
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier: 47+topt8YocA6h9UEyk6M9TxEzDGyhig9cBJWYg4wBA=
Subject key identifier: 39:07:E2:E6:8C:F0:04:2E:44:EF:2E:CC:F8:F2:FD:8D:92:65:C7:AA
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0C9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number: 0C8A
Signing time: Tue 18 Aug 2026 18:55:42 +0000
Manifest this update: Tue 18 Aug 2026 18:55:41 +0000
Manifest next update: Tue 25 Aug 2026 18:55:41 +0000
Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: XuSKaiVoQycHhanLUnwTT71b0k2tI6JHUpf/PErViPU=)
2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3230 (0xc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Validity
Not Before: Aug 18 18:55:41 2026 GMT
Not After : Aug 25 18:55:41 2026 GMT
Subject: CN=6a84aaae-d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:4c:01:d3:d2:9c:9c:e5:19:2c:9b:e8:cc:
9f:5a:0a:33:cb:e6:37:e4:3b:4d:16:ee:c0:b5:f9:
bb:69:1a:91:65:bf:d3:b8:64:93:a3:91:d8:bc:e9:
b2:e3:2b:b4:4f:e2:07:a9:39:a5:a4:51:80:66:7c:
ba:86:33:6f:77:28:ce:ae:e5:df:15:03:a4:cc:05:
c3:c8:48:ac:75:ed:ee:c3:7b:94:41:93:92:46:c4:
61:a7:f3:92:89:a7:22:c5:2c:37:ae:ff:54:36:4c:
62:00:fc:04:8d:ef:3f:db:a2:22:e7:08:0d:da:81:
e6:cf:fe:39:02:21:e7:ed:59:5a:57:e3:e0:a3:5a:
0d:64:c4:d9:b9:ae:b0:d8:23:ac:8a:63:19:4d:8f:
d8:a7:25:29:fc:5a:f6:8d:98:c5:b7:02:3c:46:cd:
bb:77:84:80:85:ea:8d:1a:da:33:59:78:3e:72:ff:
bc:07:03:29:13:cf:2f:46:f0:d0:45:d0:27:f1:61:
7f:35:02:02:39:8b:76:f9:e6:94:fc:11:91:b8:40:
ac:01:e7:6e:46:b2:78:95:ba:c8:e2:33:30:52:90:
d8:25:01:19:bf:d9:70:39:34:6a:36:04:c8:3c:80:
5a:53:e2:bc:0d:df:26:a4:96:cf:c5:cf:b7:52:17:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:E2:E6:8C:F0:04:2E:44:EF:2E:CC:F8:F2:FD:8D:92:65:C7:AA
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:36:0c:ad:0b:06:a6:f9:dd:69:90:2d:74:2a:40:53:6d:4d:
b6:4f:ba:45:f9:33:55:5e:ec:b4:ca:c8:65:e7:8a:66:a9:54:
2d:a7:e1:da:4c:59:14:30:08:5c:05:39:33:7f:8c:ec:01:4b:
54:e0:47:20:bc:0c:21:92:dd:f5:18:f1:f5:7d:36:15:44:d3:
ea:dd:17:84:29:84:b5:15:08:f0:09:f8:39:71:81:f8:8d:25:
70:30:5a:28:72:97:dd:46:24:32:1e:7e:74:07:a2:3d:45:2e:
d7:04:76:5d:87:ae:5e:9c:6a:df:3f:13:59:ec:57:d6:b5:71:
55:a3:31:a5:29:c6:51:df:aa:13:51:02:e5:2b:ef:c6:f8:01:
68:6c:8a:f7:c4:c5:3a:46:c3:a1:3a:11:ba:43:47:1e:e8:0b:
44:d0:e7:3c:bd:3a:e5:6d:86:09:28:53:60:a3:dd:bb:1d:e6:
70:44:3a:20:e8:64:11:3f:de:59:14:fd:5a:a4:01:54:80:35:
3d:94:0b:26:83:f4:a1:c1:8a:71:26:77:5a:d1:3f:4d:7b:1f:
32:b9:16:99:8a:97:82:62:94:21:2a:cc:0c:ee:51:89:84:16:
58:70:e5:54:33:d3:88:de:e2:75:43:e1:c3:40:f4:b0:fd:12:
e0:77:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:52 2026 by rpki-client