
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: bkWe9zxGMYcIR3uLUJ607V2h/CzI4pul9AkXoYfsFVI=
Subject key identifier: 90:EB:92:55:BC:75:5A:B3:D7:3E:82:6C:02:9C:97:B9:43:90:9C:06
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 01C8
Signing time: Sun 11 Oct 2026 04:14:19 +0000
Manifest this update: Sun 11 Oct 2026 04:14:19 +0000
Manifest next update: Sun 18 Oct 2026 04:14:19 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: CLOzBoWvf9f0V5RU5hrxzS0LgB54elmChUT6CblYS7o=)
2: gtTtBpyXuhrVn0rKTqX8ZAJIiYs.asa (hash: i6Ei0mkxTuk/Vn+KWhIs0U7VkLFpXl06SGma6YDkuRw=)
3: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Oct 11 04:14:19 2026 GMT
Not After : Oct 18 04:14:19 2026 GMT
Subject: CN=6acb0d1b-e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:52:02:40:37:97:57:0e:2f:41:cd:bc:c3:
93:fa:7a:be:3f:9d:ce:2d:1c:00:63:fd:34:99:02:
24:47:27:07:dc:8c:f8:ad:a3:33:28:24:3c:f9:5a:
cf:ed:d8:b7:e0:ba:d4:7c:9c:61:a8:cc:53:46:0f:
f1:bf:39:51:99:97:9f:ea:b6:f8:de:f5:00:da:b2:
30:0a:b3:b1:6b:b7:41:2f:77:26:36:cb:6e:b6:4e:
a0:3d:1c:62:52:b2:65:26:73:0f:4e:33:7f:51:1e:
e0:46:5c:01:c3:85:b5:c5:e0:83:5e:da:38:79:c1:
12:29:4d:3d:55:03:84:07:4c:0d:c5:b4:37:28:ca:
df:16:c8:2b:f8:72:86:7a:5f:61:84:dd:5c:0c:ff:
5c:25:32:28:da:27:ff:82:66:1c:40:32:1e:1d:55:
49:89:1a:fe:52:09:93:75:df:c2:09:da:4a:9b:59:
5b:11:79:ca:21:9c:c7:48:2c:df:f9:9a:d9:51:1e:
68:6e:be:77:6b:de:d3:6b:1e:b6:df:95:c0:ca:eb:
e6:68:53:cc:2c:5b:dd:78:68:fd:17:01:ff:39:6f:
de:02:94:17:7c:f3:07:33:40:30:ac:42:46:cb:85:
f6:c6:6a:3d:93:f0:a9:e4:f4:63:49:4b:8e:ff:a3:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:92:55:BC:75:5A:B3:D7:3E:82:6C:02:9C:97:B9:43:90:9C:06
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:e7:eb:08:b0:af:4e:eb:06:dc:09:f2:e4:a2:72:40:c1:
2f:c3:ba:53:ea:27:7a:a4:a3:ff:11:f9:2d:d8:e0:95:32:1b:
78:90:2e:be:32:88:85:ff:83:e2:bc:86:6a:36:4e:d8:f3:f2:
8f:4a:d1:3c:82:37:fc:8d:04:9e:f4:14:cd:60:0f:ee:4d:17:
66:9a:fa:47:5b:8d:49:ba:68:92:f1:58:00:18:6a:5a:d6:86:
d7:55:ec:40:e5:7f:94:99:24:53:03:86:59:07:5f:99:a3:fe:
3a:33:6f:f1:b1:75:3a:d8:9d:0c:3a:14:21:31:26:0f:ff:f9:
f8:a1:c0:d3:e7:92:cc:18:51:26:35:af:8b:93:d7:92:86:fd:
9a:1e:a9:e2:05:59:56:42:cf:e6:4b:0d:ea:5d:2f:15:6a:92:
2a:82:f4:7c:de:29:58:0b:ce:71:42:0d:d3:b6:37:a9:2d:9f:
54:9c:c3:fe:dc:77:09:00:96:19:32:84:1d:4d:a4:19:14:ee:
13:3b:7c:8f:bf:11:81:59:c7:a8:c9:6d:10:b8:03:b0:e1:3a:
cc:23:5a:56:7b:37:16:54:92:19:07:5e:55:3a:54:f4:df:98:
de:0f:ed:cb:d7:fd:49:13:69:ec:c1:ad:57:36:2d:9f:a4:8a:
ef:b4:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:20:40 2026 by rpki-client