
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
File: F_RkaDqcrP_uOS3atV7AQQwpaqE.mft (raw, json)
Hash identifier: lvXJoE/ME8/8ZmkZlc0uLH4z0mXfwsV5RFigudJF1b0=
Subject key identifier: CA:4E:A4:30:38:CB:45:70:E3:30:A0:80:E3:80:DA:B6:E7:A7:79:6A
Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1
Certificate issuer: /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
Manifest number: 02CA
Signing time: Fri 25 Sep 2026 01:20:49 +0000
Manifest this update: Fri 25 Sep 2026 01:20:48 +0000
Manifest next update: Fri 02 Oct 2026 01:20:48 +0000
Files and hashes: 1: F_RkaDqcrP_uOS3atV7AQQwpaqE.crl (hash: /Lb+ZZifOLJoyy6Lc7jBd6rdS4Ku9Ul2CX5Y98ufqpo=)
2: 6EFEE12C7CD211EDA61A1836C4F9AE02.roa (hash: 4FWsEphX17w8SEwHKJ24VkjzkDwbF44Iqu3mZNUErJI=)
3: 6F873B3A7CD211EDA61A1836C4F9AE02.roa (hash: Wrji6VePD5myz3pLbtzxmmd5wD0b/w8SmQMSMCc96LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl
rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
Validity
Not Before: Sep 25 01:20:48 2026 GMT
Not After : Oct 2 01:20:48 2026 GMT
Subject: CN=6ab5cc71-099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:7b:a1:48:be:fd:ac:2b:3d:ab:d9:86:7c:
98:b4:08:88:18:fc:58:43:0e:23:f7:d0:cf:c7:9e:
d5:4c:bf:e1:ac:2c:b3:a8:78:ef:54:16:8f:9f:84:
95:da:58:7e:ef:1f:29:3e:82:ae:96:7d:3b:38:cd:
06:d4:4a:2c:e1:9f:5e:66:40:67:4f:55:65:32:20:
6e:df:d5:47:3f:0d:22:60:15:f8:03:6f:6c:28:6f:
af:67:cf:9a:9a:10:df:70:e1:15:77:8c:45:6c:83:
25:ef:bf:56:95:71:6e:3b:ea:d0:0e:db:9e:6f:e8:
54:a9:09:eb:a9:da:f1:a7:94:c2:9f:02:ac:4e:49:
b0:61:b4:0e:8a:75:21:2c:11:1b:87:37:4c:15:26:
86:3e:49:01:a1:10:ec:06:0d:49:bb:ba:6b:7e:73:
5d:9b:f3:31:f8:84:32:31:e1:77:7a:30:a2:73:87:
26:01:b3:a4:74:ce:6f:ae:1a:c4:3f:10:d9:0d:6a:
d8:b9:e2:c2:2a:3c:3d:ec:f1:ab:18:90:3e:2a:82:
6e:1c:bd:16:af:89:53:48:16:a5:e5:e1:ba:4d:e6:
fd:e9:5d:cd:91:aa:8e:2d:37:49:b6:37:d5:ee:d7:
e7:25:79:61:eb:5c:82:e3:55:ff:0b:ef:af:c3:9c:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:A4:30:38:CB:45:70:E3:30:A0:80:E3:80:DA:B6:E7:A7:79:6A
X509v3 Authority Key Identifier:
keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:1f:7b:c3:9c:c9:ca:fb:b2:15:6f:15:d3:1e:ba:8c:d9:
f1:77:a6:ad:b4:f9:1d:8d:7d:72:1d:ae:d9:d2:9b:c1:59:a7:
36:31:23:46:56:15:e7:08:00:de:2f:9a:bc:24:7b:af:75:4b:
95:f8:0c:4c:db:01:19:2d:52:d8:3c:cc:dc:52:1e:37:f3:fb:
20:88:62:5a:8a:6a:fb:30:d3:50:d9:3f:d5:1a:a2:da:4d:08:
9a:cb:ad:a7:46:03:aa:cc:c4:bb:d5:29:43:8d:ed:f9:9f:dd:
ec:08:28:c0:b5:fc:47:13:b7:e7:a2:60:9c:fb:e8:d2:93:59:
af:e6:22:21:aa:c6:83:cf:93:c5:12:fa:5e:17:7e:1e:e6:2e:
26:78:42:b1:30:eb:ff:26:76:c7:22:80:44:a7:94:22:34:d5:
36:fa:f6:e7:ce:60:1f:0e:bc:b7:62:8a:ba:b8:88:1e:12:d3:
00:70:97:d1:82:dc:80:a1:63:fe:dc:1c:7d:d1:db:e3:b3:08:
42:f5:39:f3:df:28:62:b2:99:40:af:6f:a3:ec:25:19:3d:40:
2d:36:b4:5e:7b:8e:b7:07:e2:2c:eb:95:52:d6:4c:aa:2a:6f:
72:0a:03:1d:5d:3c:a5:30:ca:1e:59:a5:70:e8:dd:d6:82:6d:
67:8d:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:06:43 2026 by rpki-client