
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier: HrqXRTuuYkXxz7fYJHDK0qN8zXFtnFx69MbVMnYoFRs=
Subject key identifier: A4:E9:8E:52:22:02:20:7B:8D:D1:2C:DD:77:9B:A2:B1:E8:BF:32:99
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0EAB
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number: 0E7C
Signing time: Sun 20 Sep 2026 14:22:37 +0000
Manifest this update: Sun 20 Sep 2026 14:22:37 +0000
Manifest next update: Sun 27 Sep 2026 14:22:37 +0000
Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: SFAmkMhwfz9vGp2HxVE0jK4bDeH938TqNJa70sb/W+8=)
2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
3: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
4: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
5: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3755 (0xeab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Sep 20 14:22:37 2026 GMT
Not After : Sep 27 14:22:37 2026 GMT
Subject: CN=6aafec2d-25ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:09:cd:ad:33:ab:2f:7b:b9:8a:70:b7:f7:
5f:1f:0a:e0:37:b6:12:06:01:12:2d:b3:4c:68:c9:
91:e4:91:8b:75:9a:de:3f:45:50:5c:9a:d9:26:b3:
ea:5b:ff:12:da:2e:88:8b:0f:b0:c4:04:ff:5a:99:
c1:7e:81:44:26:78:e8:98:58:3b:f3:39:95:81:11:
30:77:2b:b3:16:f6:ce:c0:34:76:4d:25:16:f5:4e:
ad:da:98:71:21:4c:36:3f:33:ff:8d:89:90:1f:c2:
41:42:94:d2:0c:25:3d:93:01:0e:8b:92:77:87:53:
ba:32:0e:bb:2d:56:d0:35:58:6a:06:78:4e:62:76:
a2:9b:aa:2a:05:bc:6c:2d:af:54:b7:37:7e:f9:d8:
b4:32:a2:ef:94:6d:d7:c5:28:63:bc:c1:46:15:ea:
5e:8a:4a:48:42:db:34:20:a9:bb:83:b9:d5:a8:51:
65:c5:a4:98:bb:1e:93:b8:71:38:55:5b:b6:19:83:
4c:3f:a4:2f:46:97:1e:7f:d9:17:f1:86:4b:b6:f5:
23:be:e8:a5:65:90:05:ac:c6:df:a5:43:6c:8f:7a:
9c:fc:7e:93:e9:fb:5b:fc:1c:07:10:ff:12:f4:46:
73:a6:74:be:65:15:d5:9b:1e:13:70:56:c7:ae:ce:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:8E:52:22:02:20:7B:8D:D1:2C:DD:77:9B:A2:B1:E8:BF:32:99
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:db:bf:3d:d4:05:bb:81:1a:19:bc:bb:87:1e:0b:4e:55:ae:
13:64:cd:ea:78:ef:a6:ed:02:e5:3d:20:8b:79:6c:24:a2:8a:
15:91:a3:22:14:c5:a3:ac:69:08:04:67:88:cc:89:93:c5:a9:
ea:ad:12:28:8f:41:7d:30:d2:60:37:ec:5a:9e:d4:d2:90:06:
04:57:26:4e:1c:2c:6a:ae:a0:e5:24:11:76:61:25:11:fb:7d:
f4:e5:3a:70:6f:46:23:dd:51:bc:18:27:c5:06:78:2e:16:3c:
1c:5c:8b:0a:db:ca:f0:e9:b6:4f:82:31:ea:09:2d:b2:95:9f:
c9:91:1e:d9:13:e3:b0:e4:79:7c:54:e5:4e:26:ba:29:92:f8:
81:dd:53:19:e4:69:d7:dc:ef:b9:99:c6:6c:1c:00:2c:01:e0:
93:86:70:e7:f8:b0:08:16:09:2a:ac:91:e3:35:fd:38:fb:e9:
56:57:a3:ee:94:4e:5e:3b:cc:19:aa:3d:d3:34:b3:83:16:44:
57:31:d2:71:cb:a1:1d:74:a7:1b:74:fc:57:3b:22:a9:3a:90:
65:46:f1:95:a5:24:ed:71:ac:f5:ed:8c:03:d4:c6:c2:99:bb:
9c:35:4e:96:70:4d:85:8a:13:7e:c3:79:2f:c1:99:5a:86:10:
a7:d4:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:51:21 2026 by rpki-client