
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: DkW7bcDiPnKbWg5WHLpacdU4M1qo0KOFhddN0Je4C4A=
Subject key identifier: 98:E6:A2:FF:66:66:9C:8F:CB:CD:65:F0:A1:CC:BD:FA:4F:0D:A2:17
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 02D8
Signing time: Tue 27 Oct 2026 01:22:28 +0000
Manifest this update: Tue 27 Oct 2026 01:22:27 +0000
Manifest next update: Tue 03 Nov 2026 01:22:27 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: W7Tb8yYC2uNJ8y8M5auJ37fKGlnn3xVCN5BvFa1bFcg=)
2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
3: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
4: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Oct 27 01:22:27 2026 GMT
Not After : Nov 3 01:22:27 2026 GMT
Subject: CN=6adffcd3-1321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:1b:13:7a:4a:e9:05:3e:a4:0f:18:d5:72:
e9:a1:89:4d:dc:46:03:57:b0:ae:fc:ac:da:d1:df:
ac:ae:f2:bb:ba:a5:42:f6:c4:85:54:14:b8:4d:2a:
0d:e5:eb:c4:ac:d2:7b:99:14:69:31:76:74:26:6e:
ea:17:24:47:e0:7b:02:ef:e7:57:a1:f2:37:85:20:
be:23:5e:99:96:3b:49:16:42:70:53:1f:28:d2:56:
fb:e8:02:9c:67:df:9f:bc:c9:4c:c7:4d:13:a3:4c:
4f:01:e1:b9:f5:c6:88:bf:8d:de:7d:3e:4d:70:09:
4d:87:3e:3a:da:5b:cb:82:8e:95:f1:51:12:8f:1c:
9a:10:c8:ce:3c:db:0b:90:d3:d8:0e:0c:1b:b7:7f:
41:0e:9a:c2:e2:a0:ac:81:2a:9a:58:4c:50:f5:b3:
ea:8c:80:04:31:cb:ea:91:59:ea:eb:cb:3a:be:32:
0d:b3:e0:b2:d2:73:93:87:4a:1d:f0:dc:2d:eb:ff:
e7:4a:3a:8e:12:a2:57:7b:59:19:9e:ec:f2:6c:cb:
44:e2:ab:6f:41:83:16:d8:3c:32:7a:18:48:4f:14:
36:69:5f:44:db:60:86:0b:59:f7:52:ef:d6:3b:56:
be:80:56:1a:c7:8c:12:d7:e4:f4:61:66:0a:7a:8c:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:A2:FF:66:66:9C:8F:CB:CD:65:F0:A1:CC:BD:FA:4F:0D:A2:17
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9a:0c:56:54:ed:e8:d5:97:94:2d:c1:72:12:8d:18:be:0c:
a4:d0:b6:59:ca:e9:eb:50:f4:eb:bc:36:38:b1:30:70:05:d5:
95:44:99:be:44:dc:d1:41:17:1d:5f:d1:f1:e1:d0:79:7c:06:
02:62:e6:fe:3a:c9:d8:7b:60:d4:59:a4:4a:6b:43:1b:41:34:
a8:8b:75:62:1e:b1:99:40:3f:b8:76:0f:14:f5:e5:3e:e4:bf:
e7:de:e6:a2:d7:15:eb:81:18:f4:51:e3:8a:e5:34:e6:47:de:
56:a9:53:9f:6b:76:ae:5f:4a:ed:7b:7d:7d:a4:6a:09:f6:cd:
87:cc:f6:76:8f:7b:79:9d:19:83:67:bd:64:86:68:24:5c:f2:
1a:1e:26:f8:89:35:0c:e3:99:51:06:33:e4:4a:94:7f:86:b9:
10:2c:f0:a8:cc:bd:7e:5f:88:9d:5a:30:f5:9b:be:c4:b2:de:
5c:60:47:7f:1c:81:3e:83:d1:93:a6:d8:cf:48:b0:50:2f:f8:
07:a7:af:57:24:ca:56:bd:be:be:64:5a:a6:3b:cb:ee:94:c4:
e3:a3:3a:17:76:3a:eb:3d:f1:22:f8:08:76:89:9b:3b:d4:e4:
f9:bc:e4:82:e3:c1:9a:9c:98:90:d0:cc:b2:a0:49:53:5c:aa:
71:df:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:20:00 2026 by rpki-client