
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json)
Hash identifier: OeS6pE9K1iOl9kDP3tqsXQy48J0rjkx9/I1zCfNWIBA=
Subject key identifier: 19:45:06:4E:D7:6D:CD:C0:38:BD:6F:09:08:50:2E:4C:51:C6:1F:D1
Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
Manifest number: 7C
Signing time: Wed 23 Sep 2026 07:33:02 +0000
Manifest this update: Wed 23 Sep 2026 07:33:01 +0000
Manifest next update: Wed 30 Sep 2026 07:33:01 +0000
Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: hbMjrpk/k29cBZI5XD9/4eraWkguO9f39/y+bWInP1Y=)
2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5
Validity
Not Before: Sep 23 07:33:01 2026 GMT
Not After : Sep 30 07:33:01 2026 GMT
Subject: CN=6ab380ae-1d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:b5:a9:90:6e:de:c9:b6:d7:fc:c8:ed:7d:
e7:b7:88:08:68:2d:dd:dc:c0:86:2f:85:99:ed:be:
4b:8c:03:9c:07:a1:20:47:83:1e:b6:f4:0e:36:c7:
ec:90:a1:0b:66:27:3c:82:60:12:23:ef:ae:79:11:
1d:3c:18:e6:56:80:42:a4:6c:fb:ab:93:3d:4f:9e:
de:92:d1:72:09:ad:35:cf:d6:f0:45:73:3f:b7:6f:
f8:60:8d:f4:1b:1e:d5:82:c2:b8:4f:ab:a3:ee:f3:
5c:35:de:55:41:2d:33:c2:21:b4:9a:60:8c:99:89:
16:59:38:97:89:4f:43:8d:d6:97:fd:18:2e:61:b4:
38:7d:e8:18:e5:8c:ed:b9:70:b8:6b:b3:4b:02:0f:
5c:03:af:59:06:b8:56:44:db:9b:5c:9a:21:85:2c:
a6:2a:91:60:b4:cf:30:ce:21:9c:03:96:1a:e9:a7:
38:6b:0f:39:f0:db:1a:6d:68:81:c5:bc:be:f5:22:
ad:73:3f:27:0b:de:ff:8f:65:c2:1a:e8:87:82:4b:
2c:0a:60:62:77:30:95:51:b4:b4:c9:2a:f0:29:6d:
eb:46:33:37:32:a7:49:e6:4c:2c:e1:16:cb:a2:d0:
e8:0c:47:3e:f0:fc:87:92:fd:d7:3f:6c:3b:ac:e4:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:06:4E:D7:6D:CD:C0:38:BD:6F:09:08:50:2E:4C:51:C6:1F:D1
X509v3 Authority Key Identifier:
keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:44:3c:56:17:b3:58:73:5f:46:90:8a:e8:b3:ef:00:8a:
02:81:23:fc:af:71:35:b8:e1:10:bf:b1:63:72:d5:78:41:51:
09:2f:0f:7f:ec:d2:c7:a8:45:ff:9d:15:e5:38:a2:12:9b:d0:
0e:5e:58:34:85:a9:dc:a6:df:86:49:cf:02:cb:64:c9:88:c0:
59:f7:0e:5b:b9:f2:5d:63:8d:80:26:01:2f:b0:7d:26:e2:c0:
a5:ac:1e:3b:2e:95:d6:e6:38:03:28:89:76:c5:6d:79:ff:7c:
03:39:52:21:89:1d:19:9e:1d:3d:1b:bf:11:50:d5:e0:b6:89:
53:82:79:7e:b4:30:28:23:e1:49:80:74:b4:7d:34:7c:95:b0:
1e:3d:1b:bb:0d:d7:d5:3c:b5:41:62:3d:c1:cb:24:c7:7c:d2:
d1:86:92:83:09:9c:dd:6d:82:05:a9:6b:97:0c:41:3e:c4:8a:
74:7c:ce:cd:f6:03:35:f5:90:d7:1c:5f:63:32:61:4e:ab:85:
e7:42:79:05:ec:f3:21:0f:7c:71:76:b2:19:db:74:4e:6d:84:
37:a2:94:c3:e6:63:2b:08:b1:44:a6:27:d0:93:3e:09:7c:68:
8d:f0:2f:8f:9c:af:90:1f:bc:75:95:1f:5a:33:fa:a5:e7:3c:
0c:de:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:52:13 2026 by rpki-client