
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File: 39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier: QN3eCG3lxhwFl3WRjYwdQRHiAYnCphCB8onjmWZbh3g=
Subject key identifier: A6:07:E7:3A:5E:7B:C9:3F:91:9E:A0:CF:36:8C:0F:4E:C6:DD:E4:48
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: 047A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number: 0441
Signing time: Sun 25 Oct 2026 10:56:42 +0000
Manifest this update: Sun 25 Oct 2026 10:56:42 +0000
Manifest next update: Sun 01 Nov 2026 10:56:42 +0000
Files and hashes: 1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: jjI8P0p2XeQFvUN4y9o4s5FXL7Bvs2L9ez8iZbAn5zc=)
2: 71A61CE6A21311F1A684C2DF4A11F970.roa (hash: 4JtPxIYcBQBdP2hgHTuTytOYOe77Kdj1wyqXRiUFIFI=)
3: 94B03866D06211F18063C43C0966CEF9.roa (hash: 19v3ETzv/zraxxZiNOp7KDXr0vhHVm7tawo9v48An2g=)
4: C0515A7CD06211F1A6D659420966CEF9.roa (hash: hlt/kQRj+wJpRMsdWMQkyczfK29SodegUEybxJPrk6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 10:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Oct 25 10:56:42 2026 GMT
Not After : Nov 1 10:56:42 2026 GMT
Subject: CN=6adde06a-6aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:0d:a0:f6:7e:6a:62:2c:6a:08:1f:7e:27:
0e:f5:be:8b:b6:01:61:c2:0d:ee:b4:b3:27:e9:ca:
08:ed:3c:fe:21:20:15:cb:eb:ea:e6:09:16:49:aa:
83:4e:1c:75:84:3a:22:3a:11:86:41:39:0a:5a:dc:
80:8d:00:41:28:1e:cf:a8:15:ac:3a:53:c6:34:37:
e7:b0:6c:77:55:88:a7:36:24:3e:c3:6e:84:15:08:
0a:f1:82:cf:b7:b2:11:18:11:0f:b5:38:8b:78:0b:
e2:8a:5b:ac:de:a8:81:20:80:6d:a6:ed:84:17:ec:
5d:d4:3e:c1:4c:18:a3:53:ca:c8:83:6b:d3:55:67:
eb:c1:94:38:80:f2:c8:84:7d:67:68:1f:ad:aa:20:
6e:9e:1e:70:a2:7a:f2:b4:24:9d:b9:25:65:9b:69:
1d:78:92:c7:c9:9f:33:02:75:5e:00:ab:d8:3a:72:
97:48:f0:50:c7:e8:3a:db:9d:35:62:14:33:c2:0d:
40:33:c8:21:9b:ba:eb:0b:57:bf:ef:17:ed:d5:36:
5d:77:07:00:61:91:13:a9:5a:df:bd:81:ca:70:01:
b5:07:92:7a:4a:19:99:97:fe:ad:86:4a:ec:f1:95:
e8:dc:bb:d4:8a:04:5e:96:1f:58:5b:35:23:67:76:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:E7:3A:5E:7B:C9:3F:91:9E:A0:CF:36:8C:0F:4E:C6:DD:E4:48
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:15:2c:29:c5:52:e9:73:e5:ae:d9:eb:07:2f:72:33:19:42:
78:d8:9e:fe:a5:b3:28:d2:3b:ce:4f:47:75:48:81:41:a7:10:
68:e7:6c:33:ae:70:cf:dd:c9:18:e1:35:96:cc:ba:41:4b:f0:
13:6b:2d:04:8c:cd:09:15:77:67:1c:10:49:54:59:79:3f:7b:
7c:05:c0:6a:ab:18:95:4d:00:7d:47:d7:b6:d2:8a:84:2a:f1:
92:66:e6:c9:dd:10:45:6a:24:6b:f4:6d:b7:c8:6d:a4:67:dc:
bf:a6:aa:f5:e6:32:c8:fe:06:4c:8f:32:90:db:dc:0c:f0:cb:
c1:a9:e0:a2:bc:30:61:9d:82:4d:e4:bb:8b:62:43:ce:09:4f:
9f:a0:76:dc:da:74:3f:76:63:cb:3a:e5:31:f9:e4:ba:2f:34:
ca:c9:5c:f2:a6:fd:a3:23:1c:13:4a:32:ca:3c:8c:c7:3d:1f:
03:8b:4c:82:a0:87:d2:d4:5b:b6:90:f6:e5:29:34:6d:36:2b:
b8:9f:32:81:87:6e:7d:ba:81:4a:f6:4a:ca:99:72:f3:97:9e:
6e:79:8f:1b:8f:70:29:b5:f7:1b:e2:dd:49:af:b6:1d:a1:fc:
af:6c:0d:40:a1:80:99:af:c8:74:a3:9f:54:81:01:6f:fa:36:
19:1c:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:03:18 2026 by rpki-client