
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier: UVq+ZoXky/VBopiyOKgF331qUknF4Lw8MEZaI/5a9Vc=
Subject key identifier: 3A:48:40:77:72:BE:8A:E2:D0:4A:45:92:2F:6B:78:45:E6:9B:8D:06
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial: 062C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number: 0621
Signing time: Thu 08 Oct 2026 22:59:56 +0000
Manifest this update: Thu 08 Oct 2026 22:59:56 +0000
Manifest next update: Thu 15 Oct 2026 22:59:56 +0000
Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: 5ZmRM4A7SbCtzJA4n6Ns2XgxjOFSJHcA5m9AoLvp+vk=)
2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: 8I3vg9mRq7RrWAPbewE6dqg4o0GcqV6YlQtqgfU2X4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Validity
Not Before: Oct 8 22:59:56 2026 GMT
Not After : Oct 15 22:59:56 2026 GMT
Subject: CN=6ac8206c-684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:14:73:8a:f1:95:84:d5:43:b2:d5:38:b0:
b5:19:95:aa:32:dc:f8:7f:da:b3:45:d0:f1:d2:0a:
51:c8:bd:5a:6d:33:c9:1e:ea:8e:0b:90:49:40:6c:
6b:6a:c1:cd:a6:cd:a4:ab:8e:e1:49:d8:31:71:19:
ce:67:67:e3:c8:9f:09:40:76:fc:34:ee:c1:f1:17:
7f:24:70:1d:44:8c:3a:eb:15:9d:38:bb:08:b1:f6:
83:e3:62:4c:8b:79:b5:2e:51:32:ae:19:d7:bb:0e:
16:29:be:4b:6f:9f:99:87:95:24:67:8f:e5:29:2a:
0a:20:8b:bf:09:1a:d3:de:0d:5d:76:64:4c:14:74:
2d:b2:9b:99:b9:61:99:ea:2a:48:e9:7b:d2:b9:65:
45:34:63:f8:32:59:ed:be:31:e2:f4:f2:47:01:75:
6e:42:e6:4d:f8:b7:00:b1:dc:95:8a:ea:1d:a9:e5:
9f:28:e0:c0:e8:1f:c5:b9:c0:bd:d6:56:2f:4e:18:
64:dd:cc:da:40:a4:b5:05:7e:df:a4:7e:7e:4e:66:
5c:ea:99:b3:bd:3d:f1:f5:d2:0b:74:0b:c5:bb:57:
cd:12:a2:29:c7:b8:1f:9b:7a:32:d0:47:71:d4:35:
c9:c2:75:3f:c5:76:10:bb:6d:e3:31:a4:80:74:c5:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:40:77:72:BE:8A:E2:D0:4A:45:92:2F:6B:78:45:E6:9B:8D:06
X509v3 Authority Key Identifier:
keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:d8:23:0c:14:c1:3d:5e:d6:fd:8f:7e:fb:9e:06:72:41:
a7:6b:d4:bd:c1:00:1a:0d:52:64:f2:17:b1:58:81:c2:da:fb:
0c:5c:bb:27:ae:ef:8a:6e:a0:24:d5:b7:22:fe:d2:59:8a:08:
bb:68:4c:94:69:1a:d7:cf:e5:61:b7:8f:f8:7c:1d:b1:53:02:
f4:30:46:9f:60:f5:fa:c3:3b:eb:5a:0b:4d:a1:12:e3:f9:cd:
ee:65:1d:0c:9a:c7:79:14:4a:73:04:56:80:38:29:45:6d:2f:
57:25:33:94:13:4f:4b:4d:d7:1f:80:c3:53:c4:c4:ea:99:68:
6e:2a:f6:df:a6:41:91:ad:51:52:9e:a4:86:4c:95:32:7f:1c:
44:ad:34:80:69:88:ab:c0:67:28:36:6c:e1:5d:cd:8c:e0:cd:
4b:fa:98:81:5a:2d:7a:fa:94:a8:71:38:44:a9:6d:95:44:0f:
e2:35:de:10:c9:6c:69:46:2f:0e:e9:00:5d:50:cf:e8:db:5b:
f9:90:48:f9:23:68:c5:db:a4:82:48:9e:88:48:de:d1:d9:8d:
3c:7c:77:26:c2:6c:00:7d:0e:71:d3:ed:5a:12:df:71:46:61:
39:3c:b9:19:f4:00:83:76:4a:fc:38:77:12:36:92:52:0b:43:
df:cc:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:35:24 2026 by rpki-client