
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier: wca0jZAnuqwheLeLpoi9JeqniRVoSawij0/US4g88o4=
Subject key identifier: 27:D7:23:3B:9C:84:DE:2C:B8:83:EB:CA:D7:6F:18:E9:EB:80:42:BA
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial: 3597
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number: 358A
Signing time: Sun 04 Oct 2026 15:08:12 +0000
Manifest this update: Sun 04 Oct 2026 15:08:12 +0000
Manifest next update: Sun 11 Oct 2026 15:08:12 +0000
Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: /v20d6Bk50oSU4oMKsCV/wtpUGaDs1X4hi1jUVN2AFY=)
2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: qfvcgZVUflsdf2vdMxE8qxvPQTjGmtT1vRqCh+Z14oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13719 (0x3597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Validity
Not Before: Oct 4 15:08:12 2026 GMT
Not After : Oct 11 15:08:12 2026 GMT
Subject: CN=6ac26bdc-bac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:91:d1:b2:af:e9:35:7e:fb:81:8a:2f:89:
d7:e4:40:f9:4c:8e:ca:ac:21:78:e5:40:3c:5c:03:
0c:94:f7:ad:1b:ec:f6:66:d8:4d:65:14:78:d7:b8:
c9:18:1f:d5:3a:e7:a9:e2:d2:12:04:7f:f4:fa:4d:
c4:75:26:d6:a3:2f:ad:65:0b:37:37:6c:41:d4:a8:
15:8f:44:ec:52:38:0a:bc:93:24:6a:9d:7a:b2:f3:
04:82:45:ac:83:a3:9e:08:19:62:2d:01:cb:19:b3:
dd:a5:1f:5d:34:7b:5f:13:e2:2b:ab:5d:d8:bd:32:
f2:a0:f3:e8:67:dd:56:25:84:fc:a5:ee:98:c6:10:
c6:51:de:f6:78:57:d0:e4:16:ba:a7:99:b3:c1:25:
54:5c:bb:89:4e:e0:a0:76:f3:d9:33:a1:11:d0:71:
ea:30:03:7f:59:31:57:71:55:90:e8:c6:8f:63:86:
79:36:70:ce:3c:ba:a8:6e:27:f6:71:d7:a2:fb:a0:
64:dc:80:7f:c6:5e:e8:34:98:a2:7b:7a:e7:8d:c9:
85:7d:91:77:ac:cc:19:9a:ef:fd:03:c0:6b:71:6b:
05:16:45:88:62:66:de:fd:94:0c:69:f3:26:08:c2:
2b:b6:6b:35:ed:8c:ef:79:1d:ea:09:35:80:1c:13:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:23:3B:9C:84:DE:2C:B8:83:EB:CA:D7:6F:18:E9:EB:80:42:BA
X509v3 Authority Key Identifier:
keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:64:7f:f1:a7:26:c9:a4:6b:d0:ed:dc:0d:1e:dd:8d:35:b5:
d3:9e:7d:54:ec:69:2c:ef:d1:0b:d2:e5:77:96:66:e3:f9:d4:
fd:c3:c1:cd:a1:a2:41:1d:82:c0:d2:e4:08:10:be:08:bb:ee:
bf:04:d0:48:8a:ab:da:6d:76:63:07:51:50:20:5f:ff:16:2c:
21:93:a6:fe:c2:4a:37:4a:74:a2:71:3f:aa:d8:e6:1b:d3:40:
3c:3d:d7:88:19:67:37:25:4f:cc:23:a9:b9:71:2a:2a:dd:b1:
e4:16:ed:4d:7d:ca:a9:6a:16:d0:1a:5a:0b:63:3f:3b:75:c3:
35:ed:19:18:0e:11:c5:db:e6:fe:7d:0c:1e:8f:43:14:63:34:
58:87:ce:68:e4:b8:93:9a:a3:55:ad:7b:84:ef:c5:2b:82:7a:
9f:dc:9e:f8:42:4e:45:0b:da:4f:7b:78:fe:ab:ae:34:a6:a8:
da:34:3b:f8:62:ab:48:cc:87:ac:cb:49:45:31:b6:14:70:9a:
01:1a:d2:62:9f:56:dc:2f:2d:7e:13:a0:3b:1e:4d:ee:ef:bc:
81:bd:04:65:a6:42:fe:e3:4d:30:d0:5a:58:80:46:ea:c7:8b:
2b:08:39:d6:1a:9e:14:f6:7e:b5:a0:c0:e1:81:27:2a:e1:9d:
e9:d1:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:59:32 2026 by rpki-client