
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
File: fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft (raw, json)
Hash identifier: AtTRR/CKYjGqKUQkM9mD3+q58Mgxm3RMBgg5+fUXn44=
Subject key identifier: C2:11:13:94:0A:CF:45:F2:CD:7C:DF:21:17:18:30:34:FB:C5:23:83
Authority key identifier: 7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4
Certificate issuer: /CN=A915B53B/serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
Manifest number: 14
Signing time: Fri 09 Oct 2026 09:54:38 +0000
Manifest this update: Fri 09 Oct 2026 09:54:38 +0000
Manifest next update: Fri 16 Oct 2026 09:54:38 +0000
Files and hashes: 1: fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl (hash: TWbuj361Cq5c5/46KqG53tSBs/gjEFMZlFEutLEba+8=)
2: 10FAFA36ACD811F1A413C9326C11F970.roa (hash: K0WYHVmvlzu39e9QCpMkN/Uieb8ADNB5R9SM75i/GcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl
rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B53B, serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
Validity
Not Before: Oct 9 09:54:38 2026 GMT
Not After : Oct 16 09:54:38 2026 GMT
Subject: CN=6ac8b9de-ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:e0:be:a1:dc:01:62:5b:5d:5d:e6:dd:b8:
b9:8b:17:23:23:89:af:f4:65:65:34:63:e2:31:7c:
04:04:56:4c:b1:8f:1a:21:2c:a6:34:b0:6c:e2:f3:
2d:5f:7b:ce:34:14:df:3b:57:90:d0:4b:3c:12:ea:
13:95:ec:f1:2c:41:23:81:1c:87:4f:13:27:b2:47:
59:b3:79:1c:4b:43:97:71:6b:b6:b6:84:d8:51:09:
db:ea:77:b8:4f:f3:97:a8:36:8c:fb:ba:55:d0:92:
5a:a2:5a:e1:f0:93:1d:9c:33:19:0b:43:54:8a:93:
16:cc:49:f6:c5:e4:b8:73:39:6e:c2:0f:e9:96:d9:
16:fd:12:dd:88:5e:c4:d7:5f:c9:36:63:66:55:df:
36:9a:b1:4e:41:29:af:7f:8c:6a:4b:60:84:8b:59:
bb:77:d6:f1:89:f3:58:60:2d:a0:aa:92:11:da:5d:
08:32:8d:76:19:d0:4d:fe:44:14:97:ae:58:d8:7c:
72:6b:bb:08:df:fa:0b:5f:9b:7d:1b:ef:82:a1:88:
f2:7c:12:8d:ba:94:04:10:a1:07:83:15:00:1a:82:
5f:d7:d6:31:b2:c6:60:7a:77:5a:6e:cb:fc:fd:6f:
db:cf:ac:d7:82:97:b8:94:30:ca:f4:66:9c:5e:90:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:13:94:0A:CF:45:F2:CD:7C:DF:21:17:18:30:34:FB:C5:23:83
X509v3 Authority Key Identifier:
keyid:7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:18:80:fa:df:a8:a7:7c:ec:fb:03:40:36:bb:d8:b4:67:
10:62:cd:de:26:e0:62:e0:ea:b0:b5:d9:d5:ab:35:60:9e:eb:
47:4d:81:62:32:7c:8b:25:ec:39:4c:cc:b6:40:8f:39:b4:6e:
62:e6:3c:d7:da:d6:7b:aa:74:25:c4:31:d3:f1:a0:ad:96:cd:
02:55:d4:2e:89:1f:68:c3:5a:58:60:6a:0d:e7:6e:06:08:b0:
d5:73:2a:f0:e8:31:fc:47:3d:06:dc:96:07:b3:16:09:ec:06:
04:5e:2f:93:0c:a8:0e:49:a0:0f:48:2c:dc:c9:33:d4:85:ca:
f4:da:f3:1e:2b:59:82:ed:80:56:fe:ac:05:76:57:94:64:3f:
67:60:8a:54:13:1d:a3:a8:b7:b7:c8:df:72:f9:7b:2f:5f:b1:
05:fd:00:81:55:00:72:fb:ca:e5:65:c5:1e:18:1e:e8:45:79:
ea:c2:18:81:f3:01:d2:12:74:d8:f0:f2:11:45:ad:18:b8:26:
05:4e:cc:90:38:1c:fb:d3:8b:d5:42:59:b9:f6:3c:ce:52:9b:
89:d7:bb:f2:9c:9e:ae:89:cc:34:3d:1d:f4:0a:40:f6:9d:0a:
21:81:7b:4a:56:fa:36:b7:09:52:6d:02:62:4d:e6:5a:b6:e5:
ec:25:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:32:28 2026 by rpki-client