
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json)
Hash identifier: JtI4Eiv7ucGnujgaWQoSZ8PUKOKNsG0li4LokKla/kg=
Subject key identifier: 62:75:03:F2:0A:CD:E2:27:2B:4C:6C:B9:E4:72:22:1B:67:A7:99:40
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
Manifest number: 84
Signing time: Mon 05 Oct 2026 08:05:02 +0000
Manifest this update: Mon 05 Oct 2026 08:05:02 +0000
Manifest next update: Mon 12 Oct 2026 08:05:02 +0000
Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: t51APb/x8JGJTOoBlFZRg+6TZduOONyhw6jWZpYg84o=)
2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Oct 5 08:05:02 2026 GMT
Not After : Oct 12 08:05:02 2026 GMT
Subject: CN=6ac35a2e-b472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:1a:77:2a:fc:e3:19:07:e8:01:24:40:d8:
82:a8:8b:92:f6:92:dc:67:db:3d:5c:cc:3a:5f:2f:
64:97:d4:50:ff:65:f6:8a:fa:64:13:0c:a2:04:9d:
d0:7f:bd:09:db:ad:e4:6a:eb:86:d7:74:d4:3f:96:
95:4d:cc:cd:cb:c4:f2:96:a0:e5:71:64:79:1e:5d:
f5:38:40:67:73:53:f6:92:e1:35:f8:d1:c2:f0:be:
62:35:b6:18:6a:9e:ec:a7:66:9e:c4:fa:26:4d:7e:
53:be:19:06:9c:99:d5:6d:d4:79:80:dd:ba:ce:e6:
57:54:8f:a4:53:9f:ec:e5:00:2a:ae:51:fc:d9:4d:
91:40:49:e0:a2:86:1c:70:ea:a1:e5:db:46:ef:32:
dd:89:1c:fa:fc:65:a4:27:5e:09:4c:67:b5:48:64:
14:ef:b4:c2:61:b3:96:4d:19:f6:eb:cf:2a:92:38:
c2:90:e3:ee:fe:37:19:81:86:4a:4e:aa:7e:a5:ab:
2f:d5:fb:28:e5:09:a8:21:c9:7b:3b:e7:c3:2f:51:
3d:e1:cf:3e:ef:3d:ad:01:da:0f:7b:a4:80:3f:b8:
66:29:c4:f6:b1:18:60:cf:24:c4:c0:db:69:76:3f:
3c:0a:5f:c7:d5:c9:69:ed:a1:a2:0d:01:54:0c:93:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:03:F2:0A:CD:E2:27:2B:4C:6C:B9:E4:72:22:1B:67:A7:99:40
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:7f:21:8a:18:42:3f:d2:06:52:bc:d0:cf:a6:b4:b3:40:
61:90:2a:61:f7:db:ea:ca:db:c5:76:56:2f:05:d9:6e:e1:45:
88:d5:69:fb:1d:92:e1:ea:e0:c7:6e:89:39:3c:a5:2f:5c:af:
bb:0b:9a:fa:1d:49:df:bf:1c:19:fa:d7:cf:ca:93:62:e2:f7:
74:fd:35:03:6b:70:04:34:18:e1:03:be:16:22:fe:db:fc:19:
0f:69:a7:ba:03:f8:94:37:03:56:da:54:c9:6b:91:3e:bc:88:
0f:ef:42:5c:9d:5b:9a:96:e2:b1:8d:5a:14:a4:0a:e9:02:ee:
2c:60:f7:16:8d:7d:2a:ff:f6:74:db:61:41:07:3d:42:d3:e2:
3a:94:a5:37:f4:2f:92:a4:af:d3:ca:5e:00:ca:ba:58:0f:bc:
a9:20:42:9a:6f:66:91:12:1e:be:d7:73:9d:45:76:b8:4d:16:
59:bf:c3:8c:ab:22:35:56:ab:84:37:af:dd:87:37:67:60:c0:
45:d3:7b:27:a4:0d:f6:64:77:6d:f3:e4:ae:c6:09:19:5b:42:
e4:8a:4e:f0:88:fe:6b:f5:57:0c:e8:06:a9:e1:03:20:d9:28:
5c:74:7c:21:00:23:2a:78:ce:f2:61:b6:7c:f4:fd:b3:57:41:
16:b5:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:10:33 2026 by rpki-client