
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: RfE8Os6uDrxegLrePmzjbY1wwhEnjyI/ZEeQ44K/JBw=
Subject key identifier: 58:69:ED:7B:9D:DF:0D:22:C6:93:C7:FF:1A:C1:95:95:46:D1:1F:30
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 086A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 07F0
Signing time: Sat 24 Oct 2026 21:23:17 +0000
Manifest this update: Sat 24 Oct 2026 21:23:16 +0000
Manifest next update: Sat 31 Oct 2026 21:23:16 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: UuvvtaDJPhpDppEgpWVCx5QdrpVVD5mnff/eQT73IGs=)
2: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 7g2GzMpbsXg0SC1u5pI0BA7KwxetbBq/6LlcQTkxPZY=)
3: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: sWPtrrp7wjC9q2Z2Pyt+2v9XwkvTK+NuUGOz/EsAmyM=)
4: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=)
5: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: dl0KaIPqQRrW321Czs7YhzYqJGnPgpM9OmusVMr+VRk=)
6: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: TXZ7H4bYoa2tMoTjTtlYu/ju1DHWYH5bM4fA2XxysBg=)
7: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA=)
8: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 7JuQ2G6yFzq4/l/uV73erQ4OY/dKSaAKR4JLpyv+3gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154 (0x86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Oct 24 21:23:16 2026 GMT
Not After : Oct 31 21:23:16 2026 GMT
Subject: CN=6add21c5-a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:ab:ea:47:19:ce:98:7b:df:b2:6a:da:20:
ce:4c:38:27:b0:96:ea:2f:45:cc:81:fe:49:31:cf:
42:d9:00:bc:52:02:74:fe:7a:d6:57:f2:ba:f7:45:
dc:63:b4:2e:7e:ca:ad:06:eb:9b:48:94:fd:aa:d5:
0b:4f:ec:1b:df:c7:a5:a3:e4:70:19:d0:2f:98:5f:
57:59:78:f5:ba:6a:09:32:83:8b:53:02:77:ce:73:
e3:e5:f9:ec:79:b2:f7:01:3f:23:a4:3e:03:3a:11:
f8:5b:96:e1:0f:ea:d0:24:83:9b:f2:5a:4d:c7:91:
64:1a:0f:4f:e1:0a:33:b6:f2:1e:e1:6c:45:dc:a7:
38:51:f7:1a:bb:e7:87:3e:55:da:04:ee:db:e1:4c:
fb:fe:94:5e:e5:05:c2:cf:a6:90:29:db:b5:e2:2b:
c6:dd:d3:d9:b4:33:a9:57:c8:a2:6f:37:61:ed:6b:
82:84:8d:f2:69:3a:44:b4:6f:7b:65:67:0d:15:aa:
f0:5b:52:25:e3:12:bc:cc:c5:16:df:1c:fb:22:1d:
d4:7f:82:23:89:08:98:be:77:89:33:95:09:cd:f6:
51:41:9a:d4:5d:eb:55:25:ca:59:d8:5d:ef:b0:97:
90:1d:cb:7a:db:46:7a:79:dc:b2:a7:7d:6d:05:c6:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:ED:7B:9D:DF:0D:22:C6:93:C7:FF:1A:C1:95:95:46:D1:1F:30
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:f0:af:98:61:00:75:60:06:70:6c:de:50:54:89:23:9e:
a5:c1:86:13:3e:86:65:f4:6d:51:27:8c:c9:3d:ef:11:4c:57:
42:1e:dc:70:41:31:35:2d:73:25:c1:ad:64:c3:2d:2f:b3:7c:
09:34:25:49:c4:b1:13:fa:83:0c:6f:89:9c:34:89:3b:5a:65:
d7:c6:28:6d:e2:34:e9:18:44:28:7e:a4:36:1a:1a:d3:bd:9b:
84:48:37:22:fa:df:47:c6:bd:98:6b:fc:5d:31:a7:84:e6:3d:
b8:76:59:4d:e7:5b:88:e5:a2:fc:c0:20:a1:6e:17:1d:ab:20:
5e:a2:1e:67:97:90:65:7b:57:cc:02:15:a7:ea:91:70:16:c3:
cc:26:c1:9a:32:c5:a4:d8:98:d8:5d:8e:b9:d4:6a:67:b4:e9:
c2:f3:c0:28:7c:bd:6f:78:72:4f:b0:a8:7b:81:7c:30:9a:1d:
5e:7f:24:82:5a:b6:49:d7:f0:23:a0:4e:af:3f:05:0a:ab:15:
d2:77:87:74:e4:30:b2:3c:ed:d7:67:3a:35:4d:6c:29:2e:9e:
80:96:1d:38:00:e3:a5:fe:dd:43:fb:ab:7e:1d:22:5d:59:d3:
32:60:aa:f6:77:2d:69:ac:69:a4:80:cd:b4:c5:a5:6a:24:11:
70:9b:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:01:43 2026 by rpki-client