
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier: xrYHSoryxFNwuVWY1spHiRCJ1/uPn1c9odobVUEdoY8=
Subject key identifier: ED:F5:64:D3:77:93:0F:A5:42:64:47:4F:7D:61:85:22:19:6F:88:2A
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number: 3580
Signing time: Sun 04 Oct 2026 15:11:49 +0000
Manifest this update: Sun 04 Oct 2026 15:11:48 +0000
Manifest next update: Sun 11 Oct 2026 15:11:48 +0000
Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: 2NpOdXDh/hkl6QVxxLl7jxxL20xB3Xpz/cqBuuWVFBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Validity
Not Before: Oct 4 15:11:48 2026 GMT
Not After : Oct 11 15:11:48 2026 GMT
Subject: CN=6ac26cb5-fdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:fe:b4:52:cb:21:9c:be:58:a7:81:2c:48:
ab:57:2f:25:e9:53:d0:3c:c4:93:b3:d9:15:fe:fc:
b6:6b:24:bc:49:fe:9b:bb:29:ae:c8:b2:f2:38:ea:
6b:e4:9d:3f:22:84:4f:1a:a2:0e:88:b2:5a:11:69:
4d:92:a1:3b:0d:bb:72:48:07:53:22:bd:b7:57:f1:
7c:f1:00:81:ce:46:6d:8b:e9:fd:cb:c2:28:93:0a:
67:c1:26:09:37:8f:85:01:28:75:8b:b1:b2:a7:da:
5c:78:eb:f4:fd:79:04:8b:64:c1:df:b3:30:9c:40:
fa:2c:04:48:df:aa:50:2d:46:35:82:05:ca:a8:59:
da:b8:b2:ad:a0:1d:b5:c7:a8:a9:d0:d8:00:72:ef:
9b:40:77:e6:b0:d0:d8:ec:06:98:a3:50:3d:e9:1b:
a0:fb:c6:44:94:6d:6d:e2:c0:ee:5c:3b:97:dc:4a:
8a:fe:04:b5:9a:e4:b9:0a:5b:76:29:f1:04:8a:26:
6f:b8:9c:e7:69:dc:8f:e2:13:0c:d8:a6:9e:a2:01:
6e:8e:b0:ac:1b:e4:0e:c5:79:e8:91:24:9f:8c:35:
f3:fe:71:38:cc:64:42:ba:92:b2:1e:f9:58:bf:c5:
97:d1:f5:56:2b:be:ec:c7:f9:0f:bb:be:b9:cf:35:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:64:D3:77:93:0F:A5:42:64:47:4F:7D:61:85:22:19:6F:88:2A
X509v3 Authority Key Identifier:
keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:c9:8b:6c:a0:86:c1:08:5d:aa:98:ba:42:de:8b:01:85:
2a:19:99:5f:ad:47:cb:6a:4f:86:7b:76:b5:9c:a5:5b:cf:fe:
d0:00:1a:fa:5c:97:f3:ed:c5:b0:dd:36:b3:d0:a4:42:85:0d:
6a:1a:d4:94:62:5e:6f:06:10:e2:09:c9:da:a7:a6:1e:51:8f:
41:be:e1:ce:1f:5a:11:1e:85:d9:df:08:85:8c:12:d1:f9:05:
ca:49:23:aa:26:5e:74:6c:ae:14:dd:73:4d:2e:32:b0:50:58:
05:a3:66:c7:f6:b7:5a:af:f0:e4:bb:d3:2e:03:b4:9b:43:91:
5c:fc:c0:97:b8:49:d0:03:da:2b:75:7c:76:d6:71:0b:bf:1b:
cc:8e:b0:6b:77:f0:9f:99:94:3f:5c:03:a9:c6:54:59:e4:ae:
ff:32:8d:b3:7b:11:fc:42:cc:cb:a3:e2:7c:aa:01:49:73:d2:
ad:b3:b8:6c:d3:58:dc:ea:d3:f2:32:17:f1:04:d6:e1:b2:1b:
51:49:33:ed:95:81:c3:f7:21:86:8f:f3:16:71:c1:e1:3d:b5:
77:19:40:80:e0:4a:96:34:da:11:f7:38:ed:7e:a2:1f:9f:2a:
d0:16:4c:06:0d:a9:06:d5:81:db:81:56:d5:27:b6:8a:5e:96:
d9:05:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:00:18 2026 by rpki-client