
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File: AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier: kaCJ5PzS5aXzvvS85SWR0GZT/ug8v5vxv/nZYHVzD+I=
Subject key identifier: DD:63:8E:20:CD:25:D2:C7:D0:5B:9B:FE:B1:66:AE:74:8B:BE:10:21
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer: /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number: 88
Signing time: Mon 27 Jul 2026 09:44:58 +0000
Manifest this update: Mon 27 Jul 2026 09:44:57 +0000
Manifest next update: Mon 03 Aug 2026 09:44:57 +0000
Files and hashes: 1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: IsTPtdb+qyZZ+tbo6Y3Q1ks+p/EFCLIBsqrKQ4TU9r0=)
2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: FDPr6Mk6fUWr/ORbhz5vJ0nJDICVIvgeGSKkDMqOU8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Validity
Not Before: Jul 27 09:44:57 2026 GMT
Not After : Aug 3 09:44:57 2026 GMT
Subject: CN=6a67289a-ea83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:96:5a:7b:36:82:93:23:28:46:ff:6a:b3:
27:1c:c0:9b:d3:8f:fb:a8:74:88:6e:b4:59:80:fd:
46:b4:fc:0b:34:c0:90:8b:da:ac:19:8c:54:6e:c7:
2a:ea:fa:aa:a9:8e:5d:63:d6:8e:5a:fe:b4:24:ba:
d5:39:86:40:75:14:26:1b:d1:85:5f:ad:bc:50:94:
da:c8:94:c1:63:70:f4:52:e6:dd:e6:dc:8c:57:bd:
bb:df:7f:8b:b6:6c:a6:9d:52:09:d7:02:9c:5d:0a:
ea:44:5f:ae:11:d6:24:10:65:70:6f:a0:86:86:fa:
c5:14:f0:5f:62:f6:f9:13:bc:a9:0d:bb:d2:6d:03:
f7:0b:a4:6f:f9:20:48:2f:95:3f:20:9f:f6:d2:ae:
11:96:43:f1:d3:08:4d:c7:bc:bb:f3:e1:19:de:eb:
8c:04:7d:ad:56:68:c5:b7:92:ce:3a:4e:51:bb:3a:
d9:d9:a7:b5:05:58:4b:83:89:33:94:ad:27:06:ec:
4e:1f:92:44:e2:9d:1b:ad:b8:63:3f:a6:f9:41:ec:
37:e2:32:0c:28:dc:b1:3f:05:56:01:51:bb:f3:e5:
36:35:33:18:a3:85:64:01:5d:ba:b5:6a:e6:1e:3a:
6b:2d:59:2c:93:8a:e5:c5:bb:e2:2c:8c:fa:6c:24:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:8E:20:CD:25:D2:C7:D0:5B:9B:FE:B1:66:AE:74:8B:BE:10:21
X509v3 Authority Key Identifier:
keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:39:d2:1d:66:1f:1e:48:da:e0:7b:c1:ac:ed:5d:84:e6:2b:
6c:c4:d2:13:92:79:62:a4:67:61:fa:20:70:c7:c8:1b:de:2a:
e6:df:28:4f:ad:d5:c5:2a:4c:d9:3d:62:4e:c9:5a:e2:3c:3d:
22:0f:d9:3a:4c:72:88:5f:5a:05:85:4c:9c:7e:70:79:f8:c5:
f1:4f:f8:f7:de:b0:28:1c:f9:91:af:69:e6:c2:d4:c0:2a:a0:
12:ac:25:29:7e:81:01:2b:70:f8:bd:d0:d7:d4:be:6b:9f:2c:
63:bc:a9:d3:b2:07:34:3f:96:17:8f:56:ca:67:ca:b7:71:6c:
bb:6f:85:5c:f2:ee:48:d4:60:92:30:83:65:0d:b1:7c:af:4f:
06:ce:d9:b8:8e:37:1f:5f:e7:79:02:a7:63:b7:1d:b9:4d:84:
6d:e5:f8:0e:60:5a:e4:93:85:c5:d6:5f:dc:87:dc:22:e8:bd:
3b:33:00:30:d7:f2:5e:a7:62:97:0a:e4:2a:20:97:d7:fe:a1:
81:03:84:2b:b8:5c:b6:b0:2a:26:6d:e9:5c:db:81:51:1f:8a:
23:b7:62:3a:b7:42:5a:0e:a3:0a:aa:3a:96:6e:c7:01:66:1c:
67:84:09:22:5a:08:3f:06:df:53:55:f7:58:72:fe:c7:71:ba:
f6:de:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:27 2026 by rpki-client