
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier: FeqvS1jB2z3COzEjbDj4ZRr+MHX3g4TfqEPkDT+qAHE=
Subject key identifier: A1:39:1C:6E:01:FF:5B:BB:93:C7:DC:C8:E5:8D:CD:29:63:39:2A:15
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number: EE
Signing time: Sun 15 Nov 2026 01:47:58 +0000
Manifest this update: Sun 15 Nov 2026 01:47:57 +0000
Manifest next update: Sun 22 Nov 2026 01:47:57 +0000
Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: 8H8Od3/idryBl+PTQQAGAbB6gMQRabxteZeF1aAM4x4=)
2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Validity
Not Before: Nov 15 01:47:57 2026 GMT
Not After : Nov 22 01:47:57 2026 GMT
Subject: CN=6af90f4e-6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:e4:f0:e7:76:a4:91:b5:aa:3e:72:90:9a:
5c:fe:da:36:5b:44:93:36:54:51:57:d4:6f:09:4a:
0a:9d:dd:9b:9a:dd:3a:99:1c:31:2e:45:a4:03:2f:
1a:51:a7:fb:64:ff:d3:dd:05:4f:0b:8d:31:52:2d:
05:ca:7c:36:89:4e:c6:9f:e4:ae:d5:57:3b:3f:0c:
d3:95:02:ce:1f:a6:56:cb:ad:54:89:94:3a:62:4f:
c7:e3:47:47:28:78:70:a5:74:8f:1d:d1:2e:21:ae:
98:93:ab:0e:01:e7:99:7c:4f:04:00:6c:c4:5e:38:
b4:af:5b:84:2f:df:15:eb:7f:5b:1b:db:da:b4:e2:
0d:73:c8:53:14:94:b2:ce:b0:9f:29:18:d7:56:49:
6e:85:bc:f5:65:58:af:88:f7:02:6b:ee:06:13:1c:
00:f6:7f:b1:ab:52:b0:27:16:0c:19:9a:8a:58:48:
97:5b:ea:4d:4c:5e:45:f9:eb:db:01:43:5c:52:6e:
9a:c2:7e:5c:93:ee:0b:b3:9f:aa:42:df:ad:b2:31:
45:69:6a:52:ff:8f:87:26:88:24:91:b8:26:8b:81:
72:12:59:5f:11:79:95:f0:32:90:de:16:e3:27:93:
46:f3:af:a7:a6:13:83:c6:28:25:15:53:32:3e:ad:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:39:1C:6E:01:FF:5B:BB:93:C7:DC:C8:E5:8D:CD:29:63:39:2A:15
X509v3 Authority Key Identifier:
keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:e5:19:55:a4:52:39:c3:a0:50:47:09:3b:d7:b8:1f:4e:
4a:40:9e:53:5e:11:cd:da:e3:c1:55:49:7e:f1:db:13:af:0c:
88:f1:dd:6e:e5:7e:07:da:9b:7d:7d:1a:a2:cd:71:1b:3c:94:
0e:66:85:65:d9:05:e0:77:4c:08:b5:56:3f:5c:be:e7:f1:f4:
a9:13:eb:90:5d:b8:15:15:14:ff:62:69:15:ed:ff:6d:42:eb:
5d:e5:c7:14:f3:f6:46:fe:1d:4a:c9:3d:05:6e:15:d8:04:76:
29:17:06:32:15:95:dc:4e:f6:90:90:67:dd:88:43:ae:09:61:
47:d7:4c:31:8c:50:72:7f:31:87:38:04:b9:16:a6:6d:32:8b:
b0:e0:d2:d4:43:d9:55:98:75:9d:42:cc:3c:4f:92:01:3a:ea:
fe:1c:39:45:8f:00:9b:1f:55:2c:22:1b:38:05:90:af:e6:78:
92:8c:d0:a4:20:f3:85:f9:1d:2c:8e:9b:bc:02:9d:bf:6b:1a:
f2:6a:05:d4:c1:db:94:a1:67:fc:e6:79:c5:91:60:7b:4a:4b:
de:86:88:b9:27:3e:13:bb:ee:d2:62:c5:23:ed:8a:ed:9c:aa:
49:80:11:7d:7f:7e:fe:20:c0:c0:4b:1e:57:54:57:6f:48:8e:
59:4d:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:21:46 2026 by rpki-client