
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier: SJzlw+/SgB9UeR6G+1ABu/B4Lc7tqKmY0/XpMMuwDMM=
Subject key identifier: BC:24:EF:01:86:61:54:E1:F7:9E:EC:20:AC:FE:2B:61:E3:15:F7:AB
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number: 015F
Signing time: Mon 21 Sep 2026 05:03:53 +0000
Manifest this update: Mon 21 Sep 2026 05:03:53 +0000
Manifest next update: Mon 28 Sep 2026 05:03:53 +0000
Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: dMl84yDl7A4HCU8SKdwpP6GQ2OBrtZNhfsI6dWbTj3w=)
2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: WvBYC5RPQBjCgKYxv8nmuukDYtwi8f7s6ddjHk+AitQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Validity
Not Before: Sep 21 05:03:53 2026 GMT
Not After : Sep 28 05:03:53 2026 GMT
Subject: CN=6ab0bab9-56a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:6a:42:d2:39:9d:28:33:7f:19:87:ac:8c:
f1:3a:3c:6f:f8:94:1e:1d:c5:79:6d:f6:64:37:b2:
f6:59:4c:32:04:40:62:5d:fb:84:6d:a8:9f:ed:2f:
25:45:2e:17:08:ab:49:bb:b2:dd:39:d6:8e:a6:05:
14:c8:10:b6:a6:de:f5:0b:f8:da:e2:ae:57:35:5d:
7e:49:67:02:36:18:8d:be:0d:4f:17:8e:86:98:0b:
21:5c:21:67:c7:18:e0:7f:c1:f5:7d:c4:1a:c9:40:
0c:c7:aa:55:8a:ff:08:60:01:bd:c6:1e:24:e4:bf:
87:44:f6:67:33:ef:dc:fe:86:9f:a0:90:5b:d3:d4:
ca:80:e5:96:5a:4f:da:23:f7:f9:76:3a:f2:30:50:
46:fd:1e:98:a9:18:b9:48:6e:d0:14:07:b3:ef:db:
47:ff:23:b4:35:cd:ff:d8:4b:98:22:51:7d:32:0b:
00:0a:24:7c:6b:8a:e5:69:0c:43:1f:a1:46:eb:0e:
ab:39:24:86:c3:77:a3:eb:18:92:aa:7f:c6:d9:ff:
9d:07:73:e1:f2:4f:88:8e:4f:94:65:e7:50:95:9c:
7f:ef:b5:85:8c:77:28:59:54:fd:f5:ba:ce:d8:8c:
b4:e0:5c:a8:7d:6b:4a:c1:e3:df:ca:fa:31:65:68:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:EF:01:86:61:54:E1:F7:9E:EC:20:AC:FE:2B:61:E3:15:F7:AB
X509v3 Authority Key Identifier:
keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:e7:99:5a:94:73:0a:04:b6:30:60:c9:df:c5:ef:ab:56:69:
2a:ab:c2:5b:ed:2e:4b:59:fd:09:36:d7:58:ff:91:40:4b:36:
5a:ca:d9:ee:3e:d8:68:a8:2c:b3:29:da:e1:85:a5:f9:cf:b0:
87:31:43:ba:e6:a6:c2:57:16:01:ff:cc:2e:a0:d0:7f:0a:dd:
71:b1:80:66:9f:d2:5f:33:63:5a:ad:95:3d:c7:f9:bf:d3:1e:
ac:49:82:f9:8f:a1:9a:fa:94:a9:6f:cb:a0:9d:0d:be:be:e3:
75:ce:3a:51:19:29:25:e0:02:6c:62:c8:f8:73:55:ea:4f:3d:
f4:0f:9d:a0:e1:6d:f5:29:cf:58:ae:3d:3d:24:8e:56:aa:2e:
b5:ab:1e:63:b2:d7:91:27:6e:31:55:57:c2:87:46:9c:ca:1f:
27:51:47:c4:89:ed:75:5f:02:27:c6:e8:b0:f9:9e:e6:93:57:
cf:33:d3:74:ae:a5:93:81:55:20:71:09:55:ec:1f:b1:9e:89:
84:cc:ac:70:bd:23:20:aa:d4:46:7f:46:6b:08:65:3b:0f:c0:
75:83:89:8e:bf:46:43:1a:36:8b:e7:2d:c0:8a:12:ea:d2:7e:
39:5c:6e:37:98:4b:c2:dd:22:29:c7:78:fe:a8:0e:8c:67:1f:
d3:32:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:33 2026 by rpki-client