
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier: yvBNhcr6nOoeR2BWvSaD42kkLLrWhqkhVqMSSxbyLK0=
Subject key identifier: BC:D5:04:1C:FA:EC:9C:45:6C:54:7C:BC:EC:E3:D4:56:DE:17:BF:40
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number: 01BA
Signing time: Fri 11 Sep 2026 04:03:09 +0000
Manifest this update: Fri 11 Sep 2026 04:03:09 +0000
Manifest next update: Fri 18 Sep 2026 04:03:09 +0000
Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: mpBw3+8xjZEgP2AJNlmohJfOAqsedcwhY/eAJ+bmUOw=)
2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Validity
Not Before: Sep 11 04:03:09 2026 GMT
Not After : Sep 18 04:03:09 2026 GMT
Subject: CN=6aa37d7d-b681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:15:62:6c:3e:cb:a9:bb:b7:0c:9d:fa:50:
8f:bc:bc:dd:d3:11:2b:f3:89:29:5e:8f:60:a3:4f:
61:6d:95:e0:a7:a7:88:6d:ab:5a:ce:9f:15:f5:bc:
25:ef:76:7a:87:5c:69:7d:4c:ea:36:4f:14:78:4a:
82:50:00:91:85:85:51:45:c7:07:bd:5b:c4:c7:00:
1c:42:0d:f4:a1:4e:51:46:db:1a:54:82:5a:71:13:
7a:fa:fd:be:82:9c:85:2d:9c:1a:d0:06:71:5a:cb:
26:92:39:df:c7:4f:6b:ce:19:b3:b0:f0:6d:53:96:
74:6e:2e:a2:73:1f:98:78:bf:79:68:25:03:c1:46:
5f:79:a8:9c:fa:68:3e:09:27:a9:79:75:99:7b:d8:
87:d8:08:83:47:f4:75:dd:e2:d5:fa:d1:70:36:bc:
99:60:b9:b2:27:82:af:9f:db:cd:48:a5:93:30:6f:
2b:00:0b:55:30:26:70:d8:db:68:34:23:1a:46:20:
55:bc:90:3a:b6:d5:2a:bf:31:76:61:f2:46:8e:02:
37:a3:76:0b:2d:47:03:40:ec:c2:21:a9:c2:f6:18:
f4:e6:7a:cf:83:75:16:6c:ce:14:9c:f9:20:ef:10:
7f:86:dc:44:32:5a:e6:ac:f5:5f:bc:f0:38:b0:23:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:04:1C:FA:EC:9C:45:6C:54:7C:BC:EC:E3:D4:56:DE:17:BF:40
X509v3 Authority Key Identifier:
keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:fb:22:b0:ee:cd:23:38:dc:be:20:64:f2:10:49:c5:e9:
83:f0:d6:61:d1:39:b5:86:62:08:cc:b9:4b:86:b7:cb:8f:37:
4b:47:69:7c:69:f7:fb:a3:86:97:7a:b3:50:12:af:58:79:77:
a7:6a:8a:ec:11:c6:2b:f1:54:07:5a:e6:35:ba:64:9b:66:0b:
99:59:20:24:78:7b:89:d4:a9:57:52:cf:29:da:1d:d1:8b:d7:
3b:70:bb:97:30:8a:7f:2f:91:07:58:1d:63:01:62:6d:9c:65:
ab:0a:d5:bb:83:20:b6:d0:78:14:d6:89:d8:02:44:06:53:42:
8a:bb:25:78:54:3f:78:e8:e8:5e:29:cc:74:fa:1d:24:97:57:
17:69:16:7a:f9:a5:60:5d:41:c2:c4:bb:21:56:6d:97:86:99:
31:ae:e4:48:bc:cb:13:2f:6b:bf:26:27:06:19:a3:79:f0:62:
a3:6e:40:d0:46:a4:40:0e:b6:ac:2c:26:3f:1e:31:4a:21:5c:
85:2e:37:d7:5d:66:31:1b:40:d9:78:34:23:db:69:41:ab:d3:
38:29:cd:74:49:80:5f:a4:00:80:d6:6d:8f:93:ff:04:e1:d5:
09:6e:4d:6f:0e:a9:5b:c5:17:22:f4:67:b9:b5:7f:ec:0d:47:
79:a3:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:28:22 2026 by rpki-client