
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier: Ys0oP7QL8JeX3GbWih1swOrGiTmMbvnfnvXJeLOVcGg=
Subject key identifier: 68:F4:3E:F1:A9:8C:DC:4A:24:F7:BB:61:52:A9:93:32:1E:6F:0A:E2
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial: 1422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number: 1415
Signing time: Sun 20 Sep 2026 16:52:22 +0000
Manifest this update: Sun 20 Sep 2026 16:52:21 +0000
Manifest next update: Sun 27 Sep 2026 16:52:21 +0000
Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: aUTYrZfYKbPbb0CtCTiFyRhKXMAvOmdCwdBpFZP2UMU=)
2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5154 (0x1422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Validity
Not Before: Sep 20 16:52:21 2026 GMT
Not After : Sep 27 16:52:21 2026 GMT
Subject: CN=6ab00f46-c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:ed:22:c1:eb:89:e2:91:eb:ae:03:75:d8:
98:9d:d5:59:70:28:08:12:32:26:93:a3:06:44:84:
95:10:18:90:96:a5:c3:3d:17:99:7b:7b:02:f8:3c:
36:8b:ec:8d:eb:0f:8a:b6:c7:a5:23:3b:8d:a6:d7:
ba:a7:71:ec:44:db:e6:d2:1f:dc:c8:53:69:88:78:
00:23:18:0f:25:47:d6:89:36:f2:d7:aa:56:11:89:
b1:a9:7a:ef:4b:4d:10:65:57:64:a5:0c:ef:85:39:
c9:1b:60:22:a8:d1:b2:31:4f:62:ed:68:2e:c9:d0:
48:ec:1e:f0:36:60:2b:5d:f3:b2:35:7b:ea:67:c5:
79:3f:eb:e5:18:f6:33:aa:d2:82:96:85:29:9d:bc:
ed:81:a1:97:fa:94:0a:85:c8:42:f7:f0:66:69:c8:
2b:fc:60:96:33:69:4f:54:a9:cc:a2:81:6b:b8:ec:
d7:6a:82:8d:40:0e:be:6c:80:4a:18:f9:99:0f:71:
a1:27:48:38:cd:f0:7f:1b:d5:4e:ab:29:1d:ec:2d:
db:da:2e:64:0d:a3:af:0f:4f:06:54:21:47:b3:53:
e9:3a:02:98:8d:82:62:de:db:13:62:49:52:10:90:
56:e4:d5:7e:0e:5b:86:e0:07:c8:03:36:29:32:c1:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:3E:F1:A9:8C:DC:4A:24:F7:BB:61:52:A9:93:32:1E:6F:0A:E2
X509v3 Authority Key Identifier:
keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:43:ee:d5:91:c0:a6:22:0c:8c:42:bb:c5:06:b6:66:c4:4b:
da:15:5a:99:7e:88:de:e6:00:c8:0d:48:40:85:1c:83:61:d4:
7c:e3:2d:01:b1:e0:77:24:e3:8a:91:a2:0d:ab:92:ab:e2:b7:
b6:79:5e:c8:7d:ba:b0:17:30:95:56:ce:3b:1d:bd:39:2b:a6:
05:a0:a2:9b:ba:b1:c9:4f:cb:fc:c2:26:b7:bc:a9:fd:24:9d:
d5:77:3a:f3:80:2c:01:bf:d6:8c:a4:3d:1b:b9:6c:03:82:80:
09:23:0c:e5:d1:ee:b1:89:72:d2:81:1c:e5:01:15:9c:28:58:
34:31:4b:4d:e3:57:15:43:51:0d:d0:e9:3d:3d:6e:f0:6a:4e:
fc:fa:30:2c:6b:bc:a1:d6:c3:47:13:61:7b:5c:36:88:47:4f:
13:2a:21:7e:78:6b:f1:b6:f6:b6:c3:26:70:cd:ba:fa:3d:58:
c9:32:7a:1d:d6:2e:b5:8c:e5:2b:a7:d9:11:c4:5e:ff:aa:9e:
32:39:71:0e:95:dd:cf:4e:2b:55:8b:60:87:49:5a:54:d3:b8:
5f:fd:4d:cc:b0:8f:34:cf:da:ab:ae:61:7b:73:30:e4:dd:13:
e2:cb:eb:2a:d9:18:c9:43:ba:20:e6:bb:f6:8d:ba:e3:72:20:
d2:70:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:46:04 2026 by rpki-client