
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier: TSdMXlv2VU3z2rt7TFtaP6ggFjVanhWbBU5rpkSBD+o=
Subject key identifier: 71:35:D6:F9:FE:0A:22:71:0D:96:A5:C5:E2:76:7C:92:20:4E:E7:FB
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number: 0162
Signing time: Sun 27 Sep 2026 05:27:06 +0000
Manifest this update: Sun 27 Sep 2026 05:27:06 +0000
Manifest next update: Sun 04 Oct 2026 05:27:06 +0000
Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: 6Y+d5FAx3XMpu3AlMCffw6rC5sN4ZSYeQzD5URQbvis=)
2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Validity
Not Before: Sep 27 05:27:06 2026 GMT
Not After : Oct 4 05:27:06 2026 GMT
Subject: CN=6ab8a92a-f920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:36:5a:c6:9c:d2:eb:76:db:10:7c:9d:01:
ec:da:85:b1:4f:2c:da:58:fa:f1:a2:c6:e7:69:c2:
b0:57:d4:c1:e4:71:2e:af:ad:66:44:63:d4:57:5d:
62:56:f9:62:4f:ff:e7:87:0e:1f:5a:a3:4b:64:e2:
1a:4f:66:82:75:a3:e1:a1:98:d3:26:9a:52:6e:e2:
ca:1c:ce:fe:ed:18:d8:d6:cc:57:e8:f3:70:78:7b:
85:26:e6:e1:c5:b5:16:e1:71:77:ee:03:91:13:2b:
0c:f6:fa:c8:7c:54:e0:38:19:2e:6d:74:99:5f:f8:
5f:7e:78:c9:53:84:43:b9:d0:33:b0:69:56:d6:39:
e3:37:04:9c:e0:d6:5c:d0:3e:bf:4c:b6:fd:5d:2d:
bb:a6:49:3b:97:bd:f5:5f:56:d0:75:e6:0e:ba:83:
db:33:11:46:90:76:01:a7:c4:26:17:d1:68:42:8d:
1c:e5:f8:24:4e:dc:8c:e2:99:c9:08:0f:2c:07:e5:
a0:28:47:78:e2:2f:32:4c:3b:ff:c9:21:3c:39:ab:
94:4d:97:07:80:18:42:1e:1a:49:a4:44:e5:fd:b5:
57:e7:3e:40:5f:ad:4d:50:8e:2c:59:ac:34:38:09:
44:9e:c3:c8:d7:2c:17:ea:a9:e2:d3:cf:61:dc:8f:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:D6:F9:FE:0A:22:71:0D:96:A5:C5:E2:76:7C:92:20:4E:E7:FB
X509v3 Authority Key Identifier:
keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:90:c9:d3:cc:bf:a8:99:54:8d:ee:d8:30:1e:df:9a:fe:11:
f3:33:e5:73:57:b5:f1:c4:e5:56:80:3d:f5:fc:61:ad:5b:09:
06:2c:b3:d0:ce:21:fa:ab:d1:54:14:c9:39:4f:9e:94:46:df:
eb:6f:ad:cd:6d:af:08:9d:4d:af:25:11:2f:d0:7c:11:2d:b5:
59:06:8e:df:43:17:a9:4a:e0:c5:b4:2d:16:5e:22:af:7f:8f:
b1:ef:5c:64:bd:ff:6d:51:c3:56:94:38:08:72:6f:37:b1:65:
79:a4:1a:bd:2e:10:11:a1:b5:04:ed:0e:ea:02:5e:cb:b4:35:
62:31:6d:bb:c9:80:0f:01:51:b8:d7:52:7c:8e:b4:3b:cd:87:
49:e2:16:31:98:73:07:42:27:7e:28:a0:60:a0:ed:2e:68:a2:
79:d1:27:b7:39:ef:46:9f:d7:77:a7:14:f4:45:de:0c:fe:26:
a3:c3:52:16:08:ad:64:0f:85:29:fd:d2:8a:f0:0a:7d:4a:13:
97:e6:4a:9c:3c:88:25:7b:c3:8c:5d:37:da:e4:2f:19:9b:51:
44:31:16:f0:44:86:12:12:93:3f:81:ad:cc:9c:7e:8c:42:38:
f0:62:94:57:9a:47:2d:1b:dc:a6:cf:f5:9f:35:b6:25:88:22:
cd:db:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:27:09 2026 by rpki-client