
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
File: ID0eLahSvltkOpm-9WTXdL3cx_Q.mft (raw, json)
Hash identifier: tqXtQ5KlgggQxvM+r+KL0yvCMHJHlYuYDtWstbVJvRg=
Subject key identifier: 44:D5:D7:17:67:1E:2F:83:29:92:89:DE:32:00:BD:94:99:33:2D:42
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Certificate issuer: /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial: 0BB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
Manifest number: 0BAA
Signing time: Tue 18 Aug 2026 19:20:47 +0000
Manifest this update: Tue 18 Aug 2026 19:20:46 +0000
Manifest next update: Tue 25 Aug 2026 19:20:46 +0000
Files and hashes: 1: ID0eLahSvltkOpm-9WTXdL3cx_Q.crl (hash: BFW2f91Zav7aPC2HdLHM3bD9XCt06GwJpdLqK/f47eg=)
2: E869880C500511EA98307A59C4F9AE02.roa (hash: eDmxH/4SMnVpNQqwIMaBf1pbV6bCEaBXN55W5wLAprg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Validity
Not Before: Aug 18 19:20:46 2026 GMT
Not After : Aug 25 19:20:46 2026 GMT
Subject: CN=6a84b08e-4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:7b:88:ad:ff:67:96:a2:20:dc:63:8a:32:
7b:de:1e:b3:e1:45:48:38:ae:13:b6:8d:f2:5c:1a:
67:26:1b:5f:82:a0:f4:80:54:b2:9e:74:c7:64:e9:
55:6a:4a:11:4a:ea:d7:64:55:4f:71:87:42:5d:5d:
e5:c2:59:9a:95:ce:55:6e:1f:55:14:f7:61:f3:61:
19:e8:ac:0c:03:08:16:a3:6f:1e:5f:d4:c3:07:bb:
67:62:fd:ee:1c:3c:7d:66:8a:24:d6:1a:8c:bc:83:
d7:4a:33:d8:84:40:c3:8c:03:2a:7d:f0:4c:38:49:
35:02:e2:6e:ae:36:8f:2d:f9:3d:dc:cc:f8:72:5e:
b1:7f:e2:e0:62:7f:cb:93:52:b8:cd:8a:54:98:73:
d7:5b:db:ed:ba:c6:57:70:8a:2b:2f:84:70:93:67:
79:2c:79:87:d2:85:77:9c:d7:8e:73:8d:de:4e:99:
19:4f:f3:85:d7:8a:7d:66:2e:ae:1b:d1:f9:e6:de:
c2:3a:68:45:2d:ee:7f:1b:52:ad:31:f3:6b:59:bd:
92:8e:ad:4d:f8:04:6d:40:f5:04:b4:e0:de:b9:aa:
ec:6c:e3:0f:ec:9c:22:45:78:ff:44:d6:70:c7:d7:
24:11:5c:fb:28:32:4c:ae:93:00:14:99:82:7e:5c:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:D7:17:67:1E:2F:83:29:92:89:DE:32:00:BD:94:99:33:2D:42
X509v3 Authority Key Identifier:
keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ea:ce:af:7e:45:b1:94:e0:12:a5:52:b2:db:b2:4e:01:1a:
b1:eb:00:3f:f9:8a:4e:fb:63:ed:cf:a1:ee:a1:4f:df:22:ac:
37:4a:9d:22:4b:1b:5a:42:59:f0:9f:4d:94:d0:ff:97:ee:f8:
a9:4e:69:3e:e7:55:76:04:ce:dd:5a:96:d7:96:93:11:19:2c:
ce:c5:3c:08:e6:c9:23:8a:09:ad:de:c4:46:92:2c:d1:53:66:
21:2f:90:15:52:22:a5:d6:4d:75:d9:79:84:46:91:af:44:00:
c6:ad:34:c1:72:d7:8f:b8:e5:1a:50:a8:4c:7a:8b:d9:3b:e0:
0d:37:d9:ed:07:80:b7:21:e6:a9:f4:34:56:a6:56:92:ab:3b:
50:0b:5e:5f:8c:73:fa:a3:07:7a:ff:48:c3:c7:1a:63:b4:5f:
e2:1a:ee:a8:3e:df:ea:be:6f:9d:90:04:f4:09:b9:09:02:3c:
0a:1d:14:86:25:24:07:9e:f6:b7:01:f8:87:a6:59:4f:c8:2c:
e2:b1:d1:1a:20:29:a4:61:26:d2:e0:eb:45:5b:99:3a:c8:a1:
65:6e:ef:ab:6a:8e:20:1f:5a:36:05:3f:b3:7e:58:86:7d:a3:
f3:66:de:5c:ce:06:2f:7e:b8:86:e8:c7:67:b0:30:7c:3b:70:
1d:96:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:56 2026 by rpki-client