
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json)
Hash identifier: x1CZjD67WJdAGm82bBc8PnJ0tjXlT9IMDB5eIathYi0=
Subject key identifier: FA:0B:FE:DD:B4:19:EB:F5:83:52:DC:A2:1B:50:9D:03:3C:07:5C:AF
Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Certificate serial: 3598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
Manifest number: 3582
Signing time: Tue 18 Aug 2026 14:48:04 +0000
Manifest this update: Tue 18 Aug 2026 14:48:03 +0000
Manifest next update: Tue 25 Aug 2026 14:48:03 +0000
Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: 3IzN8n9i1epyyCdh3Bf/NKNNWLoRsco/GJ7nGwx06W4=)
2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13720 (0x3598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Validity
Not Before: Aug 18 14:48:03 2026 GMT
Not After : Aug 25 14:48:03 2026 GMT
Subject: CN=6a8470a3-7dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:93:0a:ba:46:89:fe:7f:79:8c:d5:a5:bf:
8b:e5:7f:7e:27:9a:c1:1b:ab:79:ae:f5:39:02:8b:
0b:a6:d1:58:86:9b:2c:78:0f:fe:ca:58:d3:78:21:
21:94:99:73:ab:55:15:27:95:67:ff:b8:94:16:42:
e5:c1:a0:3d:ce:44:9a:d4:4a:e0:bd:77:43:66:b7:
5d:31:e1:a2:37:01:51:81:74:f8:0c:3c:99:df:d6:
1d:d5:e5:ec:3f:3d:0b:1e:cb:73:ab:31:6a:41:30:
d0:29:4a:20:ed:fd:c5:f5:ab:8d:74:c4:81:5b:85:
bd:0e:c2:fc:92:a0:20:68:50:3b:ce:dd:96:a9:74:
40:56:60:68:ce:ad:56:95:9c:94:e2:e2:1d:20:43:
98:2e:20:c3:73:c2:b4:da:64:3b:04:e9:fc:19:7b:
b6:b2:a1:e7:b1:7b:c6:3b:c2:d9:3e:53:f6:25:c2:
e8:cf:52:44:3c:42:41:05:f9:c6:5f:a3:c7:71:e0:
e2:90:71:85:70:45:d7:64:bd:79:23:c5:01:e0:ef:
6d:df:1b:69:9a:d1:e1:f9:84:ed:66:91:a9:57:24:
92:f3:8d:b1:71:fd:4d:d8:a3:8b:9b:55:60:49:c4:
78:fd:d9:6c:30:d2:bb:49:e4:43:0e:54:a8:2e:38:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:FE:DD:B4:19:EB:F5:83:52:DC:A2:1B:50:9D:03:3C:07:5C:AF
X509v3 Authority Key Identifier:
keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:8e:2a:b9:a1:ae:f4:c6:34:53:40:17:19:4b:9c:e6:80:
e2:d7:ec:ed:7c:d2:51:ee:c5:e6:65:47:7a:6b:c1:31:5f:58:
de:e4:fe:fb:11:cc:a5:47:2a:13:b4:09:2f:c6:06:a8:85:22:
5b:ba:ba:bb:64:ba:d6:b3:43:9a:c6:ef:c0:67:7e:a9:f3:6e:
91:02:15:99:ac:7c:c6:be:7e:5b:5a:8d:31:e0:58:9b:52:1f:
de:e3:28:7b:59:2f:b7:e0:9e:4d:03:5c:2d:b9:3d:e2:c9:e6:
7b:70:da:98:d3:e2:3e:d5:3e:8d:32:05:3d:e9:ab:6c:e3:42:
93:25:6f:61:49:f7:e6:74:1c:37:c5:f1:38:ad:6d:f3:80:42:
ea:78:c3:f5:a0:a4:b9:a5:db:c0:3e:57:0b:36:85:8f:c0:ad:
fc:d6:ca:c4:9d:03:19:07:67:e4:1d:b9:cd:83:e9:f2:36:bc:
99:8d:2f:e8:3e:4e:48:4f:13:8c:e0:e4:2b:2d:c3:32:50:ce:
65:9f:43:cd:5e:8c:df:19:58:51:4b:d0:00:c4:c9:63:5a:c7:
6b:34:3a:d4:76:4e:f4:e6:39:2a:21:c8:96:7b:99:4d:1f:d9:
0b:2c:c9:19:a7:67:9a:f5:e5:49:31:32:ec:f7:85:74:7a:68:
cb:cd:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:05 2026 by rpki-client