
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier: iyXSam8B6JAuMGwGFvguLXK2XFBOb+KcWEYcHh+6xzQ=
Subject key identifier: 8D:AD:AA:26:CC:47:8F:99:A8:41:D8:31:41:46:31:A4:58:A9:60:6A
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 08AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number: 1558
Signing time: Fri 12 Jun 2026 19:21:35 +0000
Manifest this update: Fri 12 Jun 2026 19:21:35 +0000
Manifest next update: Fri 19 Jun 2026 19:21:35 +0000
Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: f4D6FYwa22+0ysh2xm9Xslb23J3l9cYkTtHQKr2oSpg=)
2: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=)
3: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=)
4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Validity
Not Before: Jun 12 19:21:35 2026 GMT
Not After : Jun 19 19:21:35 2026 GMT
Subject: CN=6a2c5c3f-d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:21:bf:9b:70:af:4f:26:e9:4e:27:1a:8b:
f8:b8:07:f0:e9:73:2c:30:2a:79:93:c3:8e:c9:ff:
8d:6e:10:cb:5a:1b:50:7f:b7:c2:49:84:17:db:9a:
cb:28:df:3e:7e:bf:19:e7:c3:26:aa:b3:4b:9b:c0:
fb:5e:e5:3c:22:6a:ae:2c:cf:f0:6c:68:a2:75:4b:
37:07:ef:16:ae:91:07:95:de:db:ee:c7:8e:01:c8:
8f:ad:6e:29:be:bf:1c:5a:77:ae:8d:22:af:bc:a6:
10:20:d9:e7:fa:74:4e:51:8b:cb:81:84:25:61:4c:
a1:7d:04:5f:81:e5:e0:af:20:67:b6:a8:4e:30:98:
00:9b:d1:3c:0e:e7:bb:f2:8e:ad:0c:80:da:bc:d4:
29:29:8f:26:97:28:54:70:d6:f4:32:7f:80:8d:ff:
cd:d5:1e:b5:03:64:50:a8:59:6e:b7:db:5f:a7:a8:
80:a9:4e:cf:53:10:96:af:7e:2a:e7:b2:dd:e1:b7:
b4:b0:f0:cf:72:22:b9:ce:d2:eb:19:e1:75:23:14:
cf:62:83:23:52:63:79:12:54:2e:fe:b2:2a:cf:29:
c6:29:fb:18:39:3b:31:7b:76:55:a7:c6:18:c7:6a:
9b:4b:50:51:30:58:ee:64:e5:0a:50:d4:ed:7f:80:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:AA:26:CC:47:8F:99:A8:41:D8:31:41:46:31:A4:58:A9:60:6A
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:d2:83:58:39:9b:1a:4e:78:c2:bb:0c:f6:b4:6d:00:62:
41:62:80:f3:12:c0:10:f1:11:0b:5a:4c:8d:2d:11:04:fd:bd:
e4:a7:0f:af:c8:e1:b1:25:7c:18:b5:95:bc:05:b4:4d:3f:fc:
71:58:1a:5e:a3:31:f0:5c:6d:2c:56:77:dc:19:ac:d8:87:fb:
4f:dd:dd:95:af:a3:3d:02:40:3f:dc:c4:ff:88:da:fc:61:47:
0f:cc:b1:7d:c4:cf:81:f9:33:a0:74:00:d9:9b:40:7a:1a:d2:
f4:4b:32:56:b2:22:b0:52:5a:0c:43:60:d5:ba:e2:74:97:93:
12:55:b3:8c:f7:c7:dd:22:be:ef:da:25:20:88:9b:76:8c:e7:
89:e9:54:a7:df:92:e6:29:da:02:24:16:15:00:bc:4d:a3:1a:
cc:60:5a:24:e9:fc:31:9a:42:4c:b7:bb:1c:5b:4a:f9:f4:a3:
e2:a5:74:a9:e9:8f:89:57:14:1d:96:03:04:4b:bb:cc:2a:6b:
4e:92:b4:49:d5:7c:52:d8:98:a9:a5:67:1d:b6:45:1e:5c:4d:
6e:2e:a5:53:8a:02:25:d5:52:ca:0c:5c:2e:64:17:c3:e3:2e:
75:58:cf:fe:b1:49:87:d3:e0:61:54:a8:f5:cc:e6:95:1d:4a:
de:81:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:59 2026 by rpki-client