
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier: 8bb4ekquoGNAZP+Lhf+PdsBAIzVjge6ZV/HbxSGL9dM=
Subject key identifier: CF:C0:7D:17:91:BC:C4:44:93:02:1B:EB:D7:2E:9C:85:FC:82:AD:72
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number: 014E
Signing time: Sat 05 Sep 2026 05:05:19 +0000
Manifest this update: Sat 05 Sep 2026 05:05:18 +0000
Manifest next update: Sat 12 Sep 2026 05:05:18 +0000
Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: ooxdyg9upmwjCwio9qrIWdjvHsjewMgdSLbnmZXBzyI=)
2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Validity
Not Before: Sep 5 05:05:18 2026 GMT
Not After : Sep 12 05:05:18 2026 GMT
Subject: CN=6a9ba30e-732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:65:ab:a6:c9:e8:51:63:a0:b4:54:75:87:
b0:5a:03:35:55:05:33:9a:70:84:5e:7a:d5:4b:9b:
ff:40:39:ce:c5:42:91:ec:98:86:17:10:79:96:53:
6d:ba:91:94:ab:21:ca:e9:56:7c:f0:46:0b:4a:05:
d8:15:8a:7d:d1:18:8b:fc:4b:a1:99:b6:0e:ec:44:
a9:c4:d3:25:22:ec:42:6a:6e:52:f6:1d:cd:bf:71:
b8:57:8c:04:95:bb:c0:78:b6:e1:2d:e7:65:25:7f:
76:4b:4a:ba:9c:9b:ed:01:33:bf:0a:f0:ac:99:7a:
29:0d:ff:e1:ce:5f:ab:88:96:45:b5:42:e4:9d:5b:
ed:74:9d:e8:10:3d:e7:0d:80:eb:1e:67:55:e7:3f:
fb:0a:89:6b:ec:19:47:36:ab:a7:5e:67:ed:48:1d:
89:7f:f8:6f:80:23:db:68:2b:ab:7f:ca:4c:42:96:
40:19:18:a9:77:dd:a7:60:9f:24:b4:2a:d8:cc:e3:
f4:51:98:a8:0e:90:e9:30:21:96:e0:1a:42:36:04:
03:92:a7:ca:2a:fd:20:83:fe:99:a1:92:0b:e5:57:
5a:fc:81:d5:95:c3:26:50:90:2f:c0:cb:60:21:6e:
38:24:29:62:f5:47:7d:ea:f5:f3:8c:fa:7c:fb:7e:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:7D:17:91:BC:C4:44:93:02:1B:EB:D7:2E:9C:85:FC:82:AD:72
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9a:82:41:12:ea:e2:d6:9f:32:f5:41:83:91:d4:e0:28:4b:
05:62:fa:f4:c4:eb:c7:6c:ad:6e:ff:dc:47:5b:74:64:7a:6b:
9f:5e:92:d0:bd:6e:19:f8:c5:a0:db:b6:dd:60:77:f4:66:10:
f1:04:ae:c0:69:6c:f8:07:1c:a7:05:75:e5:e0:8f:6b:94:dc:
db:75:9a:de:1a:2f:2d:74:f8:9b:0a:a0:b4:b7:64:e7:2b:46:
00:80:6d:63:1c:c0:7e:93:99:b6:a3:09:bf:a6:6b:b5:20:43:
78:98:80:94:af:e3:06:72:6a:b0:50:0b:9a:e1:c7:ef:48:3a:
bf:52:39:c4:d3:f4:46:90:c2:c8:61:78:23:2b:06:39:6f:89:
84:4f:6e:d3:42:24:4e:b6:c4:e5:bb:f1:d3:7d:25:3e:e9:5c:
2d:d3:9b:88:a0:ff:69:a5:45:60:e6:30:39:25:8c:42:f9:6f:
46:4d:de:69:a3:5f:71:19:1c:84:23:9f:d1:2c:00:5d:c0:eb:
04:60:62:98:ce:a9:65:a0:1e:39:fa:4e:43:fa:2a:74:51:df:
1b:1b:09:7d:54:5d:c1:86:f5:af:4e:89:2c:50:f8:6c:61:1c:
55:61:5e:75:de:97:48:e4:1c:47:3a:61:50:52:32:09:01:ce:
59:7b:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:19 2026 by rpki-client