
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json)
Hash identifier: 8DG5//0J1BVxhwmshbOznW+V5ZnTeedtEgCbzMk2m24=
Subject key identifier: F9:E9:F5:98:22:E9:C7:F9:69:D5:B4:76:82:1D:23:5F:63:36:FE:98
Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
Manifest number: 0299
Signing time: Sun 11 Oct 2026 02:05:55 +0000
Manifest this update: Sun 11 Oct 2026 02:05:54 +0000
Manifest next update: Sun 18 Oct 2026 02:05:54 +0000
Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: lZJ14oRhCDUB6UHlhWJRg8gxyHTOG68AuxtzRr8a9dc=)
2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: 3Fmdi951WMlO5pIrJJT0qggVYSRtlXXjg5aoHRb8yfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Validity
Not Before: Oct 11 02:05:54 2026 GMT
Not After : Oct 18 02:05:54 2026 GMT
Subject: CN=6acaef03-0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:98:c8:06:1f:10:c1:e3:92:0e:b4:f9:29:
56:e3:b2:a3:82:13:8d:e3:39:de:44:2b:fd:f3:8f:
1e:56:a7:a2:ac:58:49:f4:d7:fb:20:7b:41:6b:ee:
ca:10:de:8e:cc:75:63:fb:dc:8d:79:e7:d9:7e:f8:
9e:d4:8b:be:c6:ea:d9:ac:17:ff:c1:8a:ee:08:e5:
4c:40:8b:85:fc:40:6f:21:ea:63:0c:e3:65:91:52:
7d:05:b7:05:92:3f:cd:50:4a:99:63:dd:de:72:9c:
56:59:15:4e:55:7d:df:e8:b5:86:44:a9:7c:f2:0a:
a4:f0:42:7e:96:5a:d0:d2:99:3d:e2:95:fd:3c:c8:
88:73:b5:7c:e3:5d:bb:51:1a:4b:ea:31:13:ad:30:
53:7f:36:99:bd:e9:31:29:03:a8:9e:48:20:3e:cf:
13:2d:24:3b:36:aa:9a:d5:f0:f9:66:09:49:99:b7:
ea:6c:67:4e:ee:46:fc:9e:96:6a:78:b3:32:d3:b4:
ca:d7:28:ce:c5:a6:f3:36:cc:98:4d:27:31:ab:8a:
1b:d4:7f:36:ed:c6:04:9e:de:6b:21:e6:a0:e9:6b:
97:4f:a1:de:99:66:58:05:f9:4a:4f:e2:2f:20:1f:
6a:33:16:cf:97:ec:a0:f0:69:9d:ea:55:74:74:f9:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:F5:98:22:E9:C7:F9:69:D5:B4:76:82:1D:23:5F:63:36:FE:98
X509v3 Authority Key Identifier:
keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:43:42:39:9f:52:71:ff:61:d4:2f:6e:4b:fa:9f:ab:1f:
1f:4b:8b:cc:1f:fb:40:6c:6d:68:3d:39:1a:ef:f0:c7:fe:aa:
f4:9d:eb:4e:5d:36:98:33:be:2f:dd:e3:85:97:21:fa:a3:50:
0e:34:c2:80:62:c1:a8:5e:ba:b2:09:3b:78:4a:d4:c4:49:ff:
24:b7:42:c3:cb:c4:d8:2f:0a:85:fd:d3:37:a7:71:75:f3:63:
8b:be:6e:dd:6c:ea:f3:22:c3:b0:1e:a3:f9:d1:08:c2:0f:30:
7d:82:cf:fe:db:36:64:db:1f:90:0c:b5:e2:12:27:41:3d:e4:
85:f4:cc:39:56:5b:d6:96:e3:e1:ef:d2:45:e4:b2:c2:e1:14:
08:e5:e9:be:8b:ed:9a:81:b3:39:35:7f:d2:6e:2a:45:be:e3:
f7:53:85:cf:37:b0:22:81:ac:a2:02:16:82:33:ce:9c:86:10:
c7:66:47:31:d3:23:ba:ff:6d:dd:94:93:08:04:7c:da:0f:45:
af:f2:e4:17:d9:d6:9d:e9:f0:97:d3:0d:6d:10:5a:54:b3:fe:
00:c2:b3:21:7f:06:15:de:cd:f4:e5:2c:91:0a:50:50:89:9a:
63:ed:63:b2:bb:ec:0d:67:4b:e4:6d:43:85:94:60:00:ad:06:
ef:e0:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:22:11 2026 by rpki-client