
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier: Frxi3lH92CYeXhNLkTohmYQ2OegtwDfVDSInNXKFL1k=
Subject key identifier: C3:70:06:1E:77:0A:49:5F:A5:E7:69:E4:3C:FF:B2:BC:43:1A:87:07
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number: 0156
Signing time: Thu 03 Sep 2026 05:18:50 +0000
Manifest this update: Thu 03 Sep 2026 05:18:49 +0000
Manifest next update: Thu 10 Sep 2026 05:18:49 +0000
Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: aF79RPZq3g5YzgIliWF8lFq6i2MQo/nXG7/TIeZnm1M=)
2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: WvBYC5RPQBjCgKYxv8nmuukDYtwi8f7s6ddjHk+AitQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Validity
Not Before: Sep 3 05:18:49 2026 GMT
Not After : Sep 10 05:18:49 2026 GMT
Subject: CN=6a99033a-6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:12:68:f9:5a:c6:f2:92:2b:f5:c0:df:30:
e2:0d:4c:1a:24:e9:de:58:00:90:40:d9:12:a0:a0:
c3:20:aa:e3:e5:76:59:88:36:83:81:86:82:87:7a:
7f:39:ad:12:0b:97:3a:e7:e5:95:a3:78:bb:12:a7:
54:f6:98:6c:78:5e:fe:04:54:d5:d2:19:68:42:ce:
e0:94:de:4c:41:0d:ff:77:c4:6c:5d:52:37:06:d5:
19:f4:3c:4d:5e:65:e3:28:56:a6:f5:33:69:e3:be:
03:2d:c0:6e:7c:85:36:c4:68:de:52:70:da:99:f9:
19:dd:f0:06:b7:c0:64:81:91:60:9c:a1:78:e9:a2:
e5:6e:e8:7a:38:55:fe:94:1b:41:54:cc:7a:bf:e4:
1d:50:cf:f1:75:17:21:f2:c1:57:9c:e6:ef:76:47:
ad:da:90:20:4a:52:f2:4d:37:2c:5d:14:5f:3e:b4:
82:6b:ba:ac:5d:6a:2a:91:b5:67:85:1a:b5:3f:af:
55:3e:c9:c3:0b:b9:fe:8c:07:ad:9e:93:29:8f:c7:
79:29:6a:fe:f0:4a:c5:34:94:d9:8d:85:eb:89:a7:
c4:b2:f0:3f:56:2d:7c:d8:b9:ff:e3:ea:a0:df:2a:
39:fd:3e:53:f8:17:87:06:8d:c0:4e:49:07:55:46:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:06:1E:77:0A:49:5F:A5:E7:69:E4:3C:FF:B2:BC:43:1A:87:07
X509v3 Authority Key Identifier:
keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8f:c2:a2:05:4e:02:8e:62:22:27:01:3c:a5:9d:7a:0d:8b:
d9:ed:c5:ba:1a:65:cb:7d:25:58:9e:dd:b7:7d:f9:49:da:b7:
35:9d:3b:37:84:11:25:2f:24:76:ad:82:d7:b2:bc:b4:ae:30:
ad:b1:0a:22:e1:45:10:e9:7a:c1:6d:8d:63:71:9c:20:9d:e5:
95:6d:f3:e3:33:6b:5a:4e:a2:e1:8f:9a:5d:39:ad:06:c7:9e:
9b:dc:1d:a1:de:be:d6:75:c0:4f:2a:8d:91:d0:06:f0:10:a3:
2a:8e:14:44:de:a3:46:28:a1:83:b8:01:3b:51:2a:20:2e:d9:
6e:45:ea:66:36:de:65:bb:92:d9:32:a3:1e:8b:dc:29:37:c8:
91:c6:72:b1:0b:ae:08:2d:4a:6a:db:d6:fd:84:3b:e1:01:05:
80:19:c2:e0:e3:0f:e7:da:ab:67:c9:12:7b:15:28:95:c8:0d:
2f:2d:61:ee:3c:18:9d:da:72:5e:a7:7f:18:e6:30:2e:11:18:
0e:a3:c9:cb:70:c8:0f:cf:4f:2b:92:31:e0:b1:a4:ce:f8:84:
13:3d:af:4f:40:81:24:df:e5:a2:0d:e2:de:f5:f2:a7:65:ed:
da:6d:18:2f:8b:fb:28:5b:19:31:84:19:76:70:11:03:5a:4a:
52:1c:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:59:02 2026 by rpki-client