
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json)
Hash identifier: 7sxUlx8zO+F956328d1xJ1w8iK4UHh5fDbqM87JJPeA=
Subject key identifier: 03:47:99:8A:FE:26:61:FC:3C:AD:7C:A2:8C:49:2C:49:E3:41:28:41
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
Manifest number: 0315
Signing time: Tue 21 Jul 2026 02:06:27 +0000
Manifest this update: Tue 21 Jul 2026 02:06:27 +0000
Manifest next update: Tue 28 Jul 2026 02:06:27 +0000
Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: 0X8aDkG0nwVMkEzF8YDnUrKLBfZbIoFEVx4BLi1FOtA=)
2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: mYlWkTExX4PpePww15vUHKurfA1SwY/bbac2OYhbj/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Validity
Not Before: Jul 21 02:06:27 2026 GMT
Not After : Jul 28 02:06:27 2026 GMT
Subject: CN=6a5ed423-dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:4a:31:fa:c7:14:30:0a:4e:29:18:ef:2c:
c4:98:2c:4c:cb:1d:c7:41:c4:ab:20:e3:9f:4d:9a:
16:90:90:c1:6d:17:87:ce:97:95:f5:61:7c:4a:bf:
11:c7:71:d1:21:1d:25:54:10:7f:1f:17:00:55:62:
ca:f2:cc:83:9f:7c:42:ef:7e:a6:d0:0b:2c:9d:21:
98:7b:ac:82:4e:ab:ff:59:68:59:7c:73:b5:ff:81:
39:e7:f4:d8:a0:0d:39:91:47:00:b2:e4:74:dd:38:
2d:7c:8e:c6:c9:3e:ef:25:1a:2e:19:56:84:56:c7:
a2:72:f8:0e:31:eb:4b:9a:d0:ec:13:2b:cf:67:7c:
2d:95:5e:cc:9e:3d:0f:e2:12:73:dc:cb:0b:d1:a6:
ce:9e:57:5c:27:c0:0b:13:d5:47:6b:37:f8:b5:72:
80:41:e0:e9:78:71:06:7c:96:ec:b0:d0:7b:63:c6:
df:7f:2d:55:a0:a4:c9:88:48:8e:6f:c0:3c:50:24:
a7:67:13:9b:fc:7d:2d:2b:8b:3a:95:ed:c5:6f:64:
70:f0:8f:80:8a:81:0b:cb:ec:fe:fa:bc:f8:2e:55:
34:5c:91:ab:fe:5c:d1:75:a4:dc:89:4d:86:e9:3c:
d7:99:90:df:b5:80:38:d2:18:0f:17:24:7f:54:94:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:99:8A:FE:26:61:FC:3C:AD:7C:A2:8C:49:2C:49:E3:41:28:41
X509v3 Authority Key Identifier:
keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ee:23:11:ce:38:ad:f6:05:74:49:c4:35:cb:34:28:fc:be:
9e:86:da:b2:c5:db:2c:c4:a2:95:d5:c5:09:bb:01:36:7e:94:
5d:06:00:0c:59:17:ef:c3:d5:ba:19:b2:01:28:18:34:05:57:
f4:f7:75:41:be:c1:0b:d5:11:7a:58:e0:f0:49:5e:b5:80:59:
d7:93:0f:fc:08:ca:92:60:5b:eb:c1:1c:89:0f:78:d0:91:0f:
fc:83:c5:56:72:a7:da:1b:45:73:60:06:b2:ef:2e:0b:d7:b1:
68:f0:bf:18:f8:d2:73:3d:51:c9:a8:52:46:bd:40:44:68:07:
cf:70:79:e5:d4:0e:d0:5c:49:2e:ca:49:7a:25:37:24:55:00:
ee:90:01:cf:a9:ea:f0:bc:88:a3:43:14:43:64:ac:f3:ae:d1:
35:f3:07:98:83:39:f9:fd:32:bd:69:d2:8a:14:aa:ca:35:b7:
c3:b4:56:88:e8:8d:db:57:a3:40:0b:c6:62:43:71:1e:82:90:
a2:6b:7f:30:6d:c7:9b:f6:40:65:11:85:d8:44:30:8a:41:e2:
bd:9e:66:35:55:08:64:b6:94:bf:71:f2:88:9a:37:1e:9e:d9:
e7:21:fd:ed:53:2b:19:11:bc:66:3e:d6:33:81:8b:30:ee:a9:
71:95:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:15:22 2026 by rpki-client