
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier: oZRKKgKlvmO6rtMU37DrAkXxK84E0UtZOhTx79lF4QM=
Subject key identifier: 9F:06:1B:7A:88:A9:CE:8C:46:53:A1:00:55:C8:99:02:87:C7:B3:DA
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial: 0EF7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number: 0EE6
Signing time: Thu 22 Oct 2026 15:36:10 +0000
Manifest this update: Thu 22 Oct 2026 15:36:09 +0000
Manifest next update: Thu 29 Oct 2026 15:36:09 +0000
Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: Qs4p5WZPHGsNWL6RJjU+pExlzmDLVGS7Ovz6VIAmXJc=)
2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: Ftb5zciADf319Ts18hmCjiXy/mg1PrxXue9AZwCtgt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 15:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3831 (0xef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Validity
Not Before: Oct 22 15:36:09 2026 GMT
Not After : Oct 29 15:36:09 2026 GMT
Subject: CN=6ada2d6a-17d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:46:4d:0f:cf:53:03:01:48:5a:a4:75:dc:
54:50:4c:89:f5:f2:eb:0e:77:66:01:4e:11:98:db:
42:ee:36:e0:0f:0a:ae:ae:b4:37:dc:fe:2a:df:3c:
74:96:ae:96:b4:cc:0f:f1:31:52:7b:aa:80:ec:6d:
3b:69:18:60:73:63:d0:83:5e:dd:02:4a:e8:b4:c5:
4b:7d:84:02:86:ff:9e:12:44:3e:b3:87:9e:c3:ce:
ef:78:f6:c8:f0:bc:46:e9:86:a0:62:e9:28:6a:7b:
f2:99:fb:4e:c8:4e:03:e7:82:f2:7e:72:9e:91:3b:
d4:cc:85:3c:b7:85:ce:f8:83:01:7a:85:60:60:02:
5a:bd:2b:ec:e8:fc:b9:84:fc:ae:24:cb:61:98:f5:
ec:34:82:90:d8:41:d2:97:0f:d8:c6:ad:76:75:c0:
cb:0a:bf:cf:0c:73:fb:67:16:11:2f:20:d5:a1:1b:
e3:e5:66:8c:df:93:f4:c3:6a:30:73:45:1c:81:c2:
1f:9f:c4:a7:1c:b1:1a:cd:96:1d:f8:eb:f5:3f:b2:
44:03:b6:dd:80:4b:85:05:d4:07:9a:90:96:8e:5b:
20:6b:5b:65:cd:3d:07:88:a2:b1:4b:a9:73:be:ee:
60:f6:fa:3f:f0:bb:05:e1:95:40:eb:ea:9d:12:62:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:1B:7A:88:A9:CE:8C:46:53:A1:00:55:C8:99:02:87:C7:B3:DA
X509v3 Authority Key Identifier:
keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:a4:ff:39:4f:5f:d9:11:8b:16:11:c1:ed:b3:ad:2d:14:
56:9a:f6:90:89:ad:42:88:eb:00:35:74:8a:c1:39:23:2c:21:
5f:d9:8e:6f:2c:7c:aa:3c:9c:f7:f4:2d:f4:0c:88:4b:7e:ac:
96:fc:48:77:31:4d:d8:8a:c1:18:1a:bd:6e:49:c1:48:22:c9:
be:ed:76:ba:84:c6:6e:a0:82:11:6c:94:c9:28:5d:36:57:5f:
e0:6b:2e:70:9f:4b:21:f1:14:dd:57:9b:6d:a3:b4:1a:7b:22:
f5:4d:9a:da:cf:a1:6c:74:44:71:48:41:29:95:6d:b3:8d:0a:
13:8c:e0:4e:03:17:bb:f2:1b:7c:5e:cb:f3:76:7a:2d:9a:d9:
9d:32:4f:4a:e5:c3:cb:21:45:0b:b4:cf:72:21:75:c7:1c:cd:
3b:17:18:1b:4e:95:b4:50:c9:37:ab:db:b8:73:3c:bd:cd:c2:
f4:42:f1:67:ef:49:fe:38:60:f6:6e:e3:e9:fe:86:31:b5:35:
bc:f2:71:ad:0e:e9:29:fb:94:00:e9:a6:75:47:0b:52:4a:ca:
a4:14:09:e7:f3:b4:ec:e4:9c:4f:c5:81:d3:07:9a:ef:d3:8b:
54:ff:13:69:c3:56:f0:b4:33:c0:a8:09:82:90:67:b7:47:af:
b7:9b:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:38:44 2026 by rpki-client