
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json)
Hash identifier: 8plBH+iKMuMlpRP0Jv3VqWRf+JFJaV1kLckNTTUwVZ4=
Subject key identifier: 4D:A9:A4:35:DB:36:09:9C:E0:20:2A:2C:85:38:20:42:F1:06:E1:85
Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
Manifest number: 0292
Signing time: Tue 29 Sep 2026 02:11:52 +0000
Manifest this update: Tue 29 Sep 2026 02:11:51 +0000
Manifest next update: Tue 06 Oct 2026 02:11:51 +0000
Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: U07VFbfgVUPZihARevlPXnuWhUELroSCLdOjRid6b7o=)
2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: TIMWV4Eyws+CuIaUdJQ1DZOJrwdkivOUjRd9Wc6cf48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl
rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F
Validity
Not Before: Sep 29 02:11:51 2026 GMT
Not After : Oct 6 02:11:51 2026 GMT
Subject: CN=6abb1e67-12c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:d4:b2:d1:3c:97:7e:dc:87:62:65:2b:51:
7b:73:3b:3d:c2:51:f9:2d:a2:15:2a:93:96:2d:af:
74:b6:e9:8e:8f:59:5e:e2:ee:07:8d:0b:2f:3b:28:
a4:dd:26:82:6d:0d:b7:22:7e:08:12:e6:0c:e2:dc:
7a:03:fc:7a:be:71:98:61:14:c0:41:0b:ff:9a:69:
5d:7a:72:2c:4b:00:8c:99:b5:7e:36:4f:b9:24:5c:
77:f5:cc:c3:c6:64:f3:76:f5:77:57:21:a9:22:c4:
76:ff:bb:9b:ee:58:76:c6:81:31:81:78:09:49:51:
16:15:84:83:24:f8:cd:3e:45:dd:c6:d0:50:3d:53:
2c:67:4b:25:70:6b:23:ae:3b:9a:27:d6:eb:09:3b:
f9:ab:71:27:84:bc:42:16:a2:33:e4:d9:2c:71:87:
1a:d1:22:4d:cb:20:c4:41:93:9a:7e:6b:23:fb:64:
6d:19:1e:c6:3f:ce:e8:0f:cb:0b:84:0a:88:35:97:
42:8a:52:1d:fe:c6:3a:36:89:24:a0:ee:9d:a2:fe:
25:b7:dc:ea:07:91:78:50:1c:d6:fc:03:5a:fa:5f:
bb:75:e6:5a:b7:38:e8:f8:84:dc:63:f1:0f:a1:db:
fa:f5:06:da:4e:8f:07:bc:f4:3c:87:2b:d4:5d:77:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:A4:35:DB:36:09:9C:E0:20:2A:2C:85:38:20:42:F1:06:E1:85
X509v3 Authority Key Identifier:
keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:4c:41:d6:f7:98:3b:61:30:a4:8d:13:e4:f1:4f:c8:57:
de:7b:eb:cb:56:e9:b4:25:1e:12:8d:c2:48:e9:2b:d9:88:7c:
76:22:6f:60:0b:ba:82:e0:2e:8e:55:e6:72:8d:a2:05:59:5b:
cb:e9:81:b2:0c:7c:9a:f4:77:39:4d:ce:ac:47:02:b5:27:43:
3d:e7:fe:e4:6b:b2:b1:95:c1:4a:db:a3:b7:ec:b9:08:e8:78:
0a:0b:e8:29:c4:17:a5:c0:81:b3:9c:f0:d9:3c:33:92:da:c1:
ff:e6:ca:4e:5f:bd:5f:54:d3:dd:f5:1f:0b:10:60:25:45:3a:
aa:be:1d:d9:94:99:c0:86:9d:92:41:5a:a9:52:f3:dd:71:ca:
f1:38:d2:51:3a:28:9f:f7:36:eb:2a:37:40:89:9d:a3:fc:0f:
e0:c3:81:4b:c7:ed:bc:6e:af:04:a6:f5:c0:ac:f5:14:84:23:
2d:db:6a:6a:26:ff:b7:96:4d:0b:6a:89:8c:9d:93:92:b0:2a:
49:f5:81:e8:0a:89:15:5e:41:11:7e:19:19:41:46:65:9b:fc:
e3:ef:d2:de:b4:ba:6f:96:14:f3:84:d0:94:8e:b2:24:23:89:
8e:b0:79:21:9e:4a:e9:a0:10:7e:43:50:56:c2:c7:58:43:92:
08:d2:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:50:43 2026 by rpki-client