
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier: uqzDDYiZmhg3ZJYxwjLRhq65ZBs9v2i5mFamxy1Sz7g=
Subject key identifier: 9E:26:2D:40:1C:4C:40:F0:2E:78:B6:9D:96:B8:5D:72:35:11:A6:21
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 0583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number: 057C
Signing time: Fri 02 Oct 2026 23:35:44 +0000
Manifest this update: Fri 02 Oct 2026 23:35:43 +0000
Manifest next update: Fri 09 Oct 2026 23:35:43 +0000
Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: S1jF1Z0T7tlqvtDG2ZY+hMYSnZSu1R794DqG9hfg9po=)
2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Validity
Not Before: Oct 2 23:35:43 2026 GMT
Not After : Oct 9 23:35:43 2026 GMT
Subject: CN=6ac03fd0-6027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:fb:54:a6:18:a5:44:cc:63:92:24:ff:ba:
66:2a:df:95:b0:a6:e5:ff:0d:7a:4d:7f:b8:40:46:
39:c6:5a:97:2f:6a:c5:1f:c0:c1:c3:31:10:dc:76:
35:d1:4a:d7:54:cd:46:2f:e3:d6:8f:ea:2c:fe:9f:
a3:1d:3e:19:6a:4f:bc:fa:6f:91:e4:5e:70:8f:e5:
75:5c:e8:4d:5c:f6:0f:f3:ea:ee:6f:37:6a:14:05:
4c:b6:af:3d:82:a0:78:ba:e2:e9:34:32:b0:b0:05:
d9:25:ae:c4:85:1b:0c:c2:e9:bc:d8:e3:c5:e8:b2:
15:e8:ac:c6:b7:e3:42:50:7d:e3:d9:e2:90:a9:48:
60:b4:5c:b1:db:db:93:20:d0:5e:c9:c9:99:d5:10:
a2:7f:ba:4c:55:7e:a8:04:72:94:36:84:68:74:5f:
08:5b:da:50:dd:64:be:b2:d2:60:93:48:a3:77:a2:
5f:aa:b3:34:40:36:a8:0a:cc:e3:5d:b6:4d:da:49:
23:7d:36:7c:2f:91:f1:c8:3a:2f:ca:4a:e9:94:20:
17:27:86:cb:c3:19:41:ce:6b:4e:2e:fc:e7:3a:56:
a0:23:44:18:ce:62:c0:a6:24:58:49:70:b6:08:98:
b9:7e:74:fa:b5:49:bc:5e:b5:78:94:d2:a2:64:75:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:2D:40:1C:4C:40:F0:2E:78:B6:9D:96:B8:5D:72:35:11:A6:21
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:91:a5:eb:ea:27:f5:70:19:18:b2:1f:f5:b8:fa:14:93:
a8:f2:25:b0:21:ea:46:cc:6b:25:73:95:8e:b7:a9:52:fd:6c:
cf:61:a1:06:67:33:d5:f9:f2:88:a7:46:4f:ba:a6:5c:56:3d:
03:6d:4d:b5:71:95:aa:f9:04:e7:3a:ad:8d:f5:88:4b:5a:63:
e4:91:10:2b:70:1b:6e:f6:26:3f:53:fa:d3:5f:a6:d3:e4:6d:
9e:ad:96:1b:8a:ef:d9:8f:04:be:a3:f7:f5:c8:e7:c5:a3:59:
b3:9f:1a:62:d1:91:d8:8e:04:a3:9f:ef:56:c8:cb:2c:33:4c:
97:9a:2d:19:79:6d:8c:2c:de:36:d1:51:b0:db:9a:28:50:0f:
8c:a3:89:1b:27:77:0f:03:f7:1d:1e:62:c8:0e:1c:72:bf:3b:
63:31:80:21:69:5a:84:01:88:40:22:c0:d3:de:73:7a:cc:a7:
d6:c0:36:a5:1c:de:6c:89:d6:85:c4:23:7b:8f:69:39:96:c8:
b7:dc:78:71:f7:28:8e:2e:a2:e2:7f:3d:61:b3:57:b4:eb:6e:
b2:c3:a3:6f:21:56:ff:7c:09:80:e7:1e:76:5f:36:f2:0f:27:
3e:23:0d:e6:f1:7f:4e:56:1c:42:73:bd:60:7b:e1:b2:6b:3d:
24:1e:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:59:17 2026 by rpki-client