
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: YyGd53YTYk3g/YMsdlNjiYizOSb/+pkgkak29rO/8B4=
Subject key identifier: D4:11:65:18:2F:6C:F5:8A:38:70:DB:65:B0:1E:03:8E:AF:48:14:C5
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 109F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 1090
Signing time: Tue 28 Jul 2026 17:28:10 +0000
Manifest this update: Tue 28 Jul 2026 17:28:09 +0000
Manifest next update: Tue 04 Aug 2026 17:28:09 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: wCkNvDaj0GsGxYmukKiLWkoTU/1Bq15rL9E9/GdQiY8=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4255 (0x109f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: Jul 28 17:28:09 2026 GMT
Not After : Aug 4 17:28:09 2026 GMT
Subject: CN=6a68e6aa-b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:f1:9d:6b:dc:5a:27:9a:93:e3:d6:1d:b4:
7f:f2:76:0a:fe:b8:cb:cd:ad:f5:a2:da:5f:90:ac:
b8:32:34:04:a2:98:c3:65:49:04:cf:4e:17:13:bc:
cf:ed:ad:df:5e:83:85:e9:1e:5f:1c:2d:42:a6:3a:
a2:06:1e:45:85:c7:a7:6b:dd:63:22:be:72:7f:4d:
d4:dd:07:c6:6f:e8:98:be:96:92:eb:0f:80:e4:d7:
3c:cd:64:71:a2:2a:47:72:c7:d7:31:23:14:01:4d:
f3:dc:ea:21:fd:df:db:c5:4e:60:be:0a:e3:7e:08:
2a:0b:25:33:82:ea:b1:5d:d6:7c:d4:a6:b7:ca:78:
37:31:a3:50:de:bb:5e:44:57:c8:ad:03:d6:c3:c5:
8b:cc:a9:2c:44:ce:f8:4b:c0:51:71:b9:11:11:99:
bd:3b:80:ea:10:7f:53:41:2b:ab:7f:67:0e:68:15:
6f:fa:39:b5:7a:10:b8:26:56:a9:65:f7:a3:6f:56:
c1:04:de:26:fa:d6:97:a2:88:64:8d:3d:25:a2:26:
37:47:5d:4a:b2:b9:5b:77:2e:2a:6f:17:cd:ce:c8:
c4:10:58:57:5d:7b:37:d5:db:6a:66:0c:b6:d3:52:
e9:3c:9d:d4:cc:ba:69:9a:7d:e0:2c:f8:dc:95:13:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:11:65:18:2F:6C:F5:8A:38:70:DB:65:B0:1E:03:8E:AF:48:14:C5
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:9f:42:2b:a0:8b:d7:66:7e:67:32:a8:06:82:e6:c5:c9:
1d:e2:1c:69:c8:9a:4c:35:66:2f:37:8a:7f:f2:42:c8:aa:d2:
c8:d2:2e:76:9f:d2:64:ad:3c:17:01:6a:06:bc:03:49:5b:aa:
57:ee:93:ef:55:4b:43:fe:04:16:0b:fa:74:ba:76:ce:98:ff:
51:b0:f8:99:44:49:fc:3b:34:7c:d4:e4:76:42:e3:34:6c:80:
fc:1f:25:66:04:57:6f:f6:97:ad:44:e6:6c:47:81:41:76:44:
3c:11:74:0c:14:ec:00:ca:81:b4:c7:bc:bb:d2:4b:6c:22:9f:
e5:d6:83:f5:19:c0:04:b0:8b:7f:72:02:98:8c:ff:be:dc:87:
42:c6:2c:1e:0f:4d:c1:fd:bd:18:5d:0a:4a:dc:94:dd:89:62:
bb:d8:d7:cc:d3:ab:c0:22:29:2d:1e:06:82:8a:10:fa:a8:df:
e3:86:dd:f8:5f:53:2d:79:42:84:bd:33:93:83:50:6f:1d:24:
7b:ed:f5:a2:05:90:76:54:76:f6:9c:93:70:10:1e:b3:45:ff:
b0:1d:cb:9e:e5:61:d9:41:be:f6:07:06:13:26:a2:0a:5d:e4:
1d:9a:08:19:e5:d6:57:cf:85:6e:63:c5:c8:3f:2b:99:9a:85:
5e:2a:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:38 2026 by rpki-client