
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier: RNb5CrZEUfJALtwbiwg2CS+m0rUkpfaRjzHq1ss4O2w=
Subject key identifier: 8C:6A:EE:57:AD:F8:2E:A5:FD:7D:F3:4F:7C:48:F3:EC:09:69:BE:60
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number: 0270
Signing time: Wed 23 Sep 2026 01:54:42 +0000
Manifest this update: Wed 23 Sep 2026 01:54:41 +0000
Manifest next update: Wed 30 Sep 2026 01:54:41 +0000
Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: AgUjjoPeTSnCa7W46T+il6EJX9eaEiww1UpHlZtK6BM=)
2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: 9E0ybMJC/4hTirDP7PsTEfHbwzsW24pJ3Ey1HCuEb6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Validity
Not Before: Sep 23 01:54:41 2026 GMT
Not After : Sep 30 01:54:41 2026 GMT
Subject: CN=6ab33162-60bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:ed:3d:97:73:22:25:cf:07:3f:f4:b9:34:
ad:f8:3b:c5:ed:bc:65:13:32:4a:99:a0:73:0f:6d:
6e:21:1a:25:d9:8d:ab:22:fb:b2:27:93:19:d3:fc:
ef:91:0b:47:62:54:5f:31:f3:82:6c:f1:c0:c3:5b:
cd:5a:da:bc:3d:fe:5f:c0:ec:6c:d8:ac:db:91:dc:
95:69:e9:47:45:a5:b3:81:52:9e:58:e4:46:43:6b:
5b:f6:f1:11:8a:da:81:c6:c6:a7:78:5c:8c:af:60:
8b:a7:d5:25:15:65:d3:19:37:ff:63:01:d3:76:41:
09:3d:93:92:c3:de:80:c8:9c:67:45:eb:28:fc:f2:
e7:08:eb:65:90:3f:74:8c:11:28:92:03:58:f5:b6:
ed:29:bb:c9:30:70:60:32:40:57:32:fb:60:35:c3:
51:51:cb:a2:4a:cf:f0:3c:65:40:94:54:7a:b0:3e:
f0:7e:f4:1b:7c:b9:66:b1:9f:49:eb:ce:8c:85:9f:
de:16:9e:3f:67:9e:08:05:b9:5f:d1:4d:f2:18:e4:
39:79:ea:48:2b:ff:1c:0b:fb:84:cb:99:d8:14:6a:
4c:04:dd:ed:c1:c6:22:9a:4b:37:ef:bc:4b:5e:7a:
3a:ec:20:95:59:8a:51:58:bf:83:bc:6b:af:f8:2c:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:EE:57:AD:F8:2E:A5:FD:7D:F3:4F:7C:48:F3:EC:09:69:BE:60
X509v3 Authority Key Identifier:
keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0f:47:c2:8b:b0:06:ac:d8:bb:d5:f3:48:3d:05:db:bf:1d:
16:78:4b:2d:b1:38:5f:72:94:84:ed:01:17:39:15:aa:1e:c7:
3f:0d:7a:cd:ba:73:d9:f9:68:8c:3b:6f:e9:fd:e2:c5:9f:b2:
be:f1:4a:f4:f3:d2:d7:eb:ce:ee:22:92:de:4e:d6:5e:cf:ce:
d0:6f:0c:c7:ec:4d:da:47:11:18:f0:62:29:e9:cd:6b:54:61:
96:ff:d2:c8:93:8c:bd:aa:6e:3a:ad:41:09:59:16:71:bf:20:
33:1b:d2:02:a1:15:1d:79:31:ab:f0:50:96:d2:f7:d6:cd:ad:
a1:5c:25:02:e7:46:e1:25:72:c8:c7:03:fc:b7:29:f4:73:28:
74:1d:fd:dc:e0:a3:67:4d:67:69:24:67:29:ad:06:f7:2f:6b:
d2:1f:19:46:33:25:da:0d:9b:5c:8a:70:9d:be:e9:bc:7e:a5:
18:37:b6:73:d3:9c:03:70:76:a6:fc:97:78:64:e3:0f:04:c9:
6c:db:22:21:97:0c:6b:a1:28:3d:c5:7d:88:8e:a6:61:8c:7d:
31:51:8e:fe:3d:11:66:c7:af:60:6c:37:0e:04:93:2f:c4:92:
23:ec:d2:96:13:83:e8:17:18:8d:b8:2d:19:ec:6d:3d:1a:59:
09:00:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:36:58 2026 by rpki-client