
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier: /BU7GfuT9XpNHNOwIz4mVmmRlrEFaF7pEBegyLv7yV4=
Subject key identifier: 58:07:E0:D6:6A:CE:8D:7D:61:F4:85:8B:F8:41:FE:76:A1:AC:C9:E5
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number: 031C
Signing time: Wed 21 Oct 2026 01:10:52 +0000
Manifest this update: Wed 21 Oct 2026 01:10:51 +0000
Manifest next update: Wed 28 Oct 2026 01:10:51 +0000
Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: Vs9sLBc0W8PxRYtikvVKOtZZJr8TbuZ/0PlT8EFce7U=)
2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: 2Xl3z1pNnYLf6ScCsN8oADuaEpP5EV/oWQWpdcUNlJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 01:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Validity
Not Before: Oct 21 01:10:51 2026 GMT
Not After : Oct 28 01:10:51 2026 GMT
Subject: CN=6ad8111b-9957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:66:ba:91:bd:d1:da:66:1d:48:62:6c:52:
d4:ae:4d:5f:b1:b3:7d:ad:9d:16:80:76:18:74:bf:
68:0e:6d:8f:b9:2f:c1:f6:ec:19:12:91:01:f3:d7:
a6:a3:bc:d9:96:32:a9:14:6a:c8:94:e0:eb:23:ec:
5c:74:18:63:ef:7a:06:38:20:58:d4:52:5c:ee:5c:
f3:c7:58:f6:b6:01:f1:ae:29:3c:93:96:77:67:4f:
b9:07:67:2f:26:c2:56:ea:b9:95:b7:bb:a5:84:21:
57:e8:51:b1:e3:ea:f7:5c:a7:32:fb:9d:7f:66:d6:
4d:a0:08:d9:2c:dd:b5:a2:fc:a8:db:57:43:cd:f8:
4b:01:a3:88:11:ba:36:9a:0f:4a:f0:3d:fb:12:fa:
62:35:d5:9e:40:05:33:44:f7:04:ea:51:c3:fe:7e:
d1:d1:06:fb:05:e0:92:3f:90:77:10:02:1d:e0:70:
31:80:00:78:7a:b1:39:9f:7a:75:6a:3d:a5:0a:3d:
23:ca:67:fd:94:29:e7:b1:7a:d0:11:88:f1:04:05:
c0:cd:f5:ec:89:50:f6:45:7b:ab:59:7b:00:51:26:
d6:30:eb:aa:7e:d2:39:89:d4:a4:72:45:53:e9:24:
91:fa:84:6f:ee:cc:ab:fd:2c:58:a9:a3:4f:13:d3:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:E0:D6:6A:CE:8D:7D:61:F4:85:8B:F8:41:FE:76:A1:AC:C9:E5
X509v3 Authority Key Identifier:
keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:ee:2c:6a:ba:95:7c:14:58:90:2e:8a:c9:b4:93:52:7a:
ea:70:4b:72:42:8d:c4:37:42:ff:e6:eb:1f:53:19:61:e7:91:
e2:73:cb:a5:18:ff:b8:99:5c:e8:c4:a7:0a:c1:4d:08:e3:e4:
ca:4c:62:b6:84:4e:ba:15:70:47:33:ad:9a:d0:71:29:3a:8b:
8d:4f:f4:b2:c6:8f:a0:e7:15:a3:97:8d:b7:b8:13:99:cc:69:
7d:6a:fa:4d:13:0e:40:94:a4:cb:ba:33:4c:3d:77:e3:c1:1a:
f5:3d:1d:f6:ba:9e:df:90:38:4a:f9:a6:c6:bf:b6:95:42:2c:
f2:40:2e:ad:46:4c:36:ad:d6:84:17:ca:3b:0c:24:8c:29:f9:
6f:a1:da:62:fd:66:76:7a:65:51:73:96:78:cc:9e:d3:2b:45:
dd:f1:48:c8:87:cf:53:c7:d4:90:8b:86:5f:6a:f1:62:49:81:
3c:b1:66:ab:e1:b3:46:6f:f4:1a:1a:7b:53:c3:eb:08:f8:1e:
27:dd:e4:96:fa:fb:4e:80:65:f8:30:ee:16:c3:2e:37:13:e2:
f5:5d:ea:45:e1:f2:77:aa:70:bc:c3:4c:e9:7d:09:c5:17:c6:
6f:49:38:9a:20:f4:20:2b:4d:d5:1d:61:8c:aa:f4:70:a4:47:
88:95:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:40 2026 by rpki-client