
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier: 6NXBvt94jneLO2SHefXCvMduHh4GL3bhTC7ATiGsDdQ=
Subject key identifier: A2:0D:5C:52:FA:2D:7C:2B:DB:61:45:B8:BC:37:FD:41:7F:53:10:D2
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number: D6
Signing time: Wed 19 Aug 2026 07:23:40 +0000
Manifest this update: Wed 19 Aug 2026 07:23:39 +0000
Manifest next update: Wed 26 Aug 2026 07:23:39 +0000
Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: BQcyRTCQ0qgSo7SfbAEXRqpmYyIRt1IY0HhvGFG6BC8=)
2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: b7KSMqHlW/fLzJCiZxf5k1GieLFoYTeHx+A/fvcNQj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Validity
Not Before: Aug 19 07:23:39 2026 GMT
Not After : Aug 26 07:23:39 2026 GMT
Subject: CN=6a8559fb-3232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:9b:b9:67:ab:25:34:bf:f6:77:d8:f7:65:
33:55:a9:6b:41:ce:30:cd:8a:cb:23:74:87:de:f5:
b2:1a:37:9e:52:5e:16:61:23:63:19:95:ea:b3:ae:
ed:51:73:1d:55:40:b7:64:3d:03:6c:67:81:0a:47:
cd:80:ee:e0:0e:35:fc:04:04:c0:9b:d7:7b:2b:5a:
be:c6:5e:74:2f:fb:55:52:43:44:5f:91:99:8d:ed:
9c:5f:8e:14:25:ef:33:12:8b:c3:5d:32:03:32:15:
f2:bc:7b:2b:bb:78:85:93:c1:14:6c:b3:8f:70:f7:
be:0c:51:98:3a:1b:3e:29:5e:26:0b:0d:32:e2:c3:
7d:2f:2f:6b:f3:e7:d4:0a:f2:21:47:b3:7e:5c:7e:
ae:99:58:b5:9a:a3:6f:e3:20:08:9a:22:c3:2e:41:
da:6a:99:5c:87:ff:28:4f:70:31:dd:7a:a9:31:e7:
04:63:17:d8:78:57:c4:f3:11:2c:03:62:8a:be:b9:
34:9a:3c:9d:23:69:bf:a4:9c:5b:27:e9:77:84:a9:
14:bc:52:95:96:bd:1d:ad:3a:a9:f3:44:e3:04:0c:
0a:ea:a4:03:ea:2b:6e:a0:23:08:21:6b:43:75:d1:
4b:a9:a3:6a:e4:5a:bf:51:79:51:47:71:bd:92:78:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0D:5C:52:FA:2D:7C:2B:DB:61:45:B8:BC:37:FD:41:7F:53:10:D2
X509v3 Authority Key Identifier:
keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:11:e0:05:27:57:d8:87:f9:3d:0e:9e:9c:fd:84:37:47:
7a:04:77:f2:7b:17:22:05:33:3a:4c:60:82:0e:7b:6c:e9:4d:
58:58:df:93:ee:5f:2e:13:d9:88:e2:07:0a:d7:03:e5:93:49:
47:5f:f7:f0:c5:9d:25:e6:c8:cb:e8:6b:7d:9a:b3:55:0e:cb:
52:c9:d6:62:3f:f9:de:74:7f:68:80:88:3c:8e:2c:f8:09:62:
3f:e8:1b:83:3f:e5:0a:22:0b:8a:9a:0e:46:6f:2f:89:ad:66:
b7:b5:c7:81:ad:0c:2f:cb:fb:50:55:41:44:c1:0d:1c:d9:7e:
de:77:be:28:c9:b3:05:44:1f:08:45:d3:57:2f:e7:43:47:09:
88:65:a8:79:f4:91:c2:0d:26:33:42:a7:ac:eb:37:02:07:57:
e8:8f:0f:0f:45:a5:04:af:0d:e8:de:b4:16:b5:db:5f:24:13:
57:81:6d:1b:2a:00:1e:c9:ad:d3:0b:2f:ee:3d:4a:8d:df:9a:
be:68:2d:81:bf:7e:1b:c5:27:74:22:3f:cc:64:6b:ab:1c:25:
b5:ad:74:01:fb:2e:ef:73:0a:d8:9a:65:66:c1:2c:11:0c:c0:
39:e1:bd:28:2a:bb:da:4b:ab:c4:b9:83:df:39:95:de:64:4c:
93:b7:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:44 2026 by rpki-client