
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: XQvYA+151GE32k29q2/HU37YxkC50ZZaLdHHgy37eq4=
Subject key identifier: A7:D3:F4:7E:BA:0E:64:65:01:85:AD:38:9C:CC:85:93:5B:C7:E5:17
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 055C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 054C
Signing time: Sun 04 Oct 2026 23:31:12 +0000
Manifest this update: Sun 04 Oct 2026 23:31:12 +0000
Manifest next update: Sun 11 Oct 2026 23:31:12 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: RDzN67eHcdDwriARLS1cGRXBkWYZYtWY3qtPRNMdVT8=)
2: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
3: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Oct 4 23:31:12 2026 GMT
Not After : Oct 11 23:31:12 2026 GMT
Subject: CN=6ac2e1c0-8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:c1:f1:b6:96:cd:7e:7f:12:16:14:86:aa:
1d:71:d6:07:c1:17:fa:92:1d:c9:3c:3d:16:5a:a0:
bf:fe:dc:85:c9:1e:46:8e:4e:6b:2d:26:61:77:17:
e2:7f:6c:da:81:bb:4c:f5:96:8c:93:1d:32:5f:02:
45:c5:4c:e6:68:4d:99:e3:d9:e9:fc:80:82:26:56:
e0:b4:b2:dc:2e:9e:14:83:1d:e0:19:73:4d:3d:43:
50:20:a6:67:01:22:b4:e8:1e:9f:4e:c4:75:0f:ed:
73:5a:44:68:e7:91:01:14:e4:89:fc:0a:db:ba:95:
2d:ae:d7:d7:82:4e:a1:fd:e5:44:b6:04:18:0e:85:
19:78:78:18:e3:50:c2:48:29:3c:5b:8b:e5:d2:3c:
3a:52:d9:ea:3a:74:00:8c:27:1f:d0:5c:b6:5a:63:
c7:83:0f:60:aa:11:1a:93:49:bd:f6:c6:fd:c0:00:
e8:ef:d4:c1:4c:e5:99:0a:36:06:ab:d9:93:e4:ec:
47:11:7d:6e:a3:7b:dc:1a:08:f3:bf:09:78:cd:fb:
d1:48:17:c5:7f:35:57:54:23:bb:ed:3c:ad:e3:ad:
e4:a9:eb:05:f1:3b:3e:ad:07:b4:24:25:d0:af:60:
e6:91:f0:5e:90:ea:93:2d:c2:55:1d:4c:fb:be:c9:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:F4:7E:BA:0E:64:65:01:85:AD:38:9C:CC:85:93:5B:C7:E5:17
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0b:7d:e5:3f:f3:39:de:9a:f8:9c:b1:d6:f7:b3:47:8d:17:
4a:17:fb:d0:e9:0a:3b:e7:b8:fa:4c:e5:96:1f:15:b7:12:91:
82:7a:c4:2b:b5:c4:61:18:10:f4:d7:59:c5:82:97:1d:73:1b:
48:57:1d:71:ca:90:c6:c9:e1:2b:16:46:20:b9:af:39:b7:f4:
6f:ba:19:e6:03:37:60:ae:1b:a3:84:d0:ee:15:6d:86:8c:6c:
45:d1:e2:83:62:12:9c:b9:6b:12:c1:eb:16:7d:0c:6b:9a:a7:
0b:29:78:59:d5:5b:66:16:b2:6f:80:e6:ca:d4:cb:2e:a5:a0:
78:55:54:57:82:c6:b5:d3:1d:c9:10:09:21:20:e8:da:f8:29:
84:4a:27:ff:d5:34:0b:7a:8e:46:37:5c:8a:d2:45:a6:24:38:
f6:01:37:fd:b4:2a:d8:e3:d6:53:a0:6b:9f:6c:3c:6a:3d:ac:
b0:22:ee:93:87:a0:c2:05:86:40:f9:d0:7a:d9:7e:d1:15:0e:
90:f9:75:62:3c:0d:eb:8a:f3:4f:61:10:5b:a1:49:75:c2:c9:
88:b0:4e:7a:c4:a3:59:b7:39:e5:44:ed:7e:6e:83:f8:b1:0f:
8e:98:c1:68:6b:30:39:2c:2b:a5:4d:45:95:42:a3:3a:d2:6c:
9d:7c:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:32:47 2026 by rpki-client