
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
File: S5skzTPB9DKZGxqVwJ6iCMvl99s.mft (raw, json)
Hash identifier: POgm3RjPjF94KXiNAA5IZ8vNx6GkBY5eYjCqIBX5drk=
Subject key identifier: 94:C1:B8:4B:F0:87:9D:97:46:11:3E:29:42:C6:34:A4:AA:9F:B9:E8
Authority key identifier: 4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB
Certificate issuer: /CN=A915BD82/serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
Manifest number: 7D
Signing time: Fri 09 Oct 2026 08:31:26 +0000
Manifest this update: Fri 09 Oct 2026 08:31:25 +0000
Manifest next update: Fri 16 Oct 2026 08:31:25 +0000
Files and hashes: 1: S5skzTPB9DKZGxqVwJ6iCMvl99s.crl (hash: R6UOVbvbWYLWEoi+i5+p8PO+utvX2P+Gmu201DD5Lsk=)
2: 85CAF6160B3B11F185A1FC3F063D8C67.roa (hash: WBgwzD/CjfDPglIN1XEYd4/5WhM8OoaoxSUyq6BRdcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl
rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BD82, serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
Validity
Not Before: Oct 9 08:31:25 2026 GMT
Not After : Oct 16 08:31:25 2026 GMT
Subject: CN=6ac8a65d-ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:44:13:0f:ea:69:01:dd:49:c9:fe:f5:d8:
7f:ce:8a:32:4b:e6:9b:ff:b1:eb:18:88:5f:fa:2b:
ba:ae:5f:01:d0:8a:ec:92:73:f7:c1:94:c6:b3:7c:
e8:9a:3b:a7:e2:a0:58:65:4d:3c:e0:d8:07:23:70:
c3:72:64:3a:96:ce:fb:c3:44:51:e1:88:bb:b9:8e:
1e:ea:ab:6a:70:db:7a:4c:29:8c:e2:8e:61:86:73:
de:22:4c:12:4b:e0:43:3d:59:9f:29:a1:03:23:64:
69:a9:e4:72:d8:5c:6f:29:42:ee:a5:f5:36:2a:94:
cd:f6:b6:04:96:b9:b7:b2:5e:46:6c:a8:b1:b3:a8:
44:43:78:e8:6f:d0:d2:d7:62:60:32:e3:8d:a8:b3:
0b:fd:1e:2c:89:61:61:92:d5:76:32:a3:e5:dc:8f:
ef:7c:96:cc:7e:97:62:99:5c:26:f8:a2:6e:f7:9c:
84:80:ee:bd:d1:eb:7d:2a:0f:0e:80:40:7c:63:a4:
1d:7c:fa:2b:e4:a7:de:de:2f:97:43:37:66:96:13:
ca:0f:1b:ab:ed:52:0f:29:44:f5:dd:ee:c8:bc:c3:
2c:51:cf:d3:dd:9f:e6:b1:e6:f9:53:12:70:b4:fe:
6b:32:9d:2b:ac:15:c0:dc:1c:f3:3d:c3:0d:a7:f8:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:B8:4B:F0:87:9D:97:46:11:3E:29:42:C6:34:A4:AA:9F:B9:E8
X509v3 Authority Key Identifier:
keyid:4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:0f:85:ed:0a:4b:af:f0:04:12:00:64:0c:4c:89:fc:c0:d8:
3a:71:e8:c0:5a:84:87:0b:17:bd:6c:89:57:02:e3:ee:0e:91:
db:65:a1:96:79:b3:35:92:bd:09:82:ec:4b:b3:e7:c9:67:03:
c6:1c:1b:89:07:4d:44:0f:0d:70:f4:8e:57:ff:fc:1d:17:aa:
78:f3:67:cb:eb:85:13:c1:d4:3b:cd:32:88:34:b6:14:a4:46:
2d:aa:43:d7:30:f4:3e:bf:ca:ab:86:e7:39:db:3c:e7:22:49:
ea:bf:43:58:22:33:13:00:c7:8a:15:d2:6c:31:bf:df:79:c4:
81:22:fd:a3:6a:6b:ac:33:82:17:21:3b:9c:dd:80:99:52:1b:
1f:c5:78:5d:33:63:67:5d:18:e8:e9:9a:d5:34:90:b3:a0:f3:
e2:2f:12:e8:0c:2d:ab:be:c5:b3:96:94:e6:ae:d3:57:4c:66:
32:f2:ff:aa:f6:c6:42:09:0a:d1:e1:6e:b2:de:6c:69:06:2b:
16:80:02:f3:fb:19:5d:0c:74:67:ec:2e:07:c7:fd:2e:8c:1c:
53:6a:54:b8:3e:c0:21:c3:78:88:0a:e8:83:54:f7:15:4b:df:
48:b4:f0:0e:1c:9a:35:5e:2f:07:b2:0e:6c:3d:1c:65:36:af:
65:5e:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:55:23 2026 by rpki-client