
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File: usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier: 2QVz3NP5CLU/lFkWwVlJVmpsS+M0Y6BXcC0Pi2qJGkc=
Subject key identifier: 96:7E:F8:99:91:8A:1B:BB:61:AD:59:7A:3A:15:69:13:6F:70:F1:79
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer: /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number: A1
Signing time: Thu 29 Oct 2026 08:04:59 +0000
Manifest this update: Thu 29 Oct 2026 08:04:59 +0000
Manifest next update: Thu 05 Nov 2026 08:04:59 +0000
Files and hashes: 1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: JyTUNRtzWPMsTUiF7KLYJ5wH8qtuqfl79grH9RFT3AE=)
2: 9D379516E54D11F092458985756F56BC.roa (hash: AL+N7ElGeC7e5RBQ2GpUJUeVjtCPWdN/2uCY9aq6uic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Validity
Not Before: Oct 29 08:04:59 2026 GMT
Not After : Nov 5 08:04:59 2026 GMT
Subject: CN=6ae2fe2b-ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:48:bb:48:b9:2a:09:5d:41:d2:3d:47:fe:
3b:08:c7:b7:7f:5e:36:6a:66:d6:f4:d7:af:24:48:
33:16:99:2a:45:2a:0d:04:d7:40:ae:9f:8e:71:63:
31:16:5b:21:5d:b3:e6:ba:95:70:9d:bd:13:ac:a8:
b6:61:8a:83:59:e3:7e:1a:b5:d8:9f:dd:20:59:ee:
7f:b4:33:5e:9b:7a:f3:0e:b0:a1:47:8e:e7:85:06:
2b:c5:91:ad:1d:12:8f:c8:ae:a2:1e:cd:53:73:d3:
39:8a:d0:78:43:a4:37:94:49:81:09:fe:91:48:a2:
ee:0e:f9:95:da:aa:28:22:35:bf:ad:23:c3:4c:4f:
0b:a5:9c:dd:c0:2b:56:65:28:0f:a9:26:26:51:ce:
86:be:b4:c3:e5:a7:7d:dc:e3:3c:05:05:80:38:fa:
17:5c:16:e9:de:44:08:24:3f:ee:86:50:c7:61:1c:
95:40:cb:3a:4d:3b:3d:db:2c:4c:0a:6f:d5:94:f1:
f1:b0:41:35:ee:d2:1e:a1:eb:e2:d9:75:2e:41:2d:
70:21:08:1a:b5:3f:50:d3:1a:f9:9c:c0:85:14:0d:
8c:54:aa:8d:16:25:eb:d9:7a:8a:5e:42:98:b1:82:
7d:99:5b:2a:1b:2c:56:9f:78:97:87:ae:e2:8a:97:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:F8:99:91:8A:1B:BB:61:AD:59:7A:3A:15:69:13:6F:70:F1:79
X509v3 Authority Key Identifier:
keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0b:a8:fb:87:7d:85:0b:43:80:b9:f8:f3:2c:31:97:63:17:
d9:aa:d5:8c:00:7e:55:09:85:e0:4a:77:a8:2e:24:60:b3:0e:
bb:6c:07:0a:29:08:42:91:a8:df:92:3c:d1:ec:07:cc:06:0e:
fc:0f:22:b4:68:7a:62:60:4c:9a:e0:a3:f5:89:1b:4b:83:93:
d5:15:61:b4:53:95:fd:78:07:8b:15:38:70:ab:4f:b7:b4:5d:
af:90:7b:e2:dc:12:d3:d6:17:7b:82:16:be:a9:ab:31:c7:f5:
ab:bb:a1:3b:00:2e:bd:d8:8d:4e:87:93:f1:d1:c1:15:7d:25:
1c:dc:6f:98:e9:95:88:89:41:73:1e:92:c5:cd:8f:20:b8:1c:
b1:4a:00:c7:da:a2:e5:fb:bc:4d:12:2f:e6:ee:5c:86:92:08:
08:2b:59:23:7d:45:22:c5:ac:4c:12:29:04:32:42:44:5e:f9:
51:72:98:44:c2:2c:99:fe:93:ae:e8:e7:24:ef:32:da:37:fc:
80:99:a6:3f:82:03:88:9a:3b:61:1a:d9:a7:1b:ec:24:7b:31:
fa:02:c3:12:89:3c:44:20:17:1b:27:58:90:4f:3a:27:15:05:
f7:fb:e5:56:47:9e:f4:4b:fe:02:45:c8:45:c6:60:b3:26:15:
b4:9f:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:58 2026 by rpki-client