
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier: 0HPBKTPEV5CGrw0AawYWJHJm7OseTXKOQl8WMYfX7wU=
Subject key identifier: 8C:56:AB:38:0B:F3:5B:0D:05:A6:C1:EC:C3:25:8D:20:37:D9:96:00
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number: 026D
Signing time: Wed 07 Oct 2026 02:32:39 +0000
Manifest this update: Wed 07 Oct 2026 02:32:39 +0000
Manifest next update: Wed 14 Oct 2026 02:32:39 +0000
Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: cdiQfM3jZ5IuWHh8FhtmWh0iW0ysSjKnyyCoJbU3bIw=)
2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=)
3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=)
4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Validity
Not Before: Oct 7 02:32:39 2026 GMT
Not After : Oct 14 02:32:39 2026 GMT
Subject: CN=6ac5af47-18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:5c:87:80:e2:cd:e4:73:83:be:cf:d5:88:
8f:15:bd:ae:fd:12:33:f1:63:f0:7c:b9:06:bc:e4:
73:ca:92:be:3a:dd:62:9e:3e:11:f7:4e:01:9e:0b:
64:97:da:bc:41:93:0c:f7:bf:af:71:85:62:2d:6e:
b1:2e:ad:47:9f:63:66:0b:53:dc:c3:98:c6:a7:af:
69:1e:8f:29:cf:02:53:73:0a:0b:6a:ae:6e:43:6d:
93:2f:9e:5d:5e:f2:39:72:9f:29:26:88:68:e3:17:
27:91:ac:ea:12:6e:21:45:02:c6:3d:66:67:55:00:
12:7e:d9:d4:93:7a:f8:c5:0b:f8:1f:42:a4:90:70:
6a:16:b7:59:32:30:a4:30:90:4c:82:c6:46:56:3f:
ca:51:b5:ea:b4:19:90:99:07:28:32:7a:05:c6:97:
81:1c:ae:97:c1:bd:a7:fd:55:d1:c8:3b:e8:92:49:
c5:7d:ec:de:04:00:6f:a9:54:dd:79:09:ed:16:10:
e6:57:a5:bf:39:4e:60:43:21:6a:44:4c:c2:ba:15:
4f:e9:cc:72:11:8e:40:76:6b:49:96:2b:ed:4f:03:
24:6d:05:fe:2c:52:11:80:33:27:59:4b:de:37:1b:
2a:e1:90:ac:63:e2:ea:19:85:ae:3d:de:59:a6:ee:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:AB:38:0B:F3:5B:0D:05:A6:C1:EC:C3:25:8D:20:37:D9:96:00
X509v3 Authority Key Identifier:
keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:49:33:aa:d1:6c:a4:e9:72:f4:05:4a:50:65:fc:e3:17:
45:40:ca:84:d5:36:f1:ec:6f:87:ec:35:1e:c2:aa:2f:2e:5a:
93:e0:85:1a:d3:a9:38:41:a7:65:ff:b7:03:ba:e4:7b:80:ac:
64:d8:9f:de:69:b6:2b:9e:0d:67:b5:d0:93:d2:90:24:8d:87:
d6:ef:b5:00:87:dd:9f:a5:6f:24:34:95:71:bc:fa:f4:6a:9f:
b2:6e:ac:e2:38:32:3e:bc:93:f9:ad:4e:a7:47:d5:6f:07:ed:
7f:57:ea:65:0a:26:4e:e1:6b:1c:e2:fd:78:e4:29:aa:43:78:
cf:e8:47:a3:e5:1e:52:c2:58:ed:de:fc:04:64:a7:dd:1e:b7:
c8:7b:1e:1c:0e:e3:f1:ca:93:25:4d:08:54:01:93:06:5f:45:
bc:3d:85:80:70:f2:90:c9:b4:a7:6c:88:fc:25:6a:a7:00:56:
7e:84:69:e9:8e:09:59:37:08:f6:5e:9e:bb:24:5a:4e:f9:e7:
77:a5:62:6d:3a:e6:09:70:13:09:d9:8a:13:23:c7:87:fb:85:
c6:5a:43:a9:b3:5e:dc:ba:ee:78:d5:bb:21:75:b8:74:a4:ec:
e3:b1:c2:31:a8:87:b7:b2:d3:6a:66:a8:f0:af:22:e7:b8:8a:
3e:42:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:48:58 2026 by rpki-client