
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
File: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft (raw, json)
Hash identifier: BsErOgJIUcs2trJ6+SFcDrcs0RP60HAdq402J4YxAJc=
Subject key identifier: 2C:38:36:DF:B0:C7:4A:73:A6:E4:1D:88:66:62:6B:AA:A0:4D:9E:EE
Authority key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
Certificate issuer: /CN=A911E3C6/serialNumber=03867130401AFB1283677BC07309EA94C708C76F
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
Manifest number: 26
Signing time: Wed 07 Oct 2026 09:32:52 +0000
Manifest this update: Wed 07 Oct 2026 09:32:51 +0000
Manifest next update: Wed 14 Oct 2026 09:32:51 +0000
Files and hashes: 1: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl (hash: sTAve+pdCnvyhaXQmBjG6aMStvGG+JoMEAkCE2LIwsQ=)
2: 7FFE71389D3311F18AF9939B4911F970.roa (hash: EoUyUFsqGCvstD3CgILHZ4DcPcFszbAPPZuEKcHz5ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl
rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F
Validity
Not Before: Oct 7 09:32:51 2026 GMT
Not After : Oct 14 09:32:51 2026 GMT
Subject: CN=6ac611c4-22e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:ca:aa:d0:75:e2:b1:5b:09:d6:0e:df:3a:
af:75:f4:c1:d8:13:5b:d9:72:37:cc:5c:14:f8:2a:
ce:8a:86:89:6d:d4:cd:3d:a8:2f:44:a6:a7:1a:fb:
a7:09:b4:54:17:e8:e6:9c:a1:44:6f:b8:9c:53:27:
03:8d:e9:55:31:6e:0a:67:a9:2c:e5:06:98:69:94:
9d:2a:9e:74:3a:78:ce:e7:35:2d:0b:c8:1e:bc:a9:
b0:14:ad:fa:33:d8:67:f4:41:2e:36:05:5e:c0:af:
20:c8:ef:ea:93:31:37:4c:67:5d:07:6b:9a:87:98:
e8:47:6d:d8:9f:73:8a:f7:af:75:4b:e3:20:a6:6d:
55:64:da:ae:bf:43:f5:b4:9e:50:a6:a1:6d:db:c6:
b4:4b:c5:67:7d:62:4e:31:ec:4d:79:fb:e8:45:6a:
67:de:21:22:d6:1f:f9:13:26:c2:46:69:b2:6c:8c:
ae:23:d8:5c:e5:88:2a:83:19:e0:91:f7:6a:56:aa:
98:59:27:d8:7f:23:f3:4c:09:39:9c:32:77:e9:40:
f2:0e:51:2d:51:d4:c3:f8:fc:2d:32:67:f7:f5:c3:
1c:b4:5c:45:60:e0:08:07:fc:bc:c2:23:50:b8:86:
30:4d:f5:4d:2b:a9:6c:03:bb:c1:09:8e:02:02:5a:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:36:DF:B0:C7:4A:73:A6:E4:1D:88:66:62:6B:AA:A0:4D:9E:EE
X509v3 Authority Key Identifier:
keyid:03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:42:e2:78:17:5b:1d:7c:48:9b:5c:b3:c4:87:20:17:7e:13:
00:de:08:e3:bd:74:0f:ae:19:86:49:05:44:0e:c8:78:46:02:
68:77:2d:a1:31:ba:05:dd:ff:fd:72:a6:e8:73:2e:4c:63:6b:
37:74:d2:83:e7:09:30:c5:b8:d2:5c:57:b5:98:e1:a4:de:ad:
14:85:e0:ad:e3:60:75:9f:96:43:09:1f:71:8d:40:79:f6:0c:
6e:05:2d:79:de:24:ff:95:18:30:04:54:44:72:24:42:81:4b:
ae:43:f9:97:fe:bf:35:ad:46:14:8b:ae:a5:43:e6:86:a3:72:
45:03:e2:8d:de:50:dc:17:d6:80:a6:e9:ad:12:4a:5a:ba:25:
79:f8:63:db:c2:5e:54:a8:30:ea:fd:44:2f:01:8b:24:36:42:
ee:9e:37:a5:71:7e:4e:24:88:02:d0:ba:f4:01:01:cc:13:60:
2f:ee:44:a6:7b:4c:cd:72:e5:a0:c7:06:3a:fa:cb:55:0d:a6:
1c:18:0b:ac:0e:8e:b4:10:2e:aa:82:76:f4:c5:72:e6:54:3c:
0f:89:e7:13:14:13:9f:79:30:63:a3:8c:7e:7c:0d:45:3e:6c:
a6:34:e1:b4:65:44:7c:1f:b0:9e:b1:04:fa:b2:de:e2:31:6e:
24:32:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:37:34 2026 by rpki-client