
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json)
Hash identifier: So/y92m0ccIc7JEr+UZYsO5EsvsFl4hh4P6jQXWUMvE=
Subject key identifier: 24:65:2E:60:F6:B8:1A:39:A4:F6:C2:A9:D1:F8:33:38:C5:81:BC:54
Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11
Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
Manifest number: 0769
Signing time: Sat 24 Oct 2026 21:43:03 +0000
Manifest this update: Sat 24 Oct 2026 21:43:02 +0000
Manifest next update: Sat 31 Oct 2026 21:43:02 +0000
Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: +GowyIG1bIWf0hevaYl1TwpOMK1y7QC20Mej/9Op2gI=)
2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: oeB8/47xsF+hpt5i8iGPJ2EnXsL0GaoatzlImZS5Dnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl
rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
Validity
Not Before: Oct 24 21:43:02 2026 GMT
Not After : Oct 31 21:43:02 2026 GMT
Subject: CN=6add2667-2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:94:ce:83:aa:e5:d3:ca:df:71:de:c7:46:
14:d8:04:6a:57:58:5c:c9:a7:64:f9:d4:42:fc:d7:
7a:df:cf:7c:7f:ae:a5:57:aa:54:fe:80:4a:66:67:
a9:2f:43:8b:03:8f:64:f0:ab:6f:2c:19:71:f7:ae:
ce:ad:5d:9c:fc:f8:8d:62:59:8e:dc:08:cc:e3:8d:
a8:60:25:78:0e:60:61:a2:fb:48:58:74:7b:d9:eb:
df:ec:63:55:32:4c:65:6f:97:3a:e5:98:f7:09:58:
75:50:bd:26:34:0b:c1:56:0c:da:7c:05:5c:c3:de:
ea:fd:6e:b6:5b:c4:66:04:b2:e3:86:fc:20:0b:e7:
75:41:d2:98:24:c4:c3:37:3d:37:81:8c:a3:c2:1e:
aa:a4:bb:d4:f8:f9:ea:ca:db:34:2d:be:f3:b5:fa:
09:7e:ec:f7:3b:bc:d2:73:3a:2e:2c:d3:ec:cb:b6:
fc:eb:49:4e:74:7f:87:2a:2c:ed:ed:5c:41:cb:db:
f9:81:27:16:e8:8b:2c:63:db:57:ee:cc:26:ca:67:
f2:bf:8c:30:a7:47:75:53:d0:ec:35:26:d6:3d:87:
f6:7b:77:04:66:9d:c0:69:f5:0b:f7:29:06:4a:a7:
f0:eb:06:d5:23:44:a0:f5:d8:d7:ea:d4:50:b0:17:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:2E:60:F6:B8:1A:39:A4:F6:C2:A9:D1:F8:33:38:C5:81:BC:54
X509v3 Authority Key Identifier:
keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:30:be:e2:f0:24:e1:d6:97:e9:c3:31:d7:60:93:4d:bd:
88:e5:8c:71:7d:47:c8:70:76:0d:87:45:f4:fb:30:51:95:fd:
c2:08:fe:39:e3:3b:ce:8e:65:69:da:87:83:b3:d7:15:1a:75:
c4:ee:25:a3:6d:6b:c8:15:16:36:06:5b:49:c0:ab:d6:80:3e:
77:fa:06:8f:c3:21:b6:31:59:0e:a2:14:6d:b4:16:34:94:8c:
57:22:67:ae:fe:72:3c:cf:69:d9:c5:2a:6e:60:56:a3:8e:72:
52:f4:df:ba:e3:ea:30:bf:8d:14:37:16:ee:70:16:aa:aa:44:
81:7f:91:42:51:0b:00:bb:aa:5f:7f:49:7d:0a:f3:a3:3a:04:
4e:49:7c:fd:c6:5c:a7:4f:ce:8b:b2:ae:4e:e3:66:e4:27:00:
cb:e8:c3:a6:10:33:45:bb:e7:0e:97:63:02:85:57:54:be:c1:
a2:d2:b6:80:0c:9e:80:21:d4:82:e5:e9:7c:28:6e:e3:3a:8a:
7f:ca:de:57:d8:69:27:66:79:d2:cb:28:d1:a3:7b:f5:e8:cf:
d3:ae:22:1f:3f:72:b6:72:a3:3d:4e:32:73:a7:cf:9a:eb:d9:
7f:ef:42:2b:e7:d3:ea:19:42:56:16:4b:94:56:3e:cb:91:c3:
26:1a:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:21 2026 by rpki-client