
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier: G8sPfHbvglIiObRAy2Nj5pLCSZznRCZytR5fOsEayCk=
Subject key identifier: F2:70:66:D0:A8:6C:61:92:7D:9B:49:DD:75:28:90:B7:FB:66:EC:67
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial: 128A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number: 127C
Signing time: Wed 30 Sep 2026 17:14:43 +0000
Manifest this update: Wed 30 Sep 2026 17:14:42 +0000
Manifest next update: Wed 07 Oct 2026 17:14:42 +0000
Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: KZVFJDu+iht8+oxHHVs2O3V3IlafVZn3iEmFHfBVnbE=)
2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: rNU2fL2cgYDnmCSc4qzqdrF/DYETyERL6c8NE7KPpLs=)
3: C_DTKG6ykEQfwF6Sw61NF19Z4ic.asa (hash: WMYPqA2OA2lDOnkN5XlPtmSbO7dsliqt40wmf4AqPyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 17:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Validity
Not Before: Sep 30 17:14:42 2026 GMT
Not After : Oct 7 17:14:42 2026 GMT
Subject: CN=6abd4382-7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:eb:99:a3:82:f5:9a:95:98:37:0c:42:d5:
96:14:64:fe:cf:bd:5b:82:d2:11:b6:24:ce:65:77:
bd:28:e6:b8:16:e8:a7:e8:e9:9b:dd:f3:ac:3b:4d:
51:c1:b2:84:ca:b8:06:62:b7:a8:0a:82:b7:76:30:
f6:d7:b4:8d:8e:79:2c:12:d2:39:39:62:5b:c1:dd:
94:50:01:d2:7d:78:de:5c:23:d2:46:25:90:68:56:
77:db:1f:37:9a:06:f1:a6:78:d0:5d:1e:8f:3f:b2:
17:c1:c6:89:a6:96:16:39:1d:3f:1d:dc:53:1a:d2:
cb:8e:2e:76:02:39:ea:e7:d7:c0:28:d7:9f:09:a3:
c7:89:ab:55:c0:73:47:fe:46:20:2c:d8:76:0b:c9:
1a:90:ba:6e:f1:38:ae:3e:35:b7:09:68:79:a2:3c:
9c:a5:2d:71:ca:dc:ad:76:4e:c1:a3:48:a2:9a:0c:
ec:43:eb:d8:4c:ac:ef:00:e0:55:05:a7:c8:3a:89:
fb:aa:5a:b6:16:10:a1:21:31:c6:fc:07:a9:8f:8f:
7f:f4:38:ca:97:e3:ef:0f:ca:f5:d5:d7:29:d4:e9:
da:99:c7:0c:6f:25:34:d6:a8:87:8a:2c:5f:b9:1d:
13:03:a1:92:57:e5:85:1a:65:89:32:6d:c6:67:c9:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:66:D0:A8:6C:61:92:7D:9B:49:DD:75:28:90:B7:FB:66:EC:67
X509v3 Authority Key Identifier:
keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:72:0b:6d:ae:a4:7a:32:06:3f:d9:e5:c4:65:aa:4e:12:
a3:cf:83:b3:32:fe:98:76:7d:3b:6c:70:bf:b8:86:08:31:22:
41:53:fe:85:e8:c9:c8:6b:a6:46:60:02:cd:16:ba:72:e8:3d:
f5:1b:eb:8f:a3:0d:bf:03:a0:5c:92:65:fb:36:29:15:49:9a:
03:ec:86:72:7c:8e:b2:ff:6f:96:b1:c5:5d:93:03:3e:6d:a7:
86:6a:c5:61:da:0f:e1:c4:23:3a:eb:0a:61:23:1c:90:18:ed:
d7:5b:8b:d3:e2:18:b0:a9:67:95:05:53:67:b6:28:aa:5b:bd:
e3:90:e3:f2:86:84:e9:84:73:24:ed:9b:cf:9d:88:d8:c8:dd:
1b:69:c3:c2:ee:f3:63:1b:d9:7c:a9:6c:54:6e:99:64:dd:b2:
d4:09:a0:ef:34:1a:38:68:f2:7e:d6:19:d0:34:52:d6:99:f1:
e0:8b:d5:f5:fd:7e:e5:6a:85:8e:5e:cb:3f:28:23:f2:14:73:
51:40:de:e9:cd:2c:e5:19:f6:f3:a6:7c:7b:8f:0d:a7:59:3f:
06:83:88:a1:03:fc:a2:23:38:57:a6:e2:7f:a5:af:87:30:8c:
8d:c7:99:83:4a:62:ae:4d:85:d7:a3:de:43:73:ab:e8:34:64:
d0:b7:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:23:06 2026 by rpki-client