
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: ODJ12HspOnlb/qvZBUOovNNuM+yi50wsdm2OxDAJUeY=
Subject key identifier: 7A:20:1F:02:58:CE:72:BE:C9:69:F6:F0:5A:6D:08:D2:6A:41:33:D3
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0534
Signing time: Tue 18 Aug 2026 23:55:54 +0000
Manifest this update: Tue 18 Aug 2026 23:55:53 +0000
Manifest next update: Tue 25 Aug 2026 23:55:53 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: 1eLSIGqcEEGPHp2MXHacqTg29jD8O0rUILAGte1cm78=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Aug 18 23:55:53 2026 GMT
Not After : Aug 25 23:55:53 2026 GMT
Subject: CN=6a84f10a-43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:3a:92:d5:f6:01:39:a4:20:11:2a:19:0f:
c5:3b:ad:9c:01:5b:60:79:3d:6b:a8:78:58:2c:42:
68:8e:a7:1b:3b:24:f4:dc:0d:76:63:ce:60:06:21:
b0:b8:53:ee:5a:b5:78:eb:18:eb:2a:48:31:2b:6d:
27:0a:c5:58:e2:80:51:4c:d6:f0:64:0c:09:e7:3f:
23:a2:80:51:da:91:72:b7:8c:4e:58:e0:8f:ac:fd:
b5:4d:2c:9b:e6:1b:a1:3d:c9:eb:a9:87:33:c7:49:
51:d6:61:e6:9b:74:6c:1e:c4:0a:af:41:68:24:9a:
90:1f:05:f9:d8:fd:9e:22:fb:77:df:3d:29:04:e1:
2a:a4:63:ef:b3:88:08:a4:28:a3:41:0f:33:62:6c:
a7:f3:57:25:33:1b:71:18:0e:ff:b4:07:96:28:30:
18:b9:57:0d:37:80:99:3f:db:28:f4:d3:20:61:15:
cf:7a:9d:dd:0c:3b:e2:dc:93:28:83:d1:70:f3:0a:
42:70:c3:71:a6:b6:50:83:26:81:3f:be:bf:eb:ba:
ee:87:21:d7:51:4f:6d:e1:d0:42:a7:af:5a:64:fa:
03:39:5f:e4:e2:03:c3:c2:24:f4:23:1e:12:a9:49:
d9:c8:e6:94:32:53:a4:5a:8d:7a:68:20:87:04:ca:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:1F:02:58:CE:72:BE:C9:69:F6:F0:5A:6D:08:D2:6A:41:33:D3
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dd:90:a1:3f:17:c5:54:79:b0:7c:d1:75:bd:77:dc:a6:59:
7a:80:31:d4:fd:c0:b9:ba:3a:ee:28:e9:8e:08:c0:8b:4e:c5:
20:d9:32:0e:d4:a3:c8:33:29:3c:aa:98:6d:cd:7c:10:bb:97:
a4:50:78:c1:d7:94:99:21:15:82:56:ab:59:09:f6:fb:32:cf:
71:87:7e:e9:30:05:fe:81:52:5e:04:3d:46:73:79:bd:3e:13:
b6:32:96:ff:27:23:58:e3:ac:05:4c:d3:15:9e:2d:9b:ba:cc:
c9:58:57:5a:f5:5c:2c:0a:6b:7d:a6:3c:cf:00:86:58:64:ea:
5c:67:90:75:ba:9c:4b:71:6c:77:43:2c:77:96:3c:34:c2:39:
c3:0f:3e:1b:9d:0a:cb:f1:af:c5:d9:5d:d5:36:10:87:24:2f:
00:35:fc:50:c5:6b:c4:50:31:51:05:a7:e1:7f:42:05:06:30:
37:6a:52:29:dc:c5:b3:11:52:05:53:57:7e:b7:7b:f9:bc:78:
1d:68:1f:a6:d3:22:6a:b6:13:94:af:e7:9b:13:b3:4f:29:61:
69:b8:42:62:cc:95:72:b2:02:73:47:e7:d3:a5:02:28:ab:16:
e1:52:99:8e:97:61:81:6d:b5:33:a7:68:d1:21:d1:27:69:3d:
74:20:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:33 2026 by rpki-client