
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: FVccCzYgPEOM9JCPf0PWVjg6wUBIds/a41IRoVtMP5g=
Subject key identifier: C8:54:62:0B:E2:05:A0:C6:76:FC:28:5D:C2:9A:9D:A7:32:61:F7:5A
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 3582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 3582
Signing time: Thu 24 Sep 2026 14:34:14 +0000
Manifest this update: Thu 24 Sep 2026 14:34:13 +0000
Manifest next update: Thu 01 Oct 2026 14:34:13 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 9kSFX6LcirWQb1CbxBJxB+rVDiLiWWTeP38g9ACzGMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Sep 24 14:34:13 2026 GMT
Not After : Oct 1 14:34:13 2026 GMT
Subject: CN=6ab534e6-d0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:fc:01:3a:18:b6:2f:df:b7:7d:e2:99:aa:
f6:89:0e:cd:7b:2d:02:96:d5:5e:a0:5e:95:10:08:
82:7b:91:ec:32:70:41:c7:a0:42:59:b3:9f:6e:7d:
f9:3d:45:1c:22:ff:e3:fb:0f:ff:c3:99:c4:1e:75:
53:f2:22:dd:05:f3:fb:c4:19:af:90:1c:54:03:21:
d5:b8:63:8f:0f:50:23:90:10:c9:1a:aa:9f:53:1c:
9e:59:f5:fd:7a:a4:54:0b:06:45:fd:e0:12:58:e4:
9b:c9:4a:2a:2f:b2:26:72:8d:d0:5c:d0:04:2d:6c:
0c:da:1c:41:96:a7:65:94:80:89:79:da:9f:c2:d6:
ee:82:fd:85:15:b6:1a:4d:4a:25:49:89:d9:2a:83:
1f:48:1e:7a:4a:5f:6c:e1:fe:d9:0a:89:e6:33:c4:
b8:9d:f9:34:90:52:6e:59:fa:44:9e:91:d3:3f:77:
0c:fe:73:72:cf:a7:1b:ac:01:2a:52:01:4d:9a:a5:
0c:7b:77:88:b2:41:34:30:c0:3a:c5:ef:52:cc:6c:
03:c3:79:30:f5:c3:8b:97:dd:a5:e5:5e:3b:a4:56:
6d:cf:3c:c8:33:18:c7:97:77:ed:99:ac:54:0b:e5:
4d:c4:b5:68:79:0d:93:b9:ab:a7:6a:94:bf:0d:da:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:62:0B:E2:05:A0:C6:76:FC:28:5D:C2:9A:9D:A7:32:61:F7:5A
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:1a:13:39:d4:39:7d:da:eb:52:19:3b:eb:1a:ae:c9:98:
e7:5a:fb:45:95:61:84:22:ea:bf:a8:07:cb:3c:bf:3c:ec:72:
1f:53:96:03:d9:7f:b2:74:ff:28:11:55:68:01:58:a7:21:ff:
7d:4a:8b:8b:6b:16:4c:ae:de:72:e5:42:d5:f9:75:aa:8b:47:
bf:0e:52:ce:7f:bb:9f:6f:3f:ab:63:9b:a1:5e:e6:41:8c:61:
08:b8:14:bc:5b:09:9d:69:b5:dd:1a:14:67:1c:3c:6b:01:a8:
63:f7:5c:c0:84:90:34:cf:d8:28:f2:03:d4:6a:f8:e4:87:10:
ac:fa:e8:45:f3:80:93:c6:59:29:64:a6:56:f9:81:30:ec:b2:
c5:4c:e1:7a:9c:e0:85:2e:30:74:08:42:98:cc:9b:fb:84:b3:
23:09:16:b5:da:86:6a:e6:4b:3a:d7:79:1e:e0:b1:f8:94:03:
6a:4c:4e:33:76:40:8f:f4:e0:e4:17:d3:1a:e2:7a:9e:8a:3d:
e7:65:d4:e6:bc:59:89:a9:72:7e:a3:54:fa:ea:45:67:6a:99:
d5:51:4e:c5:f1:0e:38:66:6c:e8:0a:ff:fa:1e:89:c3:cb:c5:
7a:77:73:6b:ef:f7:f8:bf:1d:b6:f2:be:b3:d4:7e:dc:d5:d4:
23:d3:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:44:02 2026 by rpki-client