
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
File: j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json)
Hash identifier: igjZqIils9YlvJPbQetGajNOSiNzSh4flDlCYuZMszU=
Subject key identifier: CC:82:50:93:F1:1C:24:10:D7:58:D3:94:6F:18:F7:C5:CB:88:D8:37
Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
Certificate issuer: /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
Manifest number: CF
Signing time: Sun 25 Oct 2026 07:10:12 +0000
Manifest this update: Sun 25 Oct 2026 07:10:11 +0000
Manifest next update: Sun 01 Nov 2026 07:10:11 +0000
Files and hashes: 1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: IPz3gUrwuZ7P8gDXQacosHduMbqdMu7NDIYh24gwvNI=)
2: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: NUgOOf/rjVHXhB/2ztlIRxZ7FTzIXYUjB9jU6t7wqp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Validity
Not Before: Oct 25 07:10:11 2026 GMT
Not After : Nov 1 07:10:11 2026 GMT
Subject: CN=6addab53-5ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:a5:7a:58:ed:b8:88:86:9e:68:97:b0:fb:
a4:f4:1c:84:76:45:87:8c:1b:8f:2f:70:84:24:57:
93:f9:29:2b:49:a2:66:c7:c6:68:41:ca:7a:1e:a1:
89:d2:da:25:0b:29:c3:11:82:1b:d7:73:94:e9:d1:
dc:67:04:e7:51:c4:6d:bd:af:aa:94:1e:d9:bc:fb:
3e:47:f8:2a:e9:f4:b8:83:30:70:c8:c3:e1:1b:51:
50:ca:cc:0a:8d:0e:67:42:4a:4f:1f:d2:26:1d:c7:
af:f8:fb:69:e0:3c:68:e7:7b:9d:9d:72:9c:81:a0:
fe:cc:66:25:5a:71:06:0b:b4:49:ff:a1:95:14:2f:
84:8b:a4:cf:09:97:2c:fb:eb:36:ae:86:8d:9a:4e:
8d:d4:f6:14:25:3d:b5:c0:2f:56:13:af:75:cf:58:
c5:7a:17:92:cd:65:fc:ed:8d:b7:2c:0b:52:6d:98:
3f:25:98:f7:0f:ee:82:da:3f:0c:b8:0d:ba:20:36:
97:5d:20:0d:4e:e9:82:49:c9:3c:da:7b:2c:9b:ad:
a8:52:9b:c0:c8:cf:ea:79:a2:5f:dd:90:83:38:38:
35:09:ea:bc:4d:8a:e9:5d:ef:3f:27:53:7a:63:87:
16:e2:d2:14:b0:32:94:e2:d4:1a:54:0f:56:24:33:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:50:93:F1:1C:24:10:D7:58:D3:94:6F:18:F7:C5:CB:88:D8:37
X509v3 Authority Key Identifier:
keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:d4:1d:be:1e:ec:cf:94:19:fc:57:3d:65:3e:b3:62:49:
e4:34:63:66:fb:b5:89:63:96:16:ac:18:cd:fe:02:67:5a:23:
c1:61:db:77:7c:06:3f:86:49:ca:3c:e6:54:f8:b3:a6:a5:81:
0a:39:41:89:66:af:65:80:43:ee:56:11:09:30:1c:13:3d:67:
33:6c:73:21:6c:9c:a1:40:b3:ce:d7:63:99:94:74:6e:1d:33:
a6:30:f5:d8:b1:7c:1f:d4:f1:e6:77:68:ef:a7:9e:ac:32:eb:
e0:dd:b9:d2:2f:ea:33:3f:ce:9d:f9:24:af:6a:cc:f4:ea:50:
cc:ad:a9:84:3b:0f:17:ac:69:07:6e:6f:12:d0:9b:ed:93:ca:
e6:3a:d0:f1:b4:62:5a:ae:04:82:91:07:97:81:f5:b9:68:03:
00:74:29:f8:a9:67:12:74:64:97:69:dc:ef:d2:e9:6e:68:80:
ec:68:3b:f7:a2:32:29:44:e1:38:43:80:d7:fd:70:23:42:df:
7b:94:17:53:6a:f1:95:bc:d3:94:67:ec:9a:93:88:61:f2:08:
a4:8e:3d:d2:bf:58:89:6f:08:50:fa:78:6b:70:b9:ce:b2:7a:
96:70:a9:d7:c6:61:7d:66:eb:a5:1f:15:38:52:a3:0d:13:54:
4c:7d:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:39:50 2026 by rpki-client