
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: NxOX9KDX7HrI9MrTInoGkdaO+2dYFLAhHsLrkTt2rho=
Subject key identifier: DA:F9:58:35:31:CF:31:E5:BE:B7:77:F8:69:55:31:78:CE:C6:CD:03
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 1429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 141C
Signing time: Sun 04 Oct 2026 16:56:01 +0000
Manifest this update: Sun 04 Oct 2026 16:56:00 +0000
Manifest next update: Sun 11 Oct 2026 16:56:00 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: 5xHwXjOrbf9QiEy8PFRfx+PAfvp+kv9BKGhCScGkkDc=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5161 (0x1429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Validity
Not Before: Oct 4 16:56:00 2026 GMT
Not After : Oct 11 16:56:00 2026 GMT
Subject: CN=6ac28521-b465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:e5:8a:25:e8:82:43:1a:3a:97:c0:be:e4:
67:47:3e:b0:ed:2d:bd:d9:50:ec:46:35:19:9e:e5:
22:1e:d3:7f:4b:a3:69:0a:2c:73:e3:6c:ce:24:43:
bb:ea:4c:05:35:f8:ff:fe:19:b1:f8:da:54:2a:cb:
b1:46:a5:a4:d1:7a:5a:e7:a0:00:e6:78:07:a7:b4:
61:ac:51:2a:98:60:e0:1d:00:d7:f2:03:6b:27:23:
6e:e4:81:02:7e:33:fe:52:44:8f:7c:c8:6e:27:3e:
d5:55:9e:d0:7f:63:83:07:07:59:e7:20:18:f3:25:
77:c9:af:7e:05:00:1e:4b:49:f0:24:69:ef:30:df:
e6:0b:18:ec:85:ed:e6:dc:cc:ab:7d:0b:68:c9:79:
27:73:14:0a:1d:c6:a9:e3:cd:3a:ba:17:1a:f6:de:
95:83:e3:f5:7a:b4:75:13:88:72:17:ef:f2:ff:96:
9f:29:b3:54:9a:89:7f:b1:82:13:b5:35:75:b3:7c:
2a:39:44:00:28:94:98:bd:64:38:1c:73:60:39:4c:
97:6e:53:72:76:a7:ec:83:e4:dc:cd:09:30:04:86:
29:6e:bf:83:82:6c:73:78:db:cb:d8:80:52:f0:55:
cc:4f:25:77:1f:04:b5:37:fc:33:40:60:38:1e:f3:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:58:35:31:CF:31:E5:BE:B7:77:F8:69:55:31:78:CE:C6:CD:03
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c2:23:44:80:f1:3d:a9:12:3d:7d:18:b7:a3:06:e8:78:bc:
ba:69:2d:98:83:d7:c6:17:a5:40:6b:d7:22:c3:81:63:cd:a5:
f7:5f:be:2b:e7:d9:e3:98:89:f6:a9:82:32:6d:d9:1e:0e:86:
c8:db:1d:a9:47:cb:94:f6:dc:54:81:ef:cc:9a:e5:1c:da:bb:
6e:28:1d:c7:aa:76:f4:ab:66:c6:6e:8a:03:05:dc:16:81:04:
58:f4:6b:80:17:8e:e5:44:eb:2f:04:09:12:19:02:c0:cf:1b:
91:6f:23:31:59:3b:18:d3:ea:a5:b6:d6:a3:ad:ce:57:66:de:
70:43:5d:78:fa:39:19:58:45:1a:40:38:3e:34:64:e0:9b:66:
5e:60:5f:82:52:5d:eb:13:07:63:28:08:ef:48:91:b7:4b:f4:
ec:16:1c:5a:64:57:56:54:0f:c6:7c:c8:ce:2d:e4:da:21:06:
98:ae:74:82:9b:11:27:e8:68:77:94:31:b9:fe:33:a2:1f:0e:
0e:41:18:cf:ed:93:91:68:f8:ad:f4:a1:ca:46:8f:94:b1:85:
ec:de:09:3a:f0:34:76:42:1b:f1:a3:2e:ff:32:d4:52:30:51:
be:65:79:ec:d7:b4:19:de:56:a0:a8:f6:e4:ce:55:b3:d1:dc:
bd:a1:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:21 2026 by rpki-client