
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier: CvuTtFPTKv5zwvjhfTkmn6DChG8GcPb8DMzsVJmTDv0=
Subject key identifier: 09:65:FE:AA:9D:85:B3:7F:BD:A8:5F:B7:34:31:84:EE:2E:BA:54:E6
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number: 01D4
Signing time: Sun 01 Nov 2026 04:49:09 +0000
Manifest this update: Sun 01 Nov 2026 04:49:09 +0000
Manifest next update: Sun 08 Nov 2026 04:49:09 +0000
Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: tTZSE7Z/DpDhifgAGeUDYTGNdeK1ipCFufo3hEOOdCc=)
2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: qze2BxN1ZqkUR8sLJAr7IWqQzGJrYs19cA2fz8g+u+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 04:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Validity
Not Before: Nov 1 04:49:09 2026 GMT
Not After : Nov 8 04:49:09 2026 GMT
Subject: CN=6ae6c4c5-7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:62:a8:f8:dc:6e:5e:36:2e:d4:47:b0:1f:
6b:80:a7:ce:40:ca:fd:ba:79:99:4a:7a:4f:0b:0b:
5a:d5:59:61:4a:9d:21:96:e5:c8:9e:60:96:25:17:
a3:ed:00:b7:84:c5:89:9b:a7:f7:ac:66:fe:6b:5d:
d9:69:ea:1d:9b:a5:74:02:24:ec:3a:c0:ce:2a:2b:
6c:9b:86:d1:dd:13:13:92:ee:47:bd:e2:86:cf:fc:
10:e4:e9:cd:c3:59:68:54:06:ec:74:53:95:e5:c5:
18:1e:8f:25:67:77:78:b9:68:18:72:1b:1f:c9:83:
d3:e0:92:7e:79:99:c3:0b:0c:11:85:a1:0a:b1:43:
5b:07:95:a8:2f:03:e6:0a:77:18:19:f4:29:a3:f4:
c2:ae:a4:ed:39:4a:3f:f1:ef:d8:92:30:c3:62:68:
fd:41:04:11:9c:2a:70:7e:93:63:be:88:d7:9e:5a:
02:0a:2c:30:64:32:a4:32:1e:97:d5:f6:0c:f9:e8:
b1:5c:2f:24:b5:1b:17:4b:04:1d:a6:08:76:ab:88:
7e:ae:38:1d:32:c3:6e:bb:97:03:02:92:5b:9d:f4:
ab:e1:84:24:a7:de:49:32:3f:d0:75:39:f9:f0:01:
79:27:df:50:b2:17:bd:08:8b:87:98:ae:d1:17:74:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:FE:AA:9D:85:B3:7F:BD:A8:5F:B7:34:31:84:EE:2E:BA:54:E6
X509v3 Authority Key Identifier:
keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:7e:ab:27:3e:8a:f9:71:ae:71:4d:ef:37:7d:eb:06:c6:
28:9d:e2:cd:a1:23:91:7f:59:d1:ea:84:07:68:95:7b:73:db:
85:5a:8b:6c:d3:09:c5:48:41:6f:64:5c:92:9c:0a:5f:8f:e8:
8c:78:5f:18:ea:5e:ac:f1:82:d2:6c:9b:0b:c5:58:92:62:ac:
66:da:5e:8a:b9:d7:70:60:e2:02:00:a2:e4:00:0e:da:91:69:
1b:00:2f:80:be:70:61:93:c7:14:18:e8:36:7d:7c:61:2b:9a:
ec:22:db:05:06:8b:b8:61:5a:f5:21:45:04:7a:ba:86:6a:b9:
c6:06:82:88:3f:1e:32:da:db:dd:7b:cf:f6:7c:48:f6:dd:a8:
49:0e:bb:b1:0e:37:ad:02:55:74:df:f5:e0:1d:cb:51:8f:01:
38:a2:7f:ea:f0:02:f4:b3:49:35:17:9b:4f:ea:af:43:dd:6f:
90:bb:e7:5a:96:6f:cd:24:99:50:1a:24:5a:6b:64:7a:66:ad:
0e:e7:74:88:07:ca:2a:50:9d:20:b6:07:fa:8b:c9:c3:a1:8e:
be:46:2b:52:b8:20:28:41:0b:95:6f:27:40:73:57:7f:07:a3:
ef:b9:57:48:3b:53:64:d2:06:9c:8a:dc:ee:7a:7c:cc:ee:66:
34:22:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:40:19 2026 by rpki-client