
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier: 1vo3kesjt+R4iQGqdIIJNjDW7M5AGKDf3kelCu3G/F0=
Subject key identifier: EA:E8:D9:19:E8:1C:11:9F:6A:65:D1:04:99:9C:C1:17:04:A1:96:02
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial: 031E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number: 0305
Signing time: Mon 05 Oct 2026 01:20:16 +0000
Manifest this update: Mon 05 Oct 2026 01:20:16 +0000
Manifest next update: Mon 12 Oct 2026 01:20:16 +0000
Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: 31eJxnxGQfpDda6azyleZUmBgTYsBYW5JmdgS6JhEkA=)
2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: jKaERdadgN/bTNsY3N2ri9io7PkqOZ7TSU8weedDHCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 798 (0x31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Validity
Not Before: Oct 5 01:20:16 2026 GMT
Not After : Oct 12 01:20:16 2026 GMT
Subject: CN=6ac2fb50-bd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:f7:f4:d1:c0:51:22:b7:93:d3:b5:fe:26:
3f:14:47:2b:78:b1:d1:69:ef:32:34:d7:24:6b:d7:
98:a5:21:8e:f0:11:5d:2b:f4:9d:19:c2:0b:d2:d9:
cb:d6:4b:ae:2b:f0:22:ff:14:4a:34:74:7f:92:ce:
e3:84:62:28:21:01:6d:79:da:ea:b2:bb:82:10:bd:
96:d2:32:19:e6:05:e3:71:1e:5b:08:41:d8:8c:a3:
0d:8e:fa:d2:0c:09:dc:fa:fd:65:76:65:1b:ee:8c:
e4:fc:f0:72:c9:d5:5e:c7:9b:95:58:01:bc:a1:7d:
02:50:ad:35:9d:94:88:c2:aa:db:b9:f7:07:e0:0a:
bf:8a:80:1e:11:20:b4:7f:33:aa:05:f9:e4:7e:f7:
1d:86:41:de:79:33:5c:cc:91:b1:40:a5:ad:9a:d6:
e7:18:7e:db:53:da:d9:37:4b:e4:68:17:f6:f4:ec:
b0:7d:10:08:dd:76:71:f3:1a:83:b0:67:1d:ef:bd:
0a:9d:9e:d4:36:ad:31:62:84:04:81:06:db:d6:6f:
72:30:32:d9:b5:d4:df:c6:28:60:6f:2d:92:74:5c:
95:f3:a4:e8:2f:29:9a:81:de:65:76:4b:c7:0e:ec:
d6:02:4a:1b:2b:4b:52:a8:a9:04:9b:c3:09:b8:c9:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:D9:19:E8:1C:11:9F:6A:65:D1:04:99:9C:C1:17:04:A1:96:02
X509v3 Authority Key Identifier:
keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:30:2e:98:96:09:d6:f5:b4:89:51:0d:50:10:c1:fb:be:
73:db:fe:7b:4f:e7:77:28:32:cb:c5:04:71:a2:87:ed:e5:e2:
7a:43:58:62:f8:1e:a9:46:fb:db:43:2b:11:48:1a:1a:48:16:
d3:77:4a:ec:06:a1:21:36:32:1e:ca:74:e8:ae:f5:d7:8a:27:
66:b8:63:a0:f9:68:12:80:80:80:fb:2d:4f:af:c7:d1:c9:39:
b4:e8:fb:96:a7:15:37:5b:0c:5b:30:9c:59:49:1b:14:ef:5f:
1a:26:f9:e8:08:e4:62:ad:2d:05:2d:6e:2a:45:0a:b6:52:45:
4a:a4:b7:3d:1b:c3:49:74:9f:3c:de:cf:38:f3:61:42:ba:67:
30:0f:76:ed:30:b9:11:d4:2d:12:d1:5f:85:4c:dc:1c:9a:1e:
2f:e7:cd:cb:bf:7a:38:78:36:4e:b4:48:ee:a4:41:a3:87:6c:
29:f3:2e:92:75:ed:af:56:d9:e0:ad:8e:d6:7f:91:8a:e7:71:
17:4b:1b:b4:57:11:79:02:b6:9b:27:f9:d7:11:2a:29:cc:3e:
8f:73:4c:f9:86:23:33:5b:b8:18:ae:78:7c:71:29:63:aa:35:
ba:44:a3:49:55:16:87:3d:a0:79:a2:2f:b0:1a:98:9c:5a:ca:
6f:34:9a:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0
NTk4OTMyOTIwHhcNMjYxMDA1MDEyMDE2WhcNMjYxMDEyMDEyMDE2WjAYMRYwFAYD
VQQDEw02YWMyZmI1MC1iZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAna/39NHAUSK3k9O1/iY/FEcreLHRae8yNNcka9eYpSGO8BFdK/SdGcIL0tnL
1kuuK/Ai/xRKNHR/ks7jhGIoIQFtedrqsruCEL2W0jIZ5gXjcR5bCEHYjKMNjvrS
DAnc+v1ldmUb7ozk/PByydVex5uVWAG8oX0CUK01nZSIwqrbufcH4Aq/ioAeESC0
fzOqBfnkfvcdhkHeeTNczJGxQKWtmtbnGH7bU9rZN0vkaBf29OywfRAI3XZx8xqD
sGcd770KnZ7UNq0xYoQEgQbb1m9yMDLZtdTfxihgby2SdFyV86ToLymagd5ldkvH
DuzWAkobK0tSqKkEm8MJuMnzHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOro2Rno
HBGfamXRBJmcwRcEoZYCMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx
OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2
NTJQazZlTXZOYjFGbUpNcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWCAwLpiWCdb1tIlRDVAQwfu+c9v+e0/ndygyy8UEcaKH7eXiekNYYvgeqUb7
20MrEUgaGkgW03dK7AahITYyHsp06K7114onZrhjoPloEoCAgPstT6/H0ck5tOj7
lqcVN1sMWzCcWUkbFO9fGib56AjkYq0tBS1uKkUKtlJFSqS3PRvDSXSfPN7POPNh
QrpnMA927TC5EdQtEtFfhUzcHJoeL+fNy796OHg2TrRI7qRBo4dsKfMuknXtr1bZ
4K2O1n+RiudxF0sbtFcReQK2myf51xEqKcw+j3NM+YYjM1u4GK54fHEpY6o1ukSj
SVUWhz2geaIvsBqYnFrKbzSa4A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:12:11 2026 by rpki-client