
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier: fVPVDBPeAHOLngvJqqizSm8/8ZG9qtoXPaQuVclLFck=
Subject key identifier: 72:A7:20:E3:6B:69:A3:15:DB:AB:7D:94:B9:74:EF:B6:FE:80:79:C4
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 0824
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number: 0811
Signing time: Sun 18 Oct 2026 21:20:56 +0000
Manifest this update: Sun 18 Oct 2026 21:20:56 +0000
Manifest next update: Sun 25 Oct 2026 21:20:56 +0000
Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: VCSmMHiABvxFB3aMaHouf9vrUDAiOW49LFxtpjfhJrY=)
2: 68894B22402811EB91B49250C4F9AE02.roa (hash: liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=)
3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: z+ZRB0bBSa8oaRsVRAkD/aqR3zkYjW0hmksq+X5D7QA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 17:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: Oct 18 21:20:56 2026 GMT
Not After : Oct 25 21:20:56 2026 GMT
Subject: CN=6ad53838-4d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:4b:a7:27:9a:76:84:76:69:28:de:f7:7d:
25:fe:ac:96:12:a8:2e:3c:b4:92:ff:41:57:87:84:
9b:54:17:4e:e9:bc:a2:91:b0:76:3d:1e:c4:26:d3:
fd:d7:da:0b:46:8e:3e:ae:ae:e5:6d:4d:22:10:63:
59:60:c9:04:ae:dd:71:b2:7d:f1:35:ff:c1:56:55:
a9:81:85:bc:f1:c7:fe:d8:32:cc:83:28:9c:5e:3f:
76:35:bc:a1:f5:80:10:db:d6:fb:98:da:47:47:48:
78:70:ed:c1:75:b9:fc:24:11:7e:92:9f:2d:b6:f0:
14:20:83:05:a4:bf:0f:d3:02:ff:76:68:ca:32:33:
55:c6:00:25:74:25:c4:72:7f:58:37:34:44:9d:1b:
e4:88:6a:45:12:de:8a:1e:9c:37:8e:fb:3d:2d:bb:
fe:3c:a1:7d:e8:37:a9:92:b4:d8:2a:a3:7a:4a:c4:
25:3c:45:fe:35:05:3d:57:32:52:89:ab:d4:0f:18:
da:6b:96:b6:ce:5b:b8:23:fb:ae:24:61:9a:5e:a6:
e2:a3:5a:92:62:45:e8:3a:43:54:1e:7b:4b:b1:a6:
54:a0:fc:21:eb:fe:5e:15:7c:a2:98:ec:bc:06:15:
c6:8c:1b:a3:fb:88:3e:70:55:84:79:28:83:1f:6a:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:20:E3:6B:69:A3:15:DB:AB:7D:94:B9:74:EF:B6:FE:80:79:C4
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7f:78:ee:27:b2:e9:5f:e0:06:24:d9:95:32:2f:5b:52:0b:
ab:de:e1:21:62:b1:53:ad:46:d8:b9:8a:33:ce:e8:de:0e:17:
ab:68:93:bb:be:5a:5e:99:88:86:23:2d:5d:56:08:c6:4d:c0:
d1:f2:a8:77:66:7d:d7:16:a1:48:31:4b:bd:49:74:45:f2:b3:
8f:68:fa:f5:e7:42:33:41:ce:8b:d7:f8:f1:d5:81:f3:51:02:
f6:f1:23:48:40:09:d2:23:9f:3f:30:91:59:94:23:de:40:2b:
ab:c6:63:81:51:e9:07:c3:72:f9:92:0f:c8:fe:88:f2:3e:95:
78:c4:24:e4:f1:e6:04:5a:9c:4e:2c:79:44:22:e7:ef:9b:ba:
03:86:03:83:a0:96:00:36:a8:82:6d:0f:b4:d7:03:d7:ae:81:
b9:61:cc:fb:35:bf:cb:31:0f:48:cc:ba:32:22:4e:4d:d8:2a:
7d:af:bd:77:78:98:92:c8:15:60:a7:fe:1d:e1:22:ef:dd:39:
cb:ad:40:60:8a:a8:46:46:1e:77:cb:5d:ab:3a:90:74:24:03:
d9:0e:c8:df:ae:e2:83:a2:5e:4a:f5:b8:c5:b3:36:41:85:28:
97:b1:40:c3:15:0e:8d:76:0a:5f:1f:1f:09:55:55:c3:f0:b5:
83:c6:31:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz
RkU4NzY4ODMwHhcNMjYxMDE4MjEyMDU2WhcNMjYxMDI1MjEyMDU2WjAYMRYwFAYD
VQQDEw02YWQ1MzgzOC00ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXBLpyeadoR2aSje930l/qyWEqguPLSS/0FXh4SbVBdO6byikbB2PR7EJtP9
19oLRo4+rq7lbU0iEGNZYMkErt1xsn3xNf/BVlWpgYW88cf+2DLMgyicXj92Nbyh
9YAQ29b7mNpHR0h4cO3Bdbn8JBF+kp8ttvAUIIMFpL8P0wL/dmjKMjNVxgAldCXE
cn9YNzREnRvkiGpFEt6KHpw3jvs9Lbv+PKF96DepkrTYKqN6SsQlPEX+NQU9VzJS
iavUDxjaa5a2zlu4I/uuJGGaXqbio1qSYkXoOkNUHntLsaZUoPwh6/5eFXyimOy8
BhXGjBuj+4g+cFWEeSiDH2rjDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKnIONr
aaMV26t9lLl077b+gHnEMB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw
MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh
LWhNenVRTll3R3NfNkhhSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy3947iey6V/gBiTZlTIvW1ILq97hIWKxU61G2LmKM87o3g4Xq2iTu75aXpmI
hiMtXVYIxk3A0fKod2Z91xahSDFLvUl0RfKzj2j69edCM0HOi9f48dWB81EC9vEj
SEAJ0iOfPzCRWZQj3kArq8ZjgVHpB8Ny+ZIPyP6I8j6VeMQk5PHmBFqcTix5RCLn
75u6A4YDg6CWADaogm0PtNcD166BuWHM+zW/yzEPSMy6MiJOTdgqfa+9d3iYksgV
YKf+HeEi7905y61AYIqoRkYed8tdqzqQdCQD2Q7I367ig6JeSvW4xbM2QYUol7FA
wxUOjXYKXx8fCVVVw/C1g8Yxgg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 01:41:21 2026 by rpki-client