
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier: 3pWEXXQ/6g+9PpU3qdt+hX4jOHPQ/dZAJYKn/glwFq0=
Subject key identifier: 3B:82:AC:AA:74:EC:AD:1A:F4:7F:4E:7C:33:51:D5:38:3B:80:E5:F9
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial: 0B7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number: 0B74
Signing time: Fri 02 Oct 2026 19:23:51 +0000
Manifest this update: Fri 02 Oct 2026 19:23:51 +0000
Manifest next update: Fri 09 Oct 2026 19:23:51 +0000
Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: EMS5HNT7hCSQWIGcGBjWs4zaG+FTDMwH+SBXXvi/3DQ=)
2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Validity
Not Before: Oct 2 19:23:51 2026 GMT
Not After : Oct 9 19:23:51 2026 GMT
Subject: CN=6ac004c7-917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:fd:ec:be:8a:32:a5:08:68:36:58:36:ea:
92:dd:54:4c:8d:3b:92:bf:35:ee:08:94:08:e8:55:
93:12:00:1f:13:48:af:7c:16:af:39:41:45:0c:d3:
81:32:32:cc:8e:ea:d3:7a:6e:93:e6:d9:30:a4:2d:
cf:ee:fa:fb:11:a0:8d:08:60:cb:0f:06:d5:e2:f6:
1f:c4:a1:ef:12:9c:22:5f:72:7b:34:35:44:b2:f7:
32:b0:72:c1:1f:0e:f7:ea:f4:62:5c:2e:69:5d:2a:
09:79:6a:49:f4:df:66:af:4d:f8:98:ea:a7:13:ce:
26:c6:fb:a6:db:2d:77:bf:66:42:b9:fd:75:53:0a:
da:5b:31:92:26:ae:f4:b3:12:dc:8c:d9:46:6b:d1:
78:83:99:e2:ff:d7:da:7d:78:4b:87:dd:cc:31:46:
b1:af:bc:ba:01:38:2f:5a:70:eb:c0:39:e1:d2:a5:
a1:c8:77:6c:38:75:06:34:7c:2b:52:08:07:a7:4a:
8a:9d:a6:ff:70:45:fb:2f:8c:19:48:be:61:3e:75:
44:1a:34:2d:50:4d:bd:b6:da:d9:b1:fc:36:99:75:
71:56:88:a9:06:4c:f4:37:95:bc:97:6a:6a:7c:f5:
f0:d5:1c:1e:6c:70:b0:6b:7c:38:25:eb:46:0c:ab:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:AC:AA:74:EC:AD:1A:F4:7F:4E:7C:33:51:D5:38:3B:80:E5:F9
X509v3 Authority Key Identifier:
keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:66:81:cb:0c:dd:e6:96:9a:c7:33:84:20:48:e3:99:51:5a:
cd:f9:d9:cc:bf:66:64:87:3f:d9:6f:3d:25:e9:5c:e0:6a:3e:
5d:59:24:cc:f0:97:de:d3:1a:40:52:54:00:b7:e9:dd:c0:d5:
19:3e:c9:18:b6:2a:3d:f4:2e:8d:fd:57:fd:8a:22:6a:30:d9:
88:0b:0d:33:09:8c:ed:e5:d2:c8:25:1f:29:72:8c:3d:cd:59:
f2:33:dc:69:a0:e0:81:37:7f:f5:5e:e5:28:2c:5a:51:91:e7:
94:e9:82:1e:4d:b4:ca:83:f2:14:2f:9c:e1:41:f7:d2:fd:e1:
ce:15:bf:c2:15:0b:87:38:a2:cf:cf:08:c8:a5:74:36:7a:b2:
3b:7f:4e:7d:89:27:5f:6e:27:55:2e:7d:1f:6b:cd:b6:25:f8:
11:93:3f:8b:35:33:bc:60:66:8a:0d:4b:c2:40:78:98:ab:0e:
29:16:f6:61:1f:8b:a9:ce:b3:82:a5:20:9e:bc:cc:68:c9:97:
08:4a:b3:d4:ea:e6:9a:ac:fb:52:31:84:f1:1f:68:fb:dc:9f:
7c:93:e5:13:83:1c:dd:91:16:fe:4e:29:65:19:89:7e:42:2f:
a9:a6:3a:4c:07:f3:dc:cd:f7:8f:c9:31:46:90:64:47:2a:8e:
db:11:5c:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux
NkJFNzkwNTgwHhcNMjYxMDAyMTkyMzUxWhcNMjYxMDA5MTkyMzUxWjAYMRYwFAYD
VQQDEw02YWMwMDRjNy05MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Hf97L6KMqUIaDZYNuqS3VRMjTuSvzXuCJQI6FWTEgAfE0ivfBavOUFFDNOB
MjLMjurTem6T5tkwpC3P7vr7EaCNCGDLDwbV4vYfxKHvEpwiX3J7NDVEsvcysHLB
Hw736vRiXC5pXSoJeWpJ9N9mr034mOqnE84mxvum2y13v2ZCuf11UwraWzGSJq70
sxLcjNlGa9F4g5ni/9fafXhLh93MMUaxr7y6ATgvWnDrwDnh0qWhyHdsOHUGNHwr
UggHp0qKnab/cEX7L4wZSL5hPnVEGjQtUE29ttrZsfw2mXVxVoipBkz0N5W8l2pq
fPXw1RwebHCwa3w4JetGDKt74wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuCrKp0
7K0a9H9OfDNR1Tg7gOX5MB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF
QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3
UmtiSHZBYmlZajRXdm5rRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApGaBywzd5paaxzOEIEjjmVFazfnZzL9mZIc/2W89Jelc4Go+XVkkzPCX3tMa
QFJUALfp3cDVGT7JGLYqPfQujf1X/YoiajDZiAsNMwmM7eXSyCUfKXKMPc1Z8jPc
aaDggTd/9V7lKCxaUZHnlOmCHk20yoPyFC+c4UH30v3hzhW/whULhziiz88IyKV0
NnqyO39OfYknX24nVS59H2vNtiX4EZM/izUzvGBmig1LwkB4mKsOKRb2YR+Lqc6z
gqUgnrzMaMmXCEqz1Ormmqz7UjGE8R9o+9yffJPlE4Mc3ZEW/k4pZRmJfkIvqaY6
TAfz3M33j8kxRpBkRyqO2xFcCg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:02:44 2026 by rpki-client