
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier: udLgopUNkadgxNHAXocm7ZBRKkgjZakBp5MlP/VLRZA=
Subject key identifier: 4B:63:1C:49:6D:FF:52:6C:C3:D3:14:1B:AF:41:F7:A3:0E:0D:B6:64
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 08E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number: 15C0
Signing time: Tue 22 Sep 2026 18:15:24 +0000
Manifest this update: Tue 22 Sep 2026 18:15:23 +0000
Manifest next update: Tue 29 Sep 2026 18:15:23 +0000
Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: mmj6Ab+TUdV07ptwB+dFP64xUi7pDawRZIaZlqZeutE=)
2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=)
3: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=)
4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Validity
Not Before: Sep 22 18:15:23 2026 GMT
Not After : Sep 29 18:15:23 2026 GMT
Subject: CN=6ab2c5bc-4a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:c9:86:dd:26:66:de:c2:27:73:1e:d7:48:
e6:fb:15:1b:50:c5:25:be:72:f0:a5:8d:43:46:1a:
12:85:6b:fe:1a:5c:ee:24:5f:13:e6:19:5b:a0:71:
82:6c:a8:b9:52:c4:28:1a:fc:64:2b:37:68:f8:01:
9a:ca:af:9a:9f:c6:b2:38:bb:27:81:fd:cd:c1:99:
78:60:c6:45:a8:4d:ee:e1:3f:96:ad:c5:0f:63:c9:
23:ef:6b:23:11:0c:6a:0f:9e:1b:ad:cd:f0:66:1c:
4f:53:2f:cb:cc:d1:56:90:ee:47:cb:ed:d0:c2:da:
34:75:ec:80:fd:8f:71:79:6b:5c:b6:68:a0:31:bc:
05:c3:fd:55:96:1e:bb:5a:66:f7:b4:9d:8a:2e:e0:
c1:fb:02:c8:53:e7:c6:79:0b:7d:71:b7:ad:40:93:
0a:ee:5e:aa:c8:50:cd:52:4c:3c:38:19:82:32:47:
58:6e:b4:db:87:4a:e5:83:b4:da:bc:c7:e2:74:ae:
1c:55:df:29:a0:72:a2:4b:f1:49:6f:65:d3:ce:e4:
44:d6:17:f2:c7:2a:55:78:57:3c:94:d4:8f:2e:b2:
7f:3f:cd:21:c2:1b:bd:4b:cd:f6:e8:06:2e:47:55:
c7:75:69:90:c5:ab:08:7d:76:0c:55:9f:61:75:10:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:1C:49:6D:FF:52:6C:C3:D3:14:1B:AF:41:F7:A3:0E:0D:B6:64
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:5d:fe:e4:b5:e8:de:d6:aa:ca:07:e4:98:a9:6b:8d:08:
44:42:a6:37:ab:55:62:e2:4b:df:9f:07:31:b7:71:b8:fe:e6:
a7:da:64:2c:b3:74:aa:30:02:ce:4a:3c:38:91:06:6a:7a:f8:
1a:4e:69:00:8d:5e:74:6b:12:4c:2b:9e:23:4a:39:b6:bf:1e:
39:e8:4e:8d:36:61:01:a3:b6:08:e2:10:c1:2a:5c:d6:28:0f:
1c:ac:7f:ad:ae:ae:a1:12:2f:60:11:49:6b:d0:9d:87:bd:4e:
06:1a:5f:6f:cc:97:16:f2:f1:d6:1a:ef:9c:c9:5c:f5:9c:ec:
22:d1:cf:94:0e:ec:5b:91:1e:d9:ee:cb:c9:a5:21:9a:42:e3:
90:2d:a2:74:a7:cb:74:8b:b1:8e:74:2d:c3:13:66:4a:38:bd:
05:24:6b:f2:c1:8f:49:55:e1:32:bd:87:1d:77:b0:44:81:44:
2f:1e:43:40:e4:89:46:99:21:62:13:91:76:ac:f9:ac:d9:7b:
90:08:fa:8a:88:0e:15:f0:44:f8:e3:75:13:59:c7:34:f8:05:
cf:a5:a6:22:90:f2:93:54:7b:a7:ed:05:41:8a:f3:97:f1:27:
3a:62:12:de:40:ae:3c:ab:1f:c7:22:2a:e2:94:b8:de:d1:c2:
14:18:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:34:03 2026 by rpki-client