
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
File: 0veTjOlKDq6WOebJeYtkX6kMwf0.mft (raw, json)
Hash identifier: FrCrX3zm21I3ivGhTwKU3SPdpIvepmthJXIY3R76BIY=
Subject key identifier: 17:E0:6B:02:62:6A:A9:D0:1E:30:C5:1B:40:02:E8:2D:3E:F2:A3:EA
Authority key identifier: D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
Certificate issuer: /CN=A913BB38/serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
Manifest number: 4F
Signing time: Fri 09 Oct 2026 09:08:27 +0000
Manifest this update: Fri 09 Oct 2026 09:08:26 +0000
Manifest next update: Fri 16 Oct 2026 09:08:26 +0000
Files and hashes: 1: 0veTjOlKDq6WOebJeYtkX6kMwf0.crl (hash: vCltzpgxChjLisi4d0hcfEcMi9pT6I+bVM/oUshz2bc=)
2: BE8AD5FE4F3111F1B77F8F88B3833773.roa (hash: i1nbnWsRyWA3C+HvpQ2HqooMFJRx6jA4xtRr9reViF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl
rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BB38, serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Validity
Not Before: Oct 9 09:08:26 2026 GMT
Not After : Oct 16 09:08:26 2026 GMT
Subject: CN=6ac8af0b-660e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:2a:51:03:da:df:d7:43:8a:70:f2:bb:e6:
75:ba:06:32:19:28:01:b1:8a:7c:c4:c1:e9:24:a0:
35:3b:68:9e:5a:28:42:10:ee:36:53:7f:fb:91:56:
fc:e7:0d:1a:52:ee:7e:c2:c8:9e:8e:30:eb:49:87:
82:99:8b:74:bf:63:56:ae:bc:34:dd:24:90:2c:05:
77:66:4d:5c:c0:f8:cf:21:e7:43:3b:9b:fa:24:fa:
56:20:09:05:42:57:c4:9b:b6:a0:b4:d0:18:0d:e3:
51:07:55:13:ca:bf:6c:71:60:fc:d3:82:21:5e:ea:
37:88:46:40:e9:1d:44:6e:04:88:91:e2:40:6b:c9:
6f:09:33:19:e3:af:17:d2:de:78:f5:67:fc:c3:5d:
00:0e:4d:0f:64:a8:6c:36:e3:2a:6d:c3:5c:e3:96:
e6:39:0d:66:53:6b:96:68:7c:a7:6a:b5:38:9d:95:
7b:7a:b2:bb:55:78:d3:dd:cf:46:e0:de:3e:2c:97:
16:de:38:a3:e9:08:3f:8a:b4:46:06:3c:06:39:31:
a1:a5:4e:b4:65:d3:96:44:6e:1c:23:cb:32:cb:85:
c3:d0:25:70:c9:0a:22:17:6c:a7:79:ac:2e:fe:01:
09:30:30:b5:fc:00:7d:da:35:90:9d:84:df:ef:8b:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E0:6B:02:62:6A:A9:D0:1E:30:C5:1B:40:02:E8:2D:3E:F2:A3:EA
X509v3 Authority Key Identifier:
keyid:D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:27:73:b5:94:5b:6d:ef:e9:22:c4:8d:80:d5:4e:59:2e:
7e:59:15:00:e2:a2:93:db:96:21:33:2a:a0:7d:1a:2c:b6:d7:
96:27:3e:aa:64:c2:38:58:76:42:c1:4a:48:25:03:62:90:dd:
94:76:20:6d:98:e8:fa:13:87:47:4a:bf:a6:8e:16:f4:37:85:
42:80:32:6c:ae:ef:fb:63:70:bd:b1:b3:8c:49:36:ea:10:45:
d1:88:b3:ad:7e:bf:db:9b:db:ec:8c:96:4a:08:0a:d5:1d:93:
41:93:59:cf:13:a6:f4:83:41:34:92:c0:b1:e6:08:1b:a7:5c:
da:b3:f8:c4:f7:a3:c9:29:dc:f5:0c:ba:7f:c3:4a:9f:3f:75:
11:0b:d9:4c:00:87:83:fe:d7:43:2a:18:f2:ec:d2:0e:5e:20:
4c:2c:6f:d7:37:64:e1:3a:56:ac:72:99:14:64:83:79:fa:3a:
11:c6:95:3a:40:db:50:ac:e5:15:65:b7:da:70:83:5b:39:24:
c2:34:a4:a4:db:3b:0c:10:c9:ae:73:cf:05:78:9d:a1:fd:c0:
a0:5b:c9:db:b3:39:22:2a:dd:bf:c7:59:99:6e:d9:8f:6c:f5:
47:12:ab:ab:9e:26:37:13:0f:38:be:74:f5:ad:98:9a:86:43:
14:1d:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:05:18 2026 by rpki-client