
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json)
Hash identifier: odsJ2P0EeH/YHWmI+U2xikTvCiqZSPfSfVG+Sx8rk5U=
Subject key identifier: E8:88:29:62:74:C8:88:1B:91:F4:99:05:3D:9E:7C:4F:55:7A:FB:FC
Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Certificate serial: 1137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
Manifest number: 112C
Signing time: Mon 22 Jun 2026 17:13:25 +0000
Manifest this update: Mon 22 Jun 2026 17:13:25 +0000
Manifest next update: Mon 29 Jun 2026 17:13:25 +0000
Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: TdqRemljL4IwShLFzEcuPg1RubB5o7jwK5VPI7ldQJA=)
2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: 71ZBfHYzvqkrS7+3nYZhPvkXeo54VJ5UzV6oWKK8CPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl
rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Validity
Not Before: Jun 22 17:13:25 2026 GMT
Not After : Jun 29 17:13:25 2026 GMT
Subject: CN=6a396d35-f5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:66:08:97:6b:77:f7:25:66:59:e0:1a:e4:
d5:00:0a:fc:93:21:28:28:4f:1b:12:29:30:df:54:
ae:7d:fa:67:3b:64:4b:81:68:07:17:23:95:4d:0e:
4b:e8:42:e9:0c:67:7f:53:18:e7:1e:3e:70:74:43:
28:31:b3:3d:c0:3f:84:18:10:65:f9:84:db:54:ed:
ab:1c:a1:46:ee:7a:c1:8c:de:f5:a2:0e:dd:e1:a3:
2d:86:cd:a8:20:b0:d8:45:63:e7:50:08:51:a4:7d:
49:53:70:f9:69:e5:b4:f8:9c:00:e1:0e:8a:38:e0:
95:66:da:10:c4:5f:14:90:22:63:73:80:62:20:3c:
40:da:76:32:15:27:8a:c8:1e:87:05:4f:62:08:ff:
e8:3a:38:b4:7e:ab:29:19:ba:20:e2:e4:8e:23:61:
47:d5:d9:dd:51:65:cd:16:82:f1:ed:0d:d9:85:77:
02:d1:de:0a:e8:c1:f3:e5:c4:f3:6b:f4:44:66:7a:
8a:54:dd:b3:42:4a:47:c2:7e:cd:92:ca:f0:a5:5d:
3a:44:3b:6c:75:86:a5:46:c8:b6:fc:e2:41:29:e2:
f2:92:9d:10:5b:f2:a8:fb:0c:65:08:5b:cd:f2:88:
9d:ca:c8:17:fd:2e:17:ee:9e:e6:7c:ef:a2:f1:14:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:29:62:74:C8:88:1B:91:F4:99:05:3D:9E:7C:4F:55:7A:FB:FC
X509v3 Authority Key Identifier:
keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b9:72:ba:68:be:2c:f8:9b:55:81:f1:cf:57:ab:41:e5:ca:
15:43:8a:af:e7:02:47:80:78:d1:02:5f:53:92:fe:7c:c8:f4:
c4:ab:2a:36:c9:91:2d:bd:4a:39:c4:b8:ee:ea:a3:52:eb:2b:
50:bd:a7:ad:2c:81:7a:c0:fe:70:c9:1c:5a:7f:55:24:e3:28:
a4:a2:aa:d6:07:ce:32:3c:c4:97:fe:bc:14:2a:f7:47:a3:74:
10:f5:70:be:34:bf:a8:14:2e:b5:79:26:68:82:0f:8e:60:d9:
74:94:1e:11:3b:34:cb:3b:5a:2a:67:a9:ae:78:a1:4a:7e:1f:
75:49:86:38:c5:02:b4:b1:3e:b5:ab:a7:c4:76:95:f9:9c:c5:
ab:b3:43:09:5a:ee:ed:85:d4:d2:88:e7:07:40:50:79:15:2f:
6e:d1:b5:5b:8d:d7:ec:fa:23:c7:de:d1:c4:e0:1b:4f:6d:b2:
e4:8a:18:d5:02:41:94:11:95:18:29:ff:0c:2d:9c:d8:96:19:
1b:03:3d:04:ac:74:49:82:7f:3f:b5:c0:ac:78:81:67:e1:c6:
5d:96:4b:7f:67:3a:70:37:c5:96:30:47:8c:69:8f:fa:d7:05:
05:41:f1:b5:d4:fd:41:9c:9f:0b:4b:33:ff:7d:62:93:b4:92:
37:74:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:00 2026 by rpki-client