
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: qoio/uFvodiGrD8z1+zcyfR+WHofDUFvI7590+OzwEY=
Subject key identifier: 8F:F6:25:63:D5:CE:B1:2B:6B:69:98:60:06:7D:0A:8E:F7:08:C1:1B
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 054A
Signing time: Wed 30 Sep 2026 23:48:42 +0000
Manifest this update: Wed 30 Sep 2026 23:48:42 +0000
Manifest next update: Wed 07 Oct 2026 23:48:42 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: W2pozp5zHQ5BLYlB7ouIFyF+P3DFy2w6BAJDNQntDew=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 23:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Sep 30 23:48:42 2026 GMT
Not After : Oct 7 23:48:42 2026 GMT
Subject: CN=6abd9fda-f9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:50:8c:41:29:f7:ef:c6:f7:d8:bf:0e:15:
b4:ba:9c:cd:dc:f3:b6:e6:ab:77:28:74:52:d3:45:
5a:49:5a:f7:9d:88:02:39:99:53:1d:93:af:bc:c1:
cc:40:be:c9:62:73:cc:cb:db:82:31:75:b2:c9:41:
de:94:cf:db:6f:ae:49:f2:85:2b:1f:c9:4a:4d:8f:
17:e6:4a:47:8a:0d:99:b3:ef:d1:d1:bc:25:a8:cd:
36:26:db:7d:21:ed:b3:57:5e:a6:0f:57:fe:a6:be:
ed:4a:ae:0a:8e:a4:ef:f6:cc:6a:52:01:34:d3:ae:
6d:b8:bc:6b:c1:73:f3:e3:d9:c3:af:97:e6:a3:e3:
a0:a7:a5:a8:59:be:86:39:53:a0:92:33:ec:06:0d:
18:4e:ce:f5:a4:a6:3d:c3:14:2d:70:6d:c0:54:60:
82:55:e2:77:1e:b7:54:39:ec:53:5c:d5:1d:0a:3a:
3f:24:07:47:3c:7b:f6:a9:56:06:af:81:c6:1a:43:
57:a3:60:ba:8e:7a:a2:dd:72:6c:cc:99:f9:db:1e:
11:ae:b7:06:08:74:9a:4d:f3:24:e7:a0:32:79:4f:
d5:9c:d5:8f:6a:3b:93:d6:ca:34:0a:55:da:3e:11:
16:be:1a:b0:d7:29:6c:1a:e8:be:8b:da:5b:b3:95:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:25:63:D5:CE:B1:2B:6B:69:98:60:06:7D:0A:8E:F7:08:C1:1B
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:38:89:e9:ce:3a:6f:eb:2d:e0:23:45:5e:30:9f:ce:f3:b7:
0f:6b:28:00:44:9d:65:dc:ff:64:ae:a7:db:e5:a3:ea:0d:6f:
15:73:b4:59:cb:24:20:92:4e:b2:aa:9f:73:32:70:5e:b6:ba:
7b:20:e9:e9:ce:53:68:00:b4:c5:6e:d1:41:96:d4:16:61:20:
1f:7e:d0:64:89:c8:1e:bc:76:7e:31:3b:a3:17:4f:c5:97:9d:
dc:c5:02:80:56:60:a4:8d:6e:4f:3c:e9:a7:c6:eb:92:c1:1c:
e1:c5:dd:66:69:be:40:a3:e4:cb:be:43:78:ea:cc:71:98:ed:
2a:6a:71:6b:f7:b3:9f:93:29:20:0a:5c:3b:ea:0b:cd:4e:24:
43:ed:56:7b:8a:99:c1:72:38:61:1b:9f:4f:b9:ce:92:5a:34:
4d:cf:86:23:96:08:f2:e5:1e:db:67:80:5b:40:81:41:cc:8a:
2c:41:79:50:5c:02:1c:07:cb:39:49:e8:1e:d4:7d:64:b5:c1:
e0:b9:0a:c5:71:bd:51:2e:e4:ef:ba:7d:31:46:b4:21:4d:7c:
a6:28:72:b7:5c:f4:ef:9a:21:ff:da:7c:14:36:54:31:7b:9d:
09:f8:cc:f6:a1:83:69:dc:fe:40:6b:07:29:8f:54:98:6b:e4:
f0:d5:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:57:23 2026 by rpki-client