:f9:dc:93:fb:0a:9f:d7:5f:78:42:2b:
74:e4:59:37:3c:43:13:22:05:3c:0c:bc:7d:6c:c7:16:c7:ea:
8e:c0:b1:9c:ce:09:87:de:0b:9e:49:7f:e0:44:d8:2e:38:76:
45:f1:7d:af:89:6e:ad:d1:92:9e:60:4b:4a:29:93:00:96:88:
ae:b4:a1:e4:42:f9:04:c5:f9:f4:34:a0:bd:63:59:bc:4e:d2:
57:26:ec:73:19:3e:cb:ca:40:57:3b:65:0e:28:42:de:87:92:
1c:cc:fd:6a:15:9c:95:65:8d:75:31:bc:a5:96:ef:35:ca:bc:
e1:85:12:df:de:73:49:65:40:db:74:c4:98:d9:39:14:28:30:
5b:1d:71:10:dd:40:93:f7:19:99:54:55:85:41:b5:07:fe:74:
7e:b0:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:46 2026 by rpki-client