
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier: jGOgc5hZSxgoTi8mbztm13gOedUMClDGvAdJTPlwPVM=
Subject key identifier: FA:69:26:4D:08:05:9F:E3:A3:5F:88:36:36:12:4A:AD:FA:3E:DF:A4
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number: 029B
Signing time: Sat 03 Oct 2026 02:18:41 +0000
Manifest this update: Sat 03 Oct 2026 02:18:41 +0000
Manifest next update: Sat 10 Oct 2026 02:18:41 +0000
Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: o4DVkm+Pb4d8/EI9Tf/6tAMqxfpc6K3BYsOUTCypSW4=)
2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Validity
Not Before: Oct 3 02:18:41 2026 GMT
Not After : Oct 10 02:18:41 2026 GMT
Subject: CN=6ac06601-bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:18:7f:51:8b:27:31:d1:bb:c8:55:50:a4:
57:91:62:71:36:4c:5f:c0:1a:2b:2c:37:11:7f:10:
7a:82:c1:4e:98:da:6f:97:b0:89:89:e8:3b:37:58:
69:e8:44:89:25:a7:15:9d:7f:40:bb:3e:19:a1:b2:
f6:9c:bf:ba:46:82:b4:3f:e7:d4:ef:b1:df:e4:8b:
ef:cc:d2:3c:4d:df:c3:de:26:cb:68:20:2a:13:9b:
54:6c:14:db:94:f1:a0:fc:42:93:ed:88:0b:5d:c6:
2f:95:7b:a4:bb:a5:94:30:e3:61:b5:37:dc:02:a5:
c4:47:ca:db:aa:f5:23:19:bc:3a:fd:f4:7b:02:a9:
c2:06:76:37:97:82:fa:8e:94:7a:8f:8d:ef:ef:c1:
e9:64:10:a7:01:97:d8:18:17:f7:0e:ff:39:9b:fa:
e3:5c:10:d0:20:c4:16:4a:de:e1:6b:58:2e:69:2a:
b1:e9:2f:ef:05:30:18:e5:96:0a:8e:77:eb:d7:87:
38:5e:96:7c:40:09:6b:62:81:c6:98:d3:b9:5b:87:
e3:fc:50:f3:91:2e:eb:ea:09:53:86:8e:eb:76:bb:
08:80:00:72:13:24:cc:dc:30:33:e4:cc:6e:96:ef:
6c:5a:5a:3c:ec:ef:a5:3e:a2:fd:62:c1:98:67:46:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:69:26:4D:08:05:9F:E3:A3:5F:88:36:36:12:4A:AD:FA:3E:DF:A4
X509v3 Authority Key Identifier:
keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f1:16:f0:2f:e3:4c:86:7f:05:92:b6:05:4f:0a:a1:f3:fd:
88:32:45:38:ce:8e:ad:ce:ca:5f:f7:3f:82:3c:c4:c3:1a:3e:
8e:96:40:a5:2b:78:e1:40:65:4e:9e:08:e8:91:4d:d3:95:d1:
93:42:29:33:66:ad:57:67:e3:79:aa:d5:3f:04:99:cc:20:2c:
fb:bf:49:f5:28:e4:2e:83:ae:d0:7a:eb:71:9d:b3:eb:25:82:
da:c3:7b:4a:c3:c8:5a:ff:cd:c3:6f:94:53:12:c2:ff:02:07:
4e:0e:7b:96:d0:98:7d:e3:a2:3c:6f:fb:cb:0e:f9:19:c0:27:
3c:b0:17:bf:d6:09:30:ad:ad:76:8f:6f:43:54:ed:ac:ae:5f:
96:3d:63:d8:0b:ec:24:f5:90:34:b0:56:66:d8:f6:4e:a2:e4:
02:c3:57:c3:c1:fb:10:84:bd:c8:92:cd:7b:cc:d1:18:7c:5e:
5c:9e:24:1f:42:7c:14:77:4a:2a:65:1a:14:be:e9:48:ee:ef:
95:b3:aa:b0:4d:02:14:db:27:0d:74:4e:b1:66:1e:65:89:fd:
a7:5b:41:7a:c7:f0:21:c7:8b:34:e0:31:01:d3:ce:64:56:dd:
12:85:a6:85:3b:f1:8b:62:d6:ce:be:04:2d:1d:54:13:18:8c:
c1:92:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:18:17 2026 by rpki-client