
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File: Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier: 3yN90PxADoVFOIl2pbXVhiwdoSIM4xZ1/BLdjNhbQ28=
Subject key identifier: AC:AD:79:E6:73:48:1A:F8:1D:C3:DC:B5:6C:BA:89:77:69:1E:41:E2
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer: /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial: 10BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number: 10AE
Signing time: Thu 24 Sep 2026 17:19:01 +0000
Manifest this update: Thu 24 Sep 2026 17:19:01 +0000
Manifest next update: Thu 01 Oct 2026 17:19:01 +0000
Files and hashes: 1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: ho0Bw13tZtQlJMG1ZMLV9KxnBHTmSoefubA1sDxH5iw=)
2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4285 (0x10bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Validity
Not Before: Sep 24 17:19:01 2026 GMT
Not After : Oct 1 17:19:01 2026 GMT
Subject: CN=6ab55b85-ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:58:f8:57:55:26:9d:55:82:6a:d6:90:15:
ef:60:35:e1:df:5d:3a:60:2b:a1:08:9d:51:68:88:
d9:90:2f:82:65:9a:9e:fe:b7:0b:1d:21:b1:37:ff:
08:8d:d1:67:32:8d:85:f0:7e:6c:19:cc:04:70:91:
45:cf:3e:c7:8c:d1:27:3c:ba:6e:07:e1:e8:88:19:
45:ca:79:8a:6f:66:43:94:5d:9e:b7:19:bf:b3:f9:
e5:e4:b6:63:22:e1:21:eb:4b:51:b4:b3:ec:07:39:
c8:f9:7d:11:66:80:da:96:03:a7:50:58:32:35:57:
27:56:64:6c:24:19:a3:32:2a:f5:54:82:76:05:46:
bc:cb:7c:05:bc:4c:8e:fc:17:93:81:a7:61:2c:73:
a0:80:b0:da:a9:e2:7a:32:3e:31:a0:73:bf:07:ff:
62:73:eb:c9:ff:0c:a5:a9:ef:ad:17:01:e8:50:a3:
0a:d9:4f:f7:c5:22:7b:2a:10:91:68:e9:4a:3a:f5:
77:9d:ec:67:b7:f6:ae:f3:67:be:c2:d5:a0:af:32:
0f:3a:c6:de:10:6f:4b:78:a7:42:f9:de:55:31:74:
f5:54:23:a3:6d:ba:cb:d8:64:9c:5d:24:72:10:94:
f2:82:d1:27:a9:90:78:f0:dd:81:e9:90:3e:d0:f7:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:79:E6:73:48:1A:F8:1D:C3:DC:B5:6C:BA:89:77:69:1E:41:E2
X509v3 Authority Key Identifier:
keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:5d:0e:c0:40:4e:a9:59:eb:c2:a3:5a:cd:f2:5b:39:9d:
48:2a:e0:5c:16:15:cd:c8:ab:04:0a:59:98:7f:ca:6e:0f:1c:
51:ff:b2:87:34:73:2d:b2:64:0e:c6:00:5e:ab:11:36:cf:5e:
56:63:84:74:b7:bf:7c:2a:e6:2c:10:ec:e3:7e:2d:aa:6b:11:
70:4d:68:57:19:eb:7f:28:7d:d3:50:c4:78:3a:e8:2e:91:a3:
9d:6b:bd:45:62:70:25:60:cb:70:0b:25:be:20:1c:f4:ba:a4:
dc:d1:fe:db:98:ec:43:e7:44:21:e1:5f:f3:90:2b:90:e0:90:
0a:26:68:1a:12:b9:7f:c4:bf:20:13:bb:10:72:2d:8e:8e:ef:
08:41:3c:e1:e6:58:ac:fd:eb:89:95:55:c3:f3:15:a0:0e:44:
94:ec:92:c1:41:86:8e:a6:79:88:5f:12:6d:88:0f:f4:c4:95:
d7:cc:b0:01:e5:6e:af:8f:6a:96:eb:ca:76:e4:00:b9:9e:6e:
5f:77:78:ad:d1:56:8e:9f:7f:ce:c6:6f:93:b8:98:11:9e:16:
3d:10:6c:0b:03:86:14:57:d1:20:17:2f:f1:03:af:76:a9:8b:
f1:5e:7b:6f:5b:24:5b:bb:1d:91:ae:00:91:fa:47:38:93:cd:
98:c2:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:08:53 2026 by rpki-client