
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier: zUYfAVhrojlsTknby+QQMrvrymvpVQa0byLGNbxyHWA=
Subject key identifier: DC:DB:12:72:AF:0D:30:11:8B:31:BE:87:FF:0D:F9:2E:3A:A2:38:B7
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number: 01C2
Signing time: Tue 25 Aug 2026 03:56:09 +0000
Manifest this update: Tue 25 Aug 2026 03:56:08 +0000
Manifest next update: Tue 01 Sep 2026 03:56:08 +0000
Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: ZdWz9kIXMDa8f/x7axWAMG6wGo31xh39BuZUzDdmRF4=)
2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: 75GT6PvkKn9coQEFldzoJNCikDpnLP6koK3TaJEr5tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 03:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Validity
Not Before: Aug 25 03:56:08 2026 GMT
Not After : Sep 1 03:56:08 2026 GMT
Subject: CN=6a8d1258-e8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:dd:0c:4c:d7:d2:6d:fd:8e:f7:c7:76:b9:
c9:5d:ea:60:11:d0:42:3b:c4:22:68:d1:73:60:2d:
ec:c2:9b:6f:11:ef:60:43:53:b2:ba:93:38:21:c0:
10:c1:8c:f2:31:5d:dd:db:21:95:03:14:ce:f7:c1:
ef:5b:82:52:1f:d0:f3:4d:d8:e0:37:3b:06:ac:1e:
83:83:01:5a:50:15:42:15:58:ec:be:73:56:09:b1:
16:a8:a9:bc:77:06:00:62:e2:5b:11:72:02:5c:0e:
50:ed:47:a5:c5:0c:e4:19:24:74:25:e6:b2:0d:d6:
f0:5b:80:fe:1b:a2:a0:49:fe:92:75:bf:4a:fc:89:
71:62:b2:83:2a:b0:38:1c:69:6b:d4:9f:5c:cc:d0:
a1:93:79:8d:e7:87:61:12:0f:98:5d:b1:c3:84:6f:
0f:0a:f0:eb:eb:08:df:18:40:43:2e:1e:d9:79:11:
03:2e:9b:56:b8:1e:ed:ab:14:c6:2f:21:ff:be:ae:
10:22:35:10:7b:84:d1:68:3c:5b:7e:8d:69:97:ad:
93:99:af:48:96:22:28:50:cd:07:05:8a:3c:52:28:
a9:46:bb:70:43:f7:5b:d9:9d:6c:27:c1:01:cd:8b:
79:4d:1f:b6:0c:13:dc:ac:ea:e4:d0:90:65:9e:c5:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:12:72:AF:0D:30:11:8B:31:BE:87:FF:0D:F9:2E:3A:A2:38:B7
X509v3 Authority Key Identifier:
keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:58:c3:49:67:ab:95:f0:45:3a:20:0d:d4:e5:96:2c:c3:
d4:91:58:85:35:d7:93:a4:dc:95:60:5c:05:e2:b9:fb:fb:2b:
56:3b:ee:d7:d8:f3:0c:5e:69:10:a3:37:6a:7d:95:54:a6:4f:
0a:79:37:ae:32:c6:f5:8f:0e:d6:2f:3f:a6:60:f1:c1:7a:2a:
b1:3f:2e:ea:86:12:a1:0d:45:d9:bb:e8:79:d8:29:8d:86:43:
6b:ac:80:40:52:03:1b:d3:91:3a:4d:f3:d4:4c:e4:26:b2:9f:
5d:cc:ba:f3:08:e3:67:54:4c:b0:01:6d:8e:3d:50:45:6b:c6:
a7:63:c3:eb:e4:67:ee:e6:a9:f5:0b:58:de:d7:95:c5:26:5e:
7a:de:08:40:31:01:13:dc:3b:dc:ee:71:09:b9:44:ec:93:62:
60:b6:fd:83:10:08:8a:b4:a4:5e:39:d0:f8:42:e3:23:72:3a:
c7:be:8b:cf:3f:5d:03:3a:c1:03:51:59:99:71:69:ea:07:64:
a2:c8:1e:36:cf:34:b7:cf:57:63:4c:75:99:03:2f:86:d9:34:
cf:95:f7:ac:1a:a2:1a:e1:fc:51:24:58:6c:c8:30:89:c6:b9:
9b:ad:4f:e8:39:3c:3e:59:58:48:e2:b4:1b:8a:b1:5a:6d:9b:
36:61:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:05:13 2026 by rpki-client