
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier: 2T5CWt7vtAe5EIr2cUI+WfUG5XazqjdJHRPlLmGOfhE=
Subject key identifier: 04:11:0C:1D:48:EC:33:CF:1B:86:AC:7A:CA:A3:F0:1A:BA:A7:1D:D3
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 1965
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number: 1951
Signing time: Tue 06 Oct 2026 16:26:56 +0000
Manifest this update: Tue 06 Oct 2026 16:26:56 +0000
Manifest next update: Tue 13 Oct 2026 16:26:56 +0000
Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: RFecwqtx+VVmnw+eziDGBxa5lOS1Z6ow78UoXqUlvLs=)
2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6501 (0x1965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Oct 6 16:26:56 2026 GMT
Not After : Oct 13 16:26:56 2026 GMT
Subject: CN=6ac52150-cf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:c8:d8:b3:bc:64:dd:16:e5:a1:0f:34:19:
bd:86:17:7e:f6:7b:f7:e7:8f:29:ae:e3:5b:22:b6:
38:bc:3d:f9:f0:ef:91:c7:69:b0:52:30:d1:8b:b7:
66:c3:f5:c0:49:18:8a:ec:57:9e:26:9e:bf:40:f0:
e2:07:6f:3c:4f:da:a1:9e:07:e4:89:fe:20:de:75:
9f:82:bf:5e:88:26:74:a5:47:b5:12:0b:e7:47:3f:
1a:63:29:88:fe:c3:8d:78:d7:8f:df:e1:d1:73:94:
a2:ae:42:f4:31:c4:2d:0c:1b:df:83:75:c5:dd:64:
f0:b9:f7:af:b5:b4:80:0a:4d:31:dd:69:67:b3:81:
2a:62:e9:38:7a:7b:eb:99:83:4f:c1:8d:dd:30:75:
2f:15:ce:24:8e:4e:d2:dd:47:74:cb:89:45:c1:68:
62:2e:c4:2b:4e:bb:59:9a:a9:11:ad:cc:0e:2e:c0:
08:7a:68:60:d2:bb:8d:70:d6:41:70:42:8a:2f:6d:
9b:29:8e:a8:45:be:74:7f:7e:64:50:b2:f0:36:73:
fc:b7:0a:eb:ca:01:fd:dd:30:f7:35:33:9c:c8:48:
7a:44:a4:99:56:91:b1:6b:90:46:c6:67:46:0f:a7:
72:b3:f5:dc:02:cb:29:03:33:47:80:aa:d6:3f:5b:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:0C:1D:48:EC:33:CF:1B:86:AC:7A:CA:A3:F0:1A:BA:A7:1D:D3
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:e5:e9:bd:17:5f:d1:36:20:55:05:7a:7f:32:97:39:7d:
54:77:96:b5:9e:ae:14:4c:af:74:7f:59:9d:f4:c2:07:f2:ae:
ec:c6:99:0a:31:2d:b0:7c:ab:c2:6d:7a:55:b8:40:4c:36:e7:
0e:54:a0:3c:50:4c:6a:46:bd:57:a8:f1:c5:63:7c:59:00:1a:
5d:c4:51:3f:a8:9c:39:ae:66:93:56:3d:98:a6:31:18:a0:54:
9c:55:5d:a4:cc:e8:6a:74:cc:fa:26:1f:d8:6a:c7:50:98:9a:
f8:ae:a8:fd:e8:e3:7c:d2:32:72:d0:b5:41:31:99:ae:7e:a7:
a0:e5:8d:fb:38:a5:c2:90:81:17:aa:f5:a1:c8:3c:ec:ca:38:
07:8b:14:7b:fe:f9:0d:8b:ae:09:18:6a:72:3c:93:39:37:83:
f8:f9:9d:5a:65:c1:60:7c:26:55:4a:12:cb:63:03:3e:6f:a8:
ae:24:dd:1b:7f:9f:85:b0:fb:0a:a5:ba:b0:62:0d:42:c3:bd:
85:3d:d9:fd:e4:e2:37:f8:b9:76:cb:7f:1f:2e:c0:d5:50:00:
88:d0:1a:9b:03:ad:7c:39:cd:82:74:36:84:57:86:36:16:63:
d0:ad:47:ea:ae:c2:0b:ad:7b:56:82:b1:77:01:f4:c8:69:f3:
17:e5:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:24:02 2026 by rpki-client