
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File: usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier: +p2F+4hNHYVum2opNv9L0sdGQnHHSVdZBTswrz1gDFQ=
Subject key identifier: B4:28:73:C5:60:1F:50:9F:7E:38:5B:D9:47:1D:13:A5:54:6F:8A:78
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer: /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number: 8D
Signing time: Wed 23 Sep 2026 07:18:53 +0000
Manifest this update: Wed 23 Sep 2026 07:18:53 +0000
Manifest next update: Wed 30 Sep 2026 07:18:53 +0000
Files and hashes: 1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: DdsfkVB/HE4MEOh0R5CPc+RKnPHsXNL5KJIqQjQVQ4A=)
2: 9D379516E54D11F092458985756F56BC.roa (hash: Hhwlbhyj8xIcBqU3mSebItjPxuaiWJe6Fv2dlfosEMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Validity
Not Before: Sep 23 07:18:53 2026 GMT
Not After : Sep 30 07:18:53 2026 GMT
Subject: CN=6ab37d5d-64c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:2e:ea:c8:bc:b8:cd:7a:e5:f1:97:4e:1f:
42:19:17:ab:c9:c8:c0:d4:61:8b:45:8a:48:a0:6c:
57:4a:ae:85:6d:31:d9:8f:31:f4:fe:81:04:76:7e:
a8:51:0f:db:31:b7:d3:5d:f4:b7:64:92:19:39:e3:
b1:c4:5e:60:f0:fe:3e:7c:0a:3f:96:e5:78:c2:26:
a9:a0:ce:41:db:0b:0e:36:85:19:09:cf:00:07:37:
23:3b:5e:18:7f:20:af:3e:99:cb:6d:31:0c:0e:b9:
ac:3c:99:35:03:be:67:3f:8f:13:ca:43:9a:1d:fc:
81:7c:37:1a:23:a6:e9:21:38:90:31:73:f8:fe:d7:
7d:14:8f:20:6b:10:b4:31:46:3e:db:d2:19:20:88:
47:28:8f:83:ea:ab:58:2b:25:b7:ff:30:d6:fd:76:
63:17:4f:f6:a5:52:d8:26:99:7d:e9:0e:02:8c:5f:
23:44:32:21:fa:a1:ca:3f:21:db:98:01:cd:c0:a5:
7b:e2:9d:09:ee:16:50:a2:7c:81:67:aa:ec:ba:ce:
2d:48:1e:85:bb:46:df:af:52:ce:7a:ef:75:a2:e0:
0e:9f:46:55:18:2f:d9:e1:ea:49:a3:d6:96:c7:fa:
8d:e2:e2:ea:2e:7e:b7:7f:d3:11:b3:bf:5a:5b:ac:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:73:C5:60:1F:50:9F:7E:38:5B:D9:47:1D:13:A5:54:6F:8A:78
X509v3 Authority Key Identifier:
keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:77:26:e0:67:59:19:b5:80:e7:04:96:2c:c6:f6:94:b5:
be:69:ee:fa:43:b0:00:1a:64:ef:30:72:59:d7:ef:fb:4f:31:
79:f4:c1:09:ef:31:79:e0:4c:de:77:1b:25:0f:bc:75:eb:e1:
ff:29:29:ad:d2:d6:9b:88:55:43:96:0e:82:9b:96:35:61:82:
d2:e3:ad:e6:4c:f9:34:0c:18:6d:8f:67:07:4d:5f:9a:32:3c:
76:d2:d7:31:d5:01:28:40:57:14:0f:6d:be:f9:35:7e:46:3a:
c6:26:0a:5a:57:b5:a0:4b:58:4f:d0:78:d8:65:6f:1e:89:33:
2b:0a:4d:5f:2c:ab:16:25:08:98:fb:f7:2d:5f:18:cb:53:c9:
92:cb:a6:e4:45:13:b3:5d:ce:2d:71:8e:5d:5f:48:22:e9:e5:
44:50:39:6d:87:8f:91:61:95:57:1f:f0:c0:52:76:7e:47:6f:
f7:51:07:c1:61:85:ec:41:ce:dc:7f:97:a9:b9:3f:17:6e:a4:
86:4d:31:2a:a8:88:e4:cd:9b:d9:42:9a:ef:4e:55:41:98:67:
47:3e:61:0c:b1:77:91:76:af:9d:61:e5:4f:13:27:31:d6:40:
d1:d3:22:e1:27:ae:a4:29:3b:86:77:2b:00:6e:3c:74:18:64:
ec:b6:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:16:18 2026 by rpki-client