
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
File: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json)
Hash identifier: aLYRI1J8ie8vUtYMo53oecqwR+qqpoU4/tLZCRvv+lQ=
Subject key identifier: 09:6C:68:3A:CB:0D:B4:AF:C2:C8:92:1B:A2:10:DC:D0:0F:17:44:A6
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
Manifest number: 9B
Signing time: Sun 01 Nov 2026 08:42:51 +0000
Manifest this update: Sun 01 Nov 2026 08:42:51 +0000
Manifest next update: Sun 08 Nov 2026 08:42:51 +0000
Files and hashes: 1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: wAew99nFnIwCudpEoLhc1tTonatsSIsAuHmNf4PxhvE=)
2: 5FC2F994A02A11F1AF2047C73311F970.roa (hash: mrzvtAKQorGMAXMUEHVJIZs7DCeiFf2n2y4Q91DVqno=)
3: zIMBcS1h5k28JbgzmDO5wNcLsFw.asa (hash: A/o2qus8suyWDW6SSANxsLf7P5fJxtS5SMGCcpBavQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 08:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Validity
Not Before: Nov 1 08:42:51 2026 GMT
Not After : Nov 8 08:42:51 2026 GMT
Subject: CN=6ae6fb8b-04d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:14:6c:28:ff:17:6b:05:91:00:35:10:e9:
a3:e8:b3:52:6f:de:58:a4:c0:f9:96:a7:f6:dc:e3:
22:d3:40:09:f4:8d:7d:6e:a7:2e:fb:e0:c8:19:9b:
c8:f3:04:e9:60:1f:ef:17:df:44:4e:c6:0e:f1:26:
bf:30:5c:f5:e1:0e:68:08:dd:65:f9:0a:1d:89:03:
7d:cb:f3:24:ea:82:ac:29:01:19:eb:3e:02:80:45:
c5:d5:49:4f:ee:16:46:28:60:70:45:34:82:ab:81:
1d:6d:67:5d:b5:5e:3d:0e:7d:f8:47:48:f0:40:bc:
ff:4e:35:c0:d8:ec:08:fb:31:e5:05:93:d2:22:19:
1f:52:a6:8e:a8:2f:aa:2a:1f:2d:86:7b:81:5c:99:
df:8c:ca:7e:f2:84:3c:18:69:bb:4c:2a:a1:85:74:
09:af:8c:44:ea:36:75:1e:9e:c1:ce:74:a3:eb:b7:
ed:7b:65:25:79:bc:57:f9:ed:7f:4a:b9:0b:32:18:
65:81:ae:70:b7:fa:93:be:e8:e4:6b:52:61:36:4b:
30:71:a2:ec:f6:b9:a9:0e:1f:c7:cf:df:72:c0:64:
09:7a:f5:d3:44:81:05:09:a7:6a:05:40:78:96:fb:
6f:7b:e9:00:c6:85:b7:a2:f4:c8:70:06:8b:3c:18:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:68:3A:CB:0D:B4:AF:C2:C8:92:1B:A2:10:DC:D0:0F:17:44:A6
X509v3 Authority Key Identifier:
keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:95:e6:71:5b:73:49:4a:ce:5f:42:9e:02:d6:d8:ef:79:1d:
00:5c:88:d5:59:ed:21:94:2f:94:b0:fc:40:92:e6:2b:ca:c2:
57:a3:e7:de:8f:81:ec:51:1b:90:ff:06:58:33:0c:6a:05:13:
a0:61:60:38:91:f9:10:c4:25:4f:61:48:b0:c4:8c:39:61:34:
77:1f:cd:8f:4f:aa:2d:de:bd:f5:1c:1b:93:27:02:c9:ac:58:
98:9e:2a:de:dd:74:42:a8:65:c2:a8:c9:10:54:76:03:76:2c:
5d:4f:05:08:47:81:82:4a:31:70:c1:cf:9e:9b:06:8a:c9:20:
07:7b:6f:43:00:02:59:f9:0e:94:b1:89:4d:70:73:04:42:21:
81:ff:f5:9c:b7:3a:4e:b8:d6:7a:29:4a:7c:dd:cc:11:2f:cc:
1c:67:9c:92:a1:25:ce:47:f3:c8:bd:71:f5:bd:b8:43:ad:63:
6e:e0:05:cf:db:bd:d3:c0:80:c4:ab:ae:00:cb:fe:c9:7d:1a:
c7:d0:97:40:ad:32:42:ba:f3:cd:69:32:79:1e:11:46:2e:63:
63:4c:7a:96:ce:31:85:9e:32:95:05:a1:20:4e:a1:34:de:fd:
2d:ad:9a:d2:3a:e8:40:81:83:a7:75:ac:1e:16:43:8d:1b:61:
25:b4:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:03:38 2026 by rpki-client