
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json)
Hash identifier: yxy2cWlwyV6fxPvmRG8eRPcrc5h00nWEy60Ckpl+4j0=
Subject key identifier: BF:8C:F1:CB:0C:F8:BF:CF:F7:2B:77:6C:25:69:14:7A:D3:75:DA:94
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 02B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
Manifest number: 0298
Signing time: Sat 19 Sep 2026 01:54:04 +0000
Manifest this update: Sat 19 Sep 2026 01:54:03 +0000
Manifest next update: Sat 26 Sep 2026 01:54:03 +0000
Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: Ruu1sWC2didSOg+KBZISNzIFC44vGjWQ4M3G1oh2474=)
2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: tVBR6nv+Wa6lZyjGAKO8lfOoX0W/tb6WbJqBAEHgIOo=)
3: E9198B6E91E711F1BB1861D25611F970.roa (hash: xIMbuSgztSC9t/r1Ai4qyUdk1VhLozu7o1gIAnwugtA=)
4: 327147F689B011F19349356D4711F970.roa (hash: ihDtYJVq2PQ5SWPk4tgAwQuLNouh02/KpYG4RBW6HTo=)
5: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: SnL1PG2+NsLkTmntkoMlK8MLaloc2c+xDMNJk+mY8q8=)
6: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: ChbWxifo/6+meKUlWnVzvTz6439KwZeyjHcg5zJTcwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Sep 19 01:54:03 2026 GMT
Not After : Sep 26 01:54:03 2026 GMT
Subject: CN=6aadeb3c-a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:38:b4:fc:00:f2:f5:42:76:ce:c5:6a:53:
5f:19:5e:9e:3a:da:9c:58:66:ff:dd:c9:6e:25:f4:
b3:2c:95:f2:21:b7:48:c1:d4:46:88:e9:4a:7e:6f:
7d:5b:6b:58:1e:8c:0d:0a:92:6f:2f:29:e0:a6:83:
35:d9:15:1d:e9:34:3b:43:9c:53:57:8e:4f:ae:1e:
6c:74:21:62:24:69:c2:ff:b4:67:6f:c1:88:2d:bf:
8a:48:5c:79:c0:ec:ef:c1:5d:70:73:fe:2b:7a:85:
40:5d:c7:08:0d:e6:8c:24:52:09:a1:ae:9f:70:40:
27:fc:fc:b4:dc:48:b8:0e:8a:b4:d2:de:c8:0a:c1:
eb:43:7a:82:81:87:09:17:1c:0a:34:e7:3b:c8:d2:
f7:89:65:db:9c:a8:8e:35:f9:df:c3:04:f6:5c:1c:
81:68:26:2e:2e:e2:0e:48:56:31:9d:3d:2e:0c:71:
b7:46:6e:9d:ab:8f:88:ea:9e:59:52:80:29:f4:d6:
74:5b:b1:6b:8d:89:73:d3:67:00:35:f5:84:18:ca:
be:39:6e:b7:9f:77:f0:f0:a1:e1:b5:b8:ae:f4:d0:
9f:12:ac:7e:bd:f8:91:79:7e:70:83:cc:99:c7:ab:
b7:e7:70:c2:96:dc:8b:d7:bc:a8:0c:e6:27:08:a7:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:F1:CB:0C:F8:BF:CF:F7:2B:77:6C:25:69:14:7A:D3:75:DA:94
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:e5:67:45:ed:2d:38:08:f7:96:af:8c:a5:f7:00:33:e9:
bc:9d:90:b4:37:55:57:6f:05:fe:72:f4:a9:c7:e0:03:21:b1:
ca:73:c2:82:c5:68:d5:30:8c:69:4a:d0:d2:2a:3e:fb:bf:8a:
4e:0f:53:76:e6:ed:19:b9:7b:c8:22:fc:b3:79:ce:c8:ba:1a:
38:fa:a9:26:c2:70:9f:9f:02:bd:3d:93:9c:b2:45:ee:84:66:
61:f7:7b:90:3b:ef:87:5f:60:66:82:f1:f1:b1:7d:9a:86:65:
67:4f:63:21:13:7f:4f:5d:f0:00:8b:72:23:70:32:7e:b7:48:
1b:43:0f:fc:d4:c9:61:f6:a0:11:12:fa:6e:20:2c:b9:c9:c5:
7a:5f:b8:1e:23:03:80:6d:b1:13:0f:47:2b:41:dd:70:e4:8d:
5f:41:38:d3:9c:f5:51:a0:18:fa:c6:86:1e:94:96:83:77:03:
74:d9:13:a0:4a:56:9e:40:4f:f1:3b:59:3a:16:49:db:a7:88:
1a:d3:00:5c:43:25:44:e0:3e:fd:86:f6:64:87:90:d0:37:54:
85:2b:ad:db:b5:87:51:bd:8b:ff:65:e0:f1:f0:67:e5:40:5c:
44:5f:18:2c:2e:e2:38:ff:aa:df:00:c9:59:d0:c3:4f:d4:80:
4d:79:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 17:15:18 2026 by rpki-client