
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: Oo2ANsocdDDIU9MB9ROZa1VjMhW9LQXtl0fkMtfJRAI=
Subject key identifier: E8:E3:89:19:A0:49:1B:BB:84:32:61:B5:56:9C:13:30:41:20:93:21
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 10AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 109B
Signing time: Tue 18 Aug 2026 17:33:50 +0000
Manifest this update: Tue 18 Aug 2026 17:33:49 +0000
Manifest next update: Tue 25 Aug 2026 17:33:49 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: 5GjOBWZrsjxryG9j/uK6L3ZtF4SkCbcdOGzQt7XN234=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4266 (0x10aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: Aug 18 17:33:49 2026 GMT
Not After : Aug 25 17:33:49 2026 GMT
Subject: CN=6a84977d-9339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:33:ad:4d:3d:c4:a8:1a:75:4a:58:4c:ff:
a0:88:be:93:e9:2a:48:9f:10:69:8e:a6:8c:99:10:
89:9b:b0:16:c6:17:d6:fc:d5:e5:34:8d:8c:d2:be:
4d:b7:c1:1f:5b:a9:a8:92:28:0a:7f:20:14:23:67:
3a:69:4b:a2:67:f2:17:52:5c:bf:92:42:a3:be:43:
fa:8f:d8:c4:2d:38:66:eb:ac:59:8f:37:18:b0:c3:
c6:50:7f:15:54:da:5a:13:d3:a8:24:fa:77:dd:0b:
0b:23:9f:e6:f0:ee:0a:a3:52:db:fe:a7:78:79:0b:
5c:f2:f6:66:df:2d:18:51:2e:1d:62:11:1c:e2:fc:
be:ae:84:9d:25:c1:31:24:d9:80:c4:d5:e8:89:2e:
3a:e2:27:b3:92:50:00:ea:01:bf:6d:45:26:be:51:
4c:8a:ce:95:d1:87:7a:04:2a:f2:8f:b4:a1:a1:ac:
61:e3:b7:0d:3f:bb:d4:71:21:68:8e:3e:3f:e5:ea:
71:01:49:d1:20:d1:ce:2b:60:db:89:fa:32:96:84:
6a:41:53:a8:63:78:01:fd:e2:1b:0f:20:46:0e:99:
7c:15:ce:a8:a2:b5:b5:2d:8d:29:16:69:c6:ae:32:
77:fd:f1:2c:58:c3:8a:de:3b:24:5c:30:19:28:a5:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:89:19:A0:49:1B:BB:84:32:61:B5:56:9C:13:30:41:20:93:21
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f0:44:c5:f3:e5:4f:22:e6:b6:bb:1e:89:83:0a:51:5c:86:
58:04:5d:7d:05:a8:d2:ba:35:30:5a:23:4d:9b:97:2e:fa:68:
e9:a5:bb:53:63:29:e2:9d:ce:78:1b:73:42:1c:3a:9e:2c:91:
5c:6d:98:8f:ef:c7:ac:d7:85:5f:7d:44:8e:14:f4:90:05:2f:
71:1d:17:d2:cf:2b:cc:4d:09:72:7b:f7:f3:a6:57:33:4e:91:
42:94:18:01:29:9f:38:94:1a:50:be:57:c2:e1:c4:dc:b7:10:
5e:25:d8:cb:44:ac:28:40:84:54:a8:43:e9:12:ce:a8:af:f8:
3f:24:54:70:16:a3:fa:79:b8:a3:c4:3e:ee:6e:e1:42:b8:59:
7c:9a:36:6a:17:12:0c:c9:ea:c8:9f:1a:e0:c2:1f:77:f2:82:
43:02:80:61:ac:28:69:6f:44:5c:a1:54:6d:b2:88:ff:34:f8:
48:b8:6f:eb:40:59:8d:09:90:6d:24:ec:5c:9d:1b:b7:ff:08:
85:c0:06:57:f5:55:65:2e:1e:f8:94:f9:9c:07:be:1c:37:8d:
b7:95:b6:01:fc:5f:2e:95:38:00:20:ee:21:9c:59:78:bf:3d:
9e:40:b7:cb:e9:df:4f:04:9e:db:0f:92:bb:62:92:62:f4:ae:
70:a2:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:55 2026 by rpki-client