
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json)
Hash identifier: dLrz0A2RSmqUnl4eAtQeWcy1boYRsR3L1vUSZhvxx5w=
Subject key identifier: 2B:A6:E4:CC:41:67:02:12:22:2C:D3:FE:F9:30:7F:E6:9D:82:03:08
Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
Certificate serial: 3569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
Manifest number: 3568
Signing time: Sat 10 Oct 2026 15:17:32 +0000
Manifest this update: Sat 10 Oct 2026 15:17:32 +0000
Manifest next update: Sat 17 Oct 2026 15:17:32 +0000
Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: 8OuuxeqbiFDCX0+XLtVJr9dJp525vFkk3U+PNTcvb8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl
rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
Validity
Not Before: Oct 10 15:17:32 2026 GMT
Not After : Oct 17 15:17:32 2026 GMT
Subject: CN=6aca570c-dca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:08:b8:f5:08:92:51:f1:39:f3:14:a3:ae:
65:7c:3f:5e:fe:9b:a8:be:51:84:48:73:b1:82:f2:
be:a3:7e:04:9a:39:f7:5c:36:27:73:a8:69:5f:c1:
c1:f2:fb:5b:75:63:71:2b:18:92:d4:e1:44:e9:aa:
04:d0:a3:44:44:fb:1f:ca:a5:43:f9:f0:16:d1:34:
46:4e:27:d4:5a:42:22:d8:35:be:10:45:30:ac:f8:
3c:e5:a8:8e:04:a2:43:28:f6:fe:b4:02:91:c8:b8:
24:17:63:54:03:fa:4d:37:1f:26:b5:36:22:1f:9e:
42:e1:14:16:ce:71:52:aa:3c:ca:45:10:92:5b:de:
2a:77:ad:53:32:b5:f8:3f:7d:c9:36:7c:de:17:b3:
66:41:74:c1:c8:90:f2:11:da:a0:3e:9d:2f:af:df:
73:83:e6:b2:9c:60:4d:f1:80:64:44:ab:4a:e6:9d:
46:d7:b9:4a:53:db:26:87:2e:3f:86:9e:8a:f5:ce:
44:c2:d3:b0:d6:03:d9:6c:df:12:12:6f:f9:f7:52:
39:e0:bf:cf:73:74:c1:27:fa:96:b3:54:20:09:ba:
d5:15:d8:36:5d:05:9a:70:f1:6f:eb:24:e2:4d:e4:
2b:b9:bb:84:a5:4e:8f:1b:47:3b:8c:28:6c:4b:29:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:E4:CC:41:67:02:12:22:2C:D3:FE:F9:30:7F:E6:9D:82:03:08
X509v3 Authority Key Identifier:
keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b3:5a:f1:e7:b6:d4:1a:6a:a2:7b:06:bc:67:50:26:77:18:
7a:c6:c4:f7:c3:0f:da:58:26:d8:c0:0f:16:6a:c7:e3:cd:ba:
8d:fd:d9:0a:39:18:6d:48:d5:b3:05:e0:d3:55:7b:5e:6c:ab:
f8:ef:61:89:70:74:36:e5:77:f0:48:70:b5:e0:1f:d9:6b:18:
40:7f:a2:2c:7d:79:de:17:ca:14:f0:2a:cd:a2:8f:a2:b8:41:
ba:f3:5c:c2:3d:1a:ec:a0:87:4b:c0:18:e9:a1:c2:0a:93:07:
24:0c:15:a9:0b:8e:f9:23:77:85:6f:d2:01:76:de:2f:82:9a:
09:f6:8e:dd:92:3f:e3:69:e0:bc:e6:0b:9f:b0:ae:f7:1a:44:
5d:df:97:21:9a:09:a2:19:ee:93:53:b9:66:20:41:67:bd:d3:
b3:76:f6:57:b6:2a:2c:3c:14:50:19:ba:0c:f8:de:11:07:d9:
16:af:39:e1:89:8a:a4:92:72:3b:21:ea:01:3e:13:4c:41:07:
b1:a5:90:87:f2:02:49:3a:14:da:25:d2:08:05:83:79:4a:e1:
e5:7f:7d:20:e9:74:d8:fb:ec:8e:f7:44:6c:4e:55:e4:46:c5:
0d:f0:e4:68:8e:23:dd:56:dc:43:63:4f:fb:fe:56:28:a7:a2:
7c:5b:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:54:49 2026 by rpki-client