
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier: mWgTFsWme9hSQ6a4s/V65c6E6+3IgFU4h+je2733JS4=
Subject key identifier: 5F:8E:01:AF:A3:4C:FD:C3:9A:68:44:94:71:EB:59:91:02:46:82:EF
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial: 0869
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number: 085B
Signing time: Sat 24 Oct 2026 21:01:55 +0000
Manifest this update: Sat 24 Oct 2026 21:01:54 +0000
Manifest next update: Sat 31 Oct 2026 21:01:54 +0000
Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: R9rgHhzz8wUV0luPQOOF7SJAls1NuqopE8UYnBnmht8=)
2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
Validity
Not Before: Oct 24 21:01:54 2026 GMT
Not After : Oct 31 21:01:54 2026 GMT
Subject: CN=6add1cc3-1e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:93:21:fe:aa:0c:01:7e:c3:2e:03:fc:47:
53:5c:ef:d6:e4:dc:ac:15:68:e8:92:b3:fa:14:5e:
f7:f8:91:2b:6b:d4:d9:d7:19:2d:dd:56:0f:af:eb:
99:e0:ae:70:39:ea:65:b0:1e:d9:bc:cf:63:73:86:
68:e1:a3:91:d1:de:80:4b:03:f0:b3:a5:a7:cf:ca:
a5:67:0c:29:e2:16:d9:8a:0b:5c:8c:01:8e:6f:91:
95:ef:51:30:5c:59:57:18:87:c0:0b:65:c4:97:ae:
0f:48:69:46:e9:c7:c4:47:0a:c7:5a:e3:70:cc:2f:
ee:8c:69:ef:67:93:69:e3:60:07:a9:2a:07:b9:e0:
64:7e:c0:bc:cf:5e:f4:aa:99:c2:d5:0f:aa:84:85:
a8:f4:c4:20:3e:45:80:6b:c3:f0:ba:6e:42:95:95:
5a:0b:26:0a:bb:86:2d:2d:a4:b2:60:45:95:40:29:
d5:f6:eb:79:2a:af:1c:dc:ff:be:81:c7:cc:88:02:
bf:0a:76:4c:4a:04:2e:8d:b8:8a:44:2a:24:c2:66:
c9:1d:9f:4a:44:82:fa:c5:ae:a9:07:df:bf:19:fd:
b3:38:52:e3:5c:df:1c:2a:47:f5:c9:55:a8:36:56:
15:5e:57:f1:25:27:9d:5d:43:fc:6b:d1:2e:91:c0:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:01:AF:A3:4C:FD:C3:9A:68:44:94:71:EB:59:91:02:46:82:EF
X509v3 Authority Key Identifier:
keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:a3:dd:61:e9:78:cb:6a:2f:e6:10:54:86:c6:1d:e1:b1:
6c:59:35:e5:f8:3e:d2:5f:54:38:07:ce:2d:1f:e5:31:db:23:
e4:f4:92:71:0e:e9:11:c1:5a:0b:fa:ed:60:a1:86:57:2b:eb:
9f:9e:2b:1d:6b:8f:55:f6:4b:81:b6:bc:94:89:bc:ca:12:f6:
e8:3e:25:8d:84:97:8a:06:6e:8e:eb:03:d8:61:bc:04:4d:4e:
ad:a7:b9:c2:2e:24:3a:99:e8:24:14:94:5b:1f:5c:e4:73:21:
9b:76:5e:83:1a:da:19:5a:1c:84:7b:f7:17:cb:2e:1b:38:86:
60:b2:79:67:d9:47:7e:f7:65:82:dd:ff:ef:de:96:32:9e:72:
64:34:cc:ae:33:25:39:0a:14:44:9a:d0:10:49:66:79:06:45:
ed:46:c6:f4:f6:d1:aa:26:72:cd:01:ff:e0:ce:42:71:01:ee:
d7:bf:00:d9:62:c9:cc:c2:ce:4a:02:80:96:7f:5f:4d:44:cc:
b0:91:4f:e3:91:80:ab:eb:71:6d:3e:46:a5:eb:2a:97:83:85:
b7:88:1c:f3:93:42:4d:01:fc:bc:c8:38:09:91:5d:76:de:2f:
04:7c:78:60:63:c9:49:cf:8c:b1:93:f8:1b:0e:19:db:92:49:
82:13:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:00:56 2026 by rpki-client