
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier: /Cj+OHUOFTD66XbFXAF6kY1jscj7HdsWCrfKfPCMbTk=
Subject key identifier: 72:2C:BC:DA:BF:21:4E:8D:1F:98:54:0E:43:9E:45:1B:EF:C2:FA:1C
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number: 65
Signing time: Tue 27 Oct 2026 08:19:03 +0000
Manifest this update: Tue 27 Oct 2026 08:19:03 +0000
Manifest next update: Tue 03 Nov 2026 08:19:03 +0000
Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: xaLP8F/0+Ssi2rnCeSjKZbPakRoC63DRCj9liG4huUw=)
2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Validity
Not Before: Oct 27 08:19:03 2026 GMT
Not After : Nov 3 08:19:03 2026 GMT
Subject: CN=6ae05e77-6a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:51:7a:c9:03:6e:9e:7b:d9:92:6e:f7:98:
89:f9:e6:48:b1:f1:ca:62:bb:28:38:73:4b:e7:67:
7f:ee:24:fa:7a:5d:07:5b:23:36:9d:a2:19:40:f3:
ce:31:7f:bf:4d:ee:b5:6c:55:17:0b:a1:a3:17:2c:
b6:e1:4b:3b:1d:67:27:b7:59:0a:2b:11:3e:38:01:
ee:85:53:e1:8a:98:51:36:df:cb:f3:f6:ca:b8:fe:
26:48:19:50:d9:73:ef:ab:9b:4e:11:98:90:2b:27:
35:09:32:9e:4a:d8:ed:20:4f:b8:4b:d3:d7:d1:1f:
eb:7e:e4:ef:48:10:20:d1:17:2a:cc:8d:dd:0d:fb:
2d:b4:22:3d:01:96:74:77:19:53:97:cf:fb:f1:ed:
c8:a1:b8:fe:a7:39:37:96:79:69:93:a8:8e:2d:b6:
c9:a4:c9:b2:53:12:9a:8b:38:07:42:02:b7:4b:cd:
85:fa:f8:c9:68:94:7e:a7:a2:7b:60:72:e2:c1:87:
0b:07:0d:74:26:7d:7b:67:ae:7d:a7:0a:29:34:2c:
08:58:22:13:b2:61:bd:95:47:8e:d4:86:56:a7:97:
a4:3d:05:7e:5a:33:ca:fc:b8:36:7a:ca:bc:fc:94:
ef:4b:76:b6:ee:f2:31:02:1a:1b:9e:41:0b:4b:33:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:BC:DA:BF:21:4E:8D:1F:98:54:0E:43:9E:45:1B:EF:C2:FA:1C
X509v3 Authority Key Identifier:
keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e8:f7:84:62:89:f9:d4:c6:e3:cf:75:4c:0f:af:11:c7:b3:
ed:c5:e5:53:49:84:bd:ab:6f:36:64:79:8a:5e:72:62:03:08:
41:13:a8:88:2a:02:cf:90:b7:f0:20:95:49:78:9e:d4:1a:c3:
a5:a2:1a:3e:e2:2a:a3:6f:56:10:5d:96:81:83:a8:e1:bd:86:
3d:2c:a5:00:55:b3:d5:71:fc:42:bf:e0:82:0d:28:0e:e4:f0:
cb:51:11:31:b3:af:90:9b:56:6c:3c:ab:c9:85:49:61:ac:d7:
97:4f:08:cd:71:79:c2:b4:ff:aa:df:66:bc:56:41:7e:c0:ba:
c8:08:ad:6f:ef:4d:f9:ad:59:4d:29:0c:7c:87:46:a9:b8:2b:
a0:21:80:91:fd:39:74:f0:bd:79:9a:63:7f:e5:7f:ca:1e:57:
12:44:2f:a0:69:91:68:22:58:f3:bb:ec:3a:b3:fb:30:d3:e5:
28:a7:4a:cf:31:2f:55:eb:8f:2d:24:8c:5c:f8:6c:f0:96:53:
a3:bf:82:75:a0:05:5f:43:cd:6e:26:9e:28:38:f5:28:92:89:
cd:5b:b8:3a:95:12:16:ec:dd:4c:22:9c:ca:f4:6c:67:4b:6a:
32:22:6c:39:45:fd:ad:88:ac:36:36:1d:d1:c0:4e:12:02:f3:
7c:c5:0f:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjQyOTExMC8GA1UEBRMoNzYyNThFMDgxRjJFMDlDMEYxRkE3QkI0OTlCMTc1OTcw
NTY1QzBFQjAeFw0yNjEwMjcwODE5MDNaFw0yNjExMDMwODE5MDNaMBgxFjAUBgNV
BAMTDTZhZTA1ZTc3LTZhMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC251F6yQNunnvZkm73mIn55kix8cpiuyg4c0vnZ3/uJPp6XQdbIzadohlA884x
f79N7rVsVRcLoaMXLLbhSzsdZye3WQorET44Ae6FU+GKmFE238vz9sq4/iZIGVDZ
c++rm04RmJArJzUJMp5K2O0gT7hL09fRH+t+5O9IECDRFyrMjd0N+y20Ij0BlnR3
GVOXz/vx7cihuP6nOTeWeWmTqI4ttsmkybJTEpqLOAdCArdLzYX6+MlolH6nontg
cuLBhwsHDXQmfXtnrn2nCik0LAhYIhOyYb2VR47Uhlanl6Q9BX5aM8r8uDZ6yrz8
lO9Ldrbu8jECGhueQQtLM9GDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUciy82r8h
To0fmFQOQ55FG+/C+hwwHwYDVR0jBBgwFoAUdiWOCB8uCcDx+nu0mbF1lwVlwOsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzI2NzU4N0E4Mzcx
OTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NEeC1udTBtYkYxbHdWbHdP
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvZGlXT0NCOHVDY0R4LW51MG1iRjFsd1Zsd09zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
NDI5LzI2NzU4N0E4MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NE
eC1udTBtYkYxbHdWbHdPcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA46PeEYon51Mbjz3VMD68Rx7PtxeVTSYS9q282ZHmKXnJiAwhBE6iIKgLPkLfw
IJVJeJ7UGsOloho+4iqjb1YQXZaBg6jhvYY9LKUAVbPVcfxCv+CCDSgO5PDLUREx
s6+Qm1ZsPKvJhUlhrNeXTwjNcXnCtP+q32a8VkF+wLrICK1v7035rVlNKQx8h0ap
uCugIYCR/Tl08L15mmN/5X/KHlcSRC+gaZFoIljzu+w6s/sw0+Uop0rPMS9V648t
JIxc+GzwllOjv4J1oAVfQ81uJp4oOPUokonNW7g6lRIW7N1MIpzK9GxnS2oyImw5
Rf2tiKw2Nh3RwE4SAvN8xQ/f
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:18:02 2026 by rpki-client