
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: lytYR0lMhtlPFkaqVShAK573O8ah2oNRA5j6tSc9PcE=
Subject key identifier: 19:C6:B9:BD:ED:B4:B7:3F:02:D2:11:D8:97:FB:EE:85:AC:26:EB:65
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 03F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 03E3
Signing time: Sun 25 Oct 2026 00:25:12 +0000
Manifest this update: Sun 25 Oct 2026 00:25:11 +0000
Manifest next update: Sun 01 Nov 2026 00:25:11 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: +jTS7PsirW1b9Q/Zbk2VUHozy49/F2rbQSciIjzuo68=)
2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: Oct 25 00:25:11 2026 GMT
Not After : Nov 1 00:25:11 2026 GMT
Subject: CN=6add4c68-2351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:6f:a8:95:80:56:d6:ca:c0:bf:9d:67:0c:
be:a3:ce:23:ab:2c:5e:09:b0:1d:fd:0a:66:1c:91:
04:ae:42:91:94:4e:2a:b9:47:e0:07:06:ec:9e:89:
32:65:7b:0c:91:12:11:ea:1c:83:a4:a8:28:64:ab:
01:83:d4:0e:13:af:1e:3d:47:f9:e0:1d:6e:6b:e0:
e0:d7:8c:7b:59:62:b4:15:f1:40:8a:c8:7f:3f:d0:
e9:46:4b:f5:4a:d4:09:ea:ea:bb:08:fa:52:0d:04:
72:aa:e6:de:86:cb:ea:06:ec:2c:84:26:d7:6a:d6:
5b:fd:df:6e:79:ab:24:78:e9:b4:a5:29:30:3e:3f:
0a:e8:72:2a:d3:1b:38:2b:be:18:bb:2f:f6:9f:8d:
fb:d1:9f:ac:bf:1e:54:d4:6b:89:f2:4e:71:4c:38:
98:0d:2a:32:65:f6:e3:46:7a:d2:66:6a:97:bb:84:
71:a5:b7:eb:48:7f:dc:93:67:c8:04:69:19:06:aa:
1e:86:2b:eb:84:66:e7:e1:d4:52:b5:b1:7a:f2:a3:
c5:2d:7c:a2:73:45:e7:f6:7b:d2:39:25:d6:4b:23:
fa:11:e0:1b:0f:0e:0d:c8:95:b2:4f:f9:df:39:6c:
20:1b:c8:a9:3e:d9:65:e0:5a:98:fd:29:8f:ae:9e:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:B9:BD:ED:B4:B7:3F:02:D2:11:D8:97:FB:EE:85:AC:26:EB:65
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:c0:c0:b1:01:fe:7f:97:55:90:55:f4:f0:d9:ed:88:83:
60:1b:ee:9f:5d:d4:c7:67:91:bd:e3:f5:53:3d:dc:15:96:f1:
12:6d:e0:a5:7f:31:d1:b3:4a:0f:62:c7:27:0e:f3:53:42:47:
9f:7f:a5:a5:c2:1c:3e:66:23:2e:ae:94:07:09:71:f7:6d:d6:
c2:39:96:e1:e4:91:9b:90:42:a1:29:f9:70:b3:e8:4e:98:59:
d4:7a:a5:8b:11:d5:dd:1d:47:fa:6e:6c:21:9d:7f:ef:4a:25:
6f:6b:fa:65:d7:0e:0b:ad:09:5e:cb:9d:84:d7:b1:18:17:a2:
24:49:71:86:8b:3d:2b:2e:d4:25:de:66:4d:f1:b8:40:fd:57:
a8:de:7d:33:f3:d9:76:cd:65:8f:fc:1b:25:a0:d6:50:6a:85:
57:11:a7:74:5f:56:32:79:ee:66:c7:a0:68:b5:92:ad:cf:c1:
b9:66:14:26:f3:e4:b0:9d:6a:8d:81:06:6b:b9:71:6d:d2:d9:
b9:ff:88:36:c8:42:57:57:b4:fc:90:41:23:e4:9a:b1:64:1d:
d3:22:e8:46:6e:e1:13:da:5c:41:d7:2d:42:3d:1a:63:df:8e:
68:bd:08:10:5e:30:01:69:39:3e:55:dc:e5:45:30:19:3a:f2:
b4:8d:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:44:02 2026 by rpki-client