
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier: duhQOb+Q0QTh4IpffI90rxDMJmzPTOa89mI8XCeGzXc=
Subject key identifier: 13:5F:31:75:7A:4D:18:FF:BE:9C:73:9F:93:ED:06:86:4A:87:BE:42
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial: 0346
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number: 0340
Signing time: Sat 05 Sep 2026 00:41:45 +0000
Manifest this update: Sat 05 Sep 2026 00:41:45 +0000
Manifest next update: Sat 12 Sep 2026 00:41:45 +0000
Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: fTDQxwiaHdDeb/YhVptWkiuURz8WfXYMyYUvRwwZYhQ=)
2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Validity
Not Before: Sep 5 00:41:45 2026 GMT
Not After : Sep 12 00:41:45 2026 GMT
Subject: CN=6a9b6549-7a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:9c:c1:39:d1:31:fd:0e:7c:77:bf:39:ab:
05:71:2e:d3:74:ae:ae:e8:1e:d9:fe:74:f3:a5:da:
b9:c4:1b:a6:bf:7a:28:8d:09:f9:97:7c:83:18:69:
8a:3b:1e:75:df:bb:ba:94:d7:81:30:c5:9b:0c:c7:
46:28:c5:41:0d:da:60:6d:ca:df:ba:79:35:ce:ed:
43:bb:04:e9:dd:0d:dd:da:e2:e5:2d:d1:5f:3c:9d:
ba:a4:d7:24:9e:e6:aa:84:cd:97:da:f6:19:8c:f3:
9f:40:c5:29:5a:f5:eb:97:8b:16:c0:fa:d9:dc:c3:
b4:fd:77:65:14:b7:7b:25:db:ae:79:46:dc:ea:da:
71:38:11:35:d2:d2:f3:66:8c:32:13:9d:6a:94:db:
77:cf:e1:a7:61:df:15:d9:3d:85:09:3f:39:e2:0b:
64:73:e8:6c:03:e4:49:b8:d1:17:e1:69:5a:75:87:
4b:7b:98:27:5d:92:b3:fb:1c:fe:5e:22:44:f6:b6:
ad:a5:aa:09:51:29:1c:65:d0:52:a3:d4:a0:11:b0:
2c:85:49:15:dd:e1:88:94:73:54:75:b8:17:ed:18:
f6:6a:f6:d6:98:8f:ff:50:dc:cb:c6:24:11:d3:19:
04:97:e2:96:b0:a1:2f:26:3e:70:c4:49:2c:10:82:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:31:75:7A:4D:18:FF:BE:9C:73:9F:93:ED:06:86:4A:87:BE:42
X509v3 Authority Key Identifier:
keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:65:3d:a2:66:a4:0b:39:b5:49:94:d2:ac:7b:b5:3a:5a:
88:d4:02:14:c7:8e:2a:75:86:e8:e2:84:cf:4c:3b:45:99:3d:
ca:2b:37:ec:5a:11:b4:31:58:8c:96:2c:6f:c8:db:38:16:b5:
ac:01:8b:22:9a:a3:69:b5:0d:0b:44:57:f6:30:c9:19:b7:31:
32:fa:93:51:ab:84:76:27:74:b6:9e:5b:99:3c:10:69:cf:16:
e7:c7:dd:a3:be:d8:2d:d7:3e:00:27:ca:ec:52:24:cb:fb:44:
b2:ba:7c:7e:82:02:f5:df:70:b8:8d:17:69:ef:1f:81:77:19:
81:de:4d:aa:1d:01:fe:b1:41:fc:e4:56:da:07:a5:38:4c:c5:
62:77:f5:ff:9b:e1:b7:cb:90:5c:65:27:ea:41:42:82:93:4a:
95:f6:aa:34:b3:b9:bb:a0:35:08:28:68:c8:c9:ed:6f:f4:d6:
f7:ca:1d:ab:d8:f9:2c:6f:57:d5:22:42:8c:17:12:ce:75:57:
da:63:c0:d5:cb:5e:d6:d0:fe:75:88:f1:d4:75:47:6d:ec:f2:
46:b7:54:ae:d0:cc:fa:42:70:7f:8b:8d:1c:f5:cb:c4:7a:0c:
70:11:d0:4c:8d:53:e7:5b:69:e1:4e:c6:45:fb:e4:d0:48:07:
d0:92:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:52:29 2026 by rpki-client