
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier: 819DJeIoU28eDLXFqmOIONB1HWtDTsW1vE1gOu2UaE0=
Subject key identifier: 23:4F:31:99:1D:D9:96:1B:B2:97:B4:90:6F:95:F2:CA:B3:3D:C6:10
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number: 8D
Signing time: Mon 19 Oct 2026 08:15:26 +0000
Manifest this update: Mon 19 Oct 2026 08:15:26 +0000
Manifest next update: Mon 26 Oct 2026 08:15:26 +0000
Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: H0b4PrB3f9LVS7PG5CsMEajB6n/SOV11fCNzlz9JHDs=)
2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Validity
Not Before: Oct 19 08:15:26 2026 GMT
Not After : Oct 26 08:15:26 2026 GMT
Subject: CN=6ad5d19e-eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:af:8e:fa:2a:15:4b:02:c7:23:d2:42:64:
cb:49:fe:78:63:b6:68:79:bf:8b:50:c5:64:20:be:
07:2e:62:05:43:c5:27:a8:8c:c4:8f:5a:1f:7c:c1:
a1:c4:05:92:79:6d:55:14:1a:9f:1a:1e:2d:08:e4:
29:19:7c:78:f5:af:ee:f4:b1:37:3d:03:76:6b:a2:
60:c4:68:88:2e:a8:83:35:de:63:14:9b:b4:67:ee:
ab:4c:41:74:fe:6f:c7:09:15:0c:c2:b6:b8:0b:e8:
4f:05:56:22:39:8d:65:da:10:bd:c8:38:90:99:76:
d4:18:48:d8:aa:1d:1a:c3:0b:ea:3e:92:be:dc:c6:
40:ce:78:96:77:c5:af:e1:12:41:e7:af:b2:3f:6c:
0d:98:ee:67:f0:c8:c9:97:ec:24:1f:e4:5f:b1:c1:
01:95:75:4e:2a:77:77:a9:da:db:22:90:3d:f4:14:
64:23:8b:17:88:c9:c0:6d:3b:7f:a9:0b:8c:8a:a0:
3f:b4:af:b8:1e:7b:83:4a:b8:01:64:bd:5e:db:19:
d6:6c:61:7f:61:f7:8b:37:f1:0f:3d:f4:7e:b2:04:
d2:32:49:2e:0b:5b:b6:2a:21:28:63:8d:ab:37:ae:
28:43:89:a5:ea:50:98:46:aa:99:a4:60:93:76:36:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4F:31:99:1D:D9:96:1B:B2:97:B4:90:6F:95:F2:CA:B3:3D:C6:10
X509v3 Authority Key Identifier:
keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:8b:62:46:96:24:4a:3a:e4:77:9e:d2:cf:13:cd:a8:3f:2c:
fa:7c:f5:f1:22:52:68:1e:c4:47:4d:35:01:19:93:4c:7c:c2:
b5:4a:2e:b2:d8:5d:ba:75:b2:6a:93:e4:d5:8d:a2:f8:e0:6b:
64:cf:8d:4c:89:cc:e1:ff:b9:91:88:01:1b:f6:de:e9:88:46:
a9:57:6f:0c:c9:b4:c8:31:02:5e:e2:b0:2a:34:e7:ca:64:d6:
08:eb:be:35:c3:64:52:10:48:f3:f3:40:e9:e3:cc:c6:c5:20:
1d:15:d0:6d:52:24:00:af:69:48:b0:ec:e1:7f:a4:a8:fd:b5:
7a:bf:9b:89:e5:6a:29:81:63:85:95:a8:bf:61:5f:7f:e1:77:
84:82:69:67:7f:d5:ce:29:bc:d8:a7:32:6b:41:70:60:23:cf:
6b:8c:86:4a:95:e5:b6:95:5d:df:94:99:98:9d:23:a5:c6:0d:
5c:e1:5e:c6:2f:57:bb:25:82:2f:26:6d:1d:72:5a:0d:e2:1b:
8b:06:80:28:f1:c0:93:0a:05:e0:ef:1d:d9:63:28:41:ee:e0:
8c:aa:8e:35:a2:30:9e:c6:fb:8a:83:e6:16:ea:f7:b8:d8:cb:
93:43:24:01:c6:b9:9c:e5:04:2a:ad:c0:d9:36:db:02:27:80:
df:5b:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:57 2026 by rpki-client