
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier: 3vdw7ESswOGCxbkzmAWxAk52Bn7oN+n+r/BVLeBxyF4=
Subject key identifier: E6:DE:8E:FB:A5:BC:02:61:7F:FC:EB:3A:A2:4F:54:BF:42:9E:6A:28
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial: 07F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number: 07EC
Signing time: Wed 04 Nov 2026 21:32:49 +0000
Manifest this update: Wed 04 Nov 2026 21:32:48 +0000
Manifest next update: Wed 11 Nov 2026 21:32:48 +0000
Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: M6ebdkRGU5B9oCFnGQlr76hkoMjETV90V/kAEXEzezk=)
2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 21:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Validity
Not Before: Nov 4 21:32:48 2026 GMT
Not After : Nov 11 21:32:48 2026 GMT
Subject: CN=6aeba481-9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:8d:f7:5c:6d:45:bb:ff:05:82:bb:3f:1a:
20:4a:84:3e:a1:0b:5b:9c:35:d7:f1:7f:2b:57:d1:
60:25:44:9d:3b:61:53:76:84:ee:29:a1:4b:db:a4:
8d:e9:fa:90:4a:e0:f8:65:02:bf:03:83:62:b9:1e:
fc:8e:7d:65:ba:78:b3:23:aa:63:cc:48:a8:9b:86:
e9:c9:1d:42:3d:c0:59:64:12:43:54:30:26:77:ba:
ec:d8:bb:b6:fc:92:81:c2:37:34:dc:dc:46:f0:31:
fa:66:55:73:4d:4a:bc:eb:92:de:a2:22:4d:39:57:
4c:b7:0c:cd:12:f4:c7:34:5e:57:09:c6:d8:6b:bc:
06:6a:52:82:0c:3c:98:ed:d2:cb:ea:eb:cb:7b:57:
0d:bc:50:5a:f3:54:d9:dd:4f:08:f1:88:73:06:e3:
43:1b:13:30:7d:4a:8a:dd:5b:64:4d:d2:98:a6:df:
b2:e5:e7:37:bd:f4:d8:d0:17:85:6f:7e:da:bd:17:
40:4c:f3:b9:9f:01:4e:3b:77:fc:5c:e3:13:6d:3f:
34:1b:00:d3:e8:be:e0:fb:dc:97:f6:54:9a:81:d3:
c0:fd:b9:c7:df:f1:ae:ba:52:56:fe:bf:72:47:4c:
6b:ba:44:20:7b:8f:b6:b7:9c:d8:fd:70:d0:d3:4b:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:8E:FB:A5:BC:02:61:7F:FC:EB:3A:A2:4F:54:BF:42:9E:6A:28
X509v3 Authority Key Identifier:
keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:76:20:13:b3:96:55:22:37:1a:92:45:30:76:f2:3f:9d:
64:f0:17:74:61:de:7d:7e:63:5c:82:ff:2e:53:f2:19:a6:db:
80:d6:8b:2d:71:b9:65:da:00:4a:18:f5:ce:3a:44:7e:9e:16:
14:48:13:bc:60:d0:fc:d0:64:90:9c:0b:7a:1b:81:40:e3:bd:
ad:fe:64:4b:c1:bf:01:b1:d6:6a:48:1e:d1:99:f0:82:e1:e2:
92:47:ac:e5:cc:2d:d0:5a:76:cc:7a:c2:56:77:b4:a5:3f:b8:
ca:88:a6:ac:54:d8:b8:ea:40:97:61:b5:72:82:d2:ee:0f:41:
cd:5f:dc:52:6f:b1:03:d2:ff:20:89:21:6f:e7:c9:fd:06:39:
19:0c:5e:21:e4:df:10:6b:06:5f:da:75:20:48:f6:5d:dd:b2:
36:09:8f:1d:21:d8:4b:63:f6:a2:f5:4d:71:84:7a:35:36:6f:
4b:0a:ca:aa:03:a9:c0:ca:14:9d:e8:6d:e7:c0:65:f8:c1:fd:
e1:fb:d1:a3:75:2b:8b:a2:f0:0b:72:76:8b:24:a8:1d:cb:7e:
b1:e8:a6:63:56:cd:c4:ad:7b:3e:cb:af:78:be:ad:88:8c:39:
10:e1:4f:83:4b:ef:71:73:86:58:e7:c4:0f:0e:69:bd:be:81:
fe:08:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:30:05 2026 by rpki-client