
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json)
Hash identifier: bJVYry4LaZDH9ossPJIFSe/sa+bdq4FisuFXTAwluNc=
Subject key identifier: 61:45:63:E1:A8:84:16:2A:90:2A:CF:D2:D2:A1:FC:AE:73:9D:76:62
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 0350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
Manifest number: 0343
Signing time: Fri 23 Oct 2026 01:04:52 +0000
Manifest this update: Fri 23 Oct 2026 01:04:51 +0000
Manifest next update: Fri 30 Oct 2026 01:04:51 +0000
Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: jcUCrwGdf3oIv/lRPbEMjsutvV8CUDFkx7mPGt/92q4=)
2: 77BA366C2D1A11F1A751EB31B4833773.roa (hash: ttekqSNauOnaf+XGRrA7eC9qOtwYnem4llPJbeI/HUs=)
3: CEDCF6A872C711F1A643620871A30FBC.roa (hash: HNOzT0iI8slspD94kw116ttHZMg502/OBLNf5rPdkr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 01:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Oct 23 01:04:51 2026 GMT
Not After : Oct 30 01:04:51 2026 GMT
Subject: CN=6adab2b4-0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:0a:c5:2e:eb:80:79:96:bb:68:ae:f6:a3:
c0:b4:36:30:c5:01:b5:0b:f8:77:a3:41:f6:ec:6c:
23:f2:5e:67:c1:12:fc:51:aa:72:35:f5:aa:73:d6:
3c:dc:2b:04:54:2b:92:3a:d0:3a:dc:a9:1f:42:a0:
d0:6f:39:37:8b:e4:42:93:7e:fb:37:94:1b:5c:7d:
0b:76:3e:62:c9:49:73:f1:e0:67:c3:2a:5b:61:3f:
8c:83:29:93:76:aa:aa:65:6a:92:36:ad:66:56:77:
20:9a:23:51:e2:12:62:3d:24:15:5e:fb:3a:1b:f8:
f2:e0:03:86:17:10:73:08:fe:16:15:36:13:3f:54:
8b:91:01:ab:a9:55:f3:30:af:23:72:f7:d8:07:01:
cd:dc:7e:57:35:fa:9a:a2:7a:f0:5f:c9:5f:5d:52:
fe:69:af:7e:e8:09:00:9e:42:a5:c1:d7:cb:9b:ab:
59:70:4d:79:8f:b3:7e:0a:63:ac:4f:61:4f:f4:37:
ea:eb:2c:ca:72:7b:30:20:16:5b:b8:93:6a:9b:93:
50:99:7f:43:06:59:48:d2:dc:cf:24:6f:ec:cd:77:
a5:3d:62:9f:b7:0b:cd:2e:70:58:29:67:e7:fd:42:
fc:98:32:c3:bc:3f:7b:aa:44:b3:72:d4:d4:ef:66:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:63:E1:A8:84:16:2A:90:2A:CF:D2:D2:A1:FC:AE:73:9D:76:62
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:fd:83:56:80:bc:76:0c:ec:fb:2a:05:ac:43:78:88:82:ba:
96:c1:36:1f:b0:64:1c:8e:23:9c:7e:43:4f:9c:de:9b:0e:00:
6e:a0:1d:ed:8f:4a:19:35:06:bc:c5:51:0d:7e:9c:f2:8f:c9:
fb:18:aa:8f:f3:8d:f0:97:02:a8:fd:2e:92:8a:af:8a:56:40:
11:7b:bd:75:76:84:7d:59:07:e6:27:0d:18:0c:c0:6b:39:8c:
b2:95:a9:70:64:a8:ba:25:44:f7:52:7d:b0:41:8d:9f:03:84:
ea:76:fa:b0:c7:36:b7:6e:d7:8b:ac:d7:a8:0c:1d:ff:f2:4a:
db:73:c9:f6:fe:88:c7:93:c4:bf:3d:0c:a3:af:f2:51:dc:63:
1d:d7:92:90:dd:63:3f:20:9a:e9:69:2b:ac:ca:a2:66:5b:ba:
d4:e4:34:38:ab:db:9f:77:b3:48:1a:65:e0:0d:99:fa:7e:20:
ab:10:4a:9e:3c:81:3f:cb:b3:68:6b:ea:41:5b:b4:1e:8f:4e:
24:09:9b:7d:77:f6:78:f5:06:8e:38:42:9b:7a:51:1c:a0:64:
fe:38:41:79:8a:41:83:ca:1c:a9:c9:49:7f:7a:0c:8c:54:16:
e3:12:af:31:de:98:9c:97:73:1f:90:aa:84:5d:17:ab:5e:8a:
ec:95:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:50:00 2026 by rpki-client