
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier: hF8nOYARgx7WDmnyXbCCCC828E5O9VTWVBtFh1CbWuk=
Subject key identifier: 89:02:C2:44:A0:BC:0B:F5:A8:3E:66:16:81:CE:B9:14:59:39:98:54
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial: 02DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number: 02D5
Signing time: Mon 05 Oct 2026 01:27:51 +0000
Manifest this update: Mon 05 Oct 2026 01:27:51 +0000
Manifest next update: Mon 12 Oct 2026 01:27:51 +0000
Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: D0rDowGP5rAk6Vg45tSNFukymVNXDeQeDgFS0OpsDTc=)
2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: 9EODo3VTRqYwzjAsn5kOJ1RRcS5qGi8SpwuOaYpySHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Validity
Not Before: Oct 5 01:27:51 2026 GMT
Not After : Oct 12 01:27:51 2026 GMT
Subject: CN=6ac2fd17-678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:b7:8c:bb:d3:9e:a5:6e:0b:6f:5f:b2:cf:
ec:91:5b:0c:78:f2:f7:5e:ab:21:e0:6f:4f:18:c9:
15:0a:4a:9b:f1:c1:71:b9:1e:8f:07:1c:dc:33:19:
63:18:9d:38:36:bc:03:68:f2:52:cb:9c:58:a7:9c:
a0:a2:36:95:56:71:6e:4e:21:c9:9d:7d:71:ab:41:
f1:e4:b0:71:a5:fe:07:45:0f:25:f3:6f:4f:e8:5e:
f3:99:21:bc:d9:79:30:9a:0e:23:a2:ef:6f:0f:6c:
8b:69:e6:5d:5d:0c:7e:03:cd:1b:f3:79:9a:bc:cc:
f7:86:39:34:87:9c:f6:15:61:30:a4:90:ed:ca:84:
19:7c:93:0b:e9:9b:a2:e4:3b:7d:b6:5f:23:f7:30:
34:f4:8b:44:0b:00:50:ea:27:78:47:e6:ea:df:db:
83:4a:cb:90:eb:2c:cd:0a:ea:3e:b8:bb:cf:e5:d2:
39:d8:86:b2:3e:5e:3d:06:c9:09:88:65:0e:10:04:
16:96:5e:58:67:3a:43:9c:87:2c:9b:91:eb:bc:ba:
a5:95:51:f5:8a:e2:1f:12:61:fe:59:f0:9c:fc:e0:
e9:7c:e3:a5:e8:21:11:31:75:de:ce:23:9d:0e:58:
21:91:70:43:87:5a:d1:1c:69:5a:4b:ac:44:b0:7e:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:C2:44:A0:BC:0B:F5:A8:3E:66:16:81:CE:B9:14:59:39:98:54
X509v3 Authority Key Identifier:
keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:7b:9d:22:f4:c1:ea:06:d1:ad:98:9c:17:49:28:36:07:4d:
f1:6b:0c:b4:da:a6:24:a5:67:17:34:8f:5e:3c:b5:fe:0a:08:
5d:0d:a0:c7:b6:2e:89:be:b3:86:d4:0f:3c:4e:e3:3e:af:99:
0f:96:9d:16:15:38:a8:51:06:d6:55:0a:75:5f:04:a8:bc:76:
bd:9d:6a:46:c7:f6:ff:eb:f6:f5:0e:61:80:ef:e8:67:b1:75:
09:ac:43:73:b7:12:af:7c:30:62:bb:43:d5:a8:07:bb:00:6e:
ae:94:8e:f7:0f:34:66:5a:a2:8c:8b:7f:d7:b2:9c:29:bc:1e:
a7:e6:9a:1e:0d:38:65:b1:f2:10:b7:c9:77:a6:c9:4b:0b:4f:
b8:96:51:fc:74:0f:c8:d0:18:1c:0c:6a:e1:46:d9:fa:c1:85:
25:a5:6d:35:82:29:47:95:52:29:33:e8:08:2b:c8:45:a5:06:
04:2e:de:ab:0e:d4:34:e4:a9:24:62:19:47:0f:0d:f9:21:a0:
ef:3d:c2:7c:68:c9:2e:a7:e3:c4:b4:31:a8:c3:5f:91:63:d1:
9c:ee:18:40:af:6a:ab:ab:69:cf:41:00:ab:9b:58:29:85:8b:
9b:4f:b8:89:33:17:0b:8a:9d:72:87:96:d8:0d:a1:ca:6a:73:
39:21:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:58:43 2026 by rpki-client