
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
File: bM962T-4K_TWlcn087pVvbvtUA8.mft (raw, json)
Hash identifier: ffbCHCxGOO9PHM4Gaph+AwGlnBjpYYtWQjQOBIbkJ4Y=
Subject key identifier: 4F:61:4F:C0:8B:57:D9:88:59:25:99:E3:9E:F7:09:50:A2:4F:70:F0
Authority key identifier: 6C:CF:7A:D9:3F:B8:2B:F4:D6:95:C9:F4:F3:BA:55:BD:BB:ED:50:0F
Certificate issuer: /CN=A911F03D/serialNumber=6CCF7AD93FB82BF4D695C9F4F3BA55BDBBED500F
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
Manifest number: 0D
Signing time: Wed 23 Sep 2026 14:00:03 +0000
Manifest this update: Wed 23 Sep 2026 14:00:02 +0000
Manifest next update: Wed 30 Sep 2026 14:00:02 +0000
Files and hashes: 1: bM962T-4K_TWlcn087pVvbvtUA8.crl (hash: PJWM/Z72WK88Vns4B0JCugcVL4o2oCCgfPw36ljZgV0=)
2: A0481C92A74B11F1895225536F11F970.roa (hash: J6dIYlpx8CpbM84fJA4wqGY7/WUTAultaTUwAuCK+mI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.crl
rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F03D, serialNumber=6CCF7AD93FB82BF4D695C9F4F3BA55BDBBED500F
Validity
Not Before: Sep 23 14:00:02 2026 GMT
Not After : Sep 30 14:00:02 2026 GMT
Subject: CN=6ab3db62-c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:a9:85:80:3d:fc:bb:84:49:70:0e:a2:0e:
49:df:0d:8e:8e:cb:3a:21:5a:51:17:47:72:0a:6b:
6a:07:9d:bd:ce:a2:fa:45:12:a9:43:03:a3:4f:8c:
e0:9f:95:bb:07:8e:21:3b:ce:ac:bb:90:31:93:65:
db:9b:e8:47:6d:b9:1b:66:d4:76:b7:f2:1b:17:99:
ed:ae:b9:e3:e2:ce:cb:3b:3d:ae:6a:6a:d7:4c:9a:
c6:b5:96:35:d5:c7:12:f4:50:67:09:94:5a:9a:2d:
ed:1f:39:4d:9f:1b:d7:af:e3:88:ad:f8:f1:2b:c7:
8a:b8:90:f1:1c:21:a6:e9:06:09:2c:87:56:2c:b6:
c0:66:6c:fa:c2:7e:62:3c:6b:3e:d3:15:7a:a4:58:
d2:dd:96:f4:70:2f:77:b1:5c:4b:d5:f9:85:83:ed:
09:75:6b:76:fb:1c:73:ab:2c:f9:7b:a2:63:13:cc:
5d:b5:16:0f:47:42:93:f3:43:37:9c:f3:47:53:5d:
eb:7f:ae:8a:35:93:ef:ac:88:d8:43:92:ce:73:a5:
b6:df:88:41:18:ba:29:41:e0:6f:85:95:f4:fd:d5:
a4:64:99:63:7a:15:33:12:1a:13:c4:7a:06:e2:e2:
4d:f3:f7:8c:57:72:f5:e3:35:64:c0:92:a3:f6:91:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:4F:C0:8B:57:D9:88:59:25:99:E3:9E:F7:09:50:A2:4F:70:F0
X509v3 Authority Key Identifier:
keyid:6C:CF:7A:D9:3F:B8:2B:F4:D6:95:C9:F4:F3:BA:55:BD:BB:ED:50:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:e2:1f:be:fd:ae:a0:0b:e1:4a:e8:bf:ae:93:f1:2a:ec:
78:0a:01:eb:1a:6d:8b:18:f6:ac:66:eb:87:48:a4:37:39:1c:
fb:83:8b:70:bd:ac:8f:28:bc:24:25:b2:4b:2e:3b:f1:9f:bf:
84:ff:b1:53:d3:1d:3d:ea:14:4b:b5:02:76:e9:ae:71:85:e9:
96:2b:02:5c:2b:5e:52:d7:9f:26:9c:ac:ae:19:cb:6d:fe:1b:
9d:76:96:0f:d9:e2:2f:ab:d8:2e:a8:18:15:3b:32:03:2a:33:
01:86:fb:4c:cb:7b:c5:9d:3f:b2:e4:59:1e:f1:cb:97:a0:6c:
d0:a0:cb:1c:99:24:a6:fa:bb:eb:c2:cd:dc:c2:1c:0c:9f:19:
ac:9a:2d:94:64:84:89:58:bf:50:0b:dd:d5:71:cd:f3:a6:7c:
07:21:df:af:5e:7e:a3:5b:b3:41:8d:78:aa:22:e3:d5:9b:e1:
c3:1c:01:fb:0d:87:ac:48:4a:ed:f5:49:08:55:64:82:33:10:
f5:24:72:a0:d0:d1:35:91:15:8a:a9:05:c7:8e:d6:e4:85:37:
23:d1:d8:c4:be:6e:58:08:57:db:80:8a:89:9b:d8:47:fd:16:
05:59:3e:da:f9:c2:e5:ff:b4:b7:64:85:05:e4:2f:8b:c6:11:
9c:b5:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:32 2026 by rpki-client