
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: jbIo49BYhTPk74Jw0P5SCHpwrWU4uCdVzSRBRAXF1p4=
Subject key identifier: 91:59:65:93:93:49:F6:9C:F5:B5:5E:F5:BB:6F:5B:F5:50:76:D1:98
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08AF
Signing time: Wed 16 Sep 2026 20:34:38 +0000
Manifest this update: Wed 16 Sep 2026 20:34:38 +0000
Manifest next update: Wed 23 Sep 2026 20:34:38 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: VJBpETfGyMCuxrMHC8IP7s1HwOYJR8ma7ZRnezWfbWI=)
2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
3: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
4: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
5: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
6: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 20:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Sep 16 20:34:38 2026 GMT
Not After : Sep 23 20:34:38 2026 GMT
Subject: CN=6aaafd5e-8b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:0a:7a:17:23:10:71:30:51:40:66:16:5f:
99:53:70:55:fb:59:e1:50:51:d2:1d:aa:77:65:d0:
76:63:5c:c7:eb:48:7c:10:88:e7:f2:26:25:93:6a:
07:8a:a7:04:39:58:3e:6f:f0:13:5e:49:61:3b:dd:
5c:e9:fc:5a:aa:f2:1b:36:57:fa:fe:55:58:85:3e:
59:b1:c1:03:29:33:fa:65:4d:3e:de:06:cc:5b:f8:
ce:a8:37:37:6e:b4:08:71:95:bc:43:bc:d6:35:74:
b6:4f:85:6b:3d:44:5f:99:7f:1d:e9:4b:67:a1:50:
a0:e0:15:44:15:c7:cb:56:61:fa:f2:3f:7a:e0:34:
10:8c:b9:ec:e7:06:d0:0c:2f:7b:09:cc:52:58:e5:
10:e7:0a:ec:e1:f6:93:5c:27:94:94:82:1e:c5:ea:
ff:5c:5d:98:b8:57:e5:b4:b7:3d:c2:46:89:86:c5:
56:02:ba:98:70:11:e4:89:71:5d:4e:be:1e:48:b0:
81:3c:14:8f:9e:f4:d1:5f:af:9c:bb:5a:38:3f:55:
34:b9:75:ac:cd:6c:c9:b8:ec:7f:06:28:51:e1:0b:
41:4c:19:40:e5:0c:42:e6:02:fb:37:ef:5e:43:d7:
8a:f9:cb:9f:5f:fc:36:2a:87:ad:9b:58:3f:d1:43:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:65:93:93:49:F6:9C:F5:B5:5E:F5:BB:6F:5B:F5:50:76:D1:98
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:ee:24:fe:16:c6:8e:b3:b3:93:40:2e:60:80:80:a7:28:
1a:66:73:88:16:a7:04:63:da:62:e5:06:9d:6c:d0:5e:e5:c2:
a1:9a:dd:a6:7c:d5:b2:03:59:12:dc:3f:54:d7:13:fb:c2:6a:
6d:32:02:a5:26:aa:3e:77:f1:f8:ac:06:8f:52:af:3b:85:02:
83:88:a3:a3:48:a3:b1:02:9d:74:d6:49:47:7a:f6:7e:72:3b:
3a:76:92:7d:c2:6d:8f:9f:23:4a:b2:34:a0:fc:23:c5:ce:77:
5c:43:06:e4:95:d6:cf:cc:ac:c0:21:04:a6:ca:0a:35:a2:c4:
f1:c4:06:aa:0d:71:2c:87:5b:d2:8b:2b:68:53:44:2f:7a:17:
2b:a2:cd:53:49:13:01:46:92:93:ce:17:c6:53:4d:89:b6:7b:
68:fe:f6:90:c5:b8:82:c6:b7:8b:f4:2d:02:1c:97:d9:db:f1:
fd:9f:1f:a2:c2:46:19:f8:27:4b:64:40:33:a7:a0:d5:f2:d5:
bb:65:53:fc:4f:32:aa:11:95:96:52:56:c0:09:1b:23:bc:05:
0a:60:36:26:bf:77:6a:0e:f4:d9:65:2b:45:06:6d:d9:51:66:
aa:0a:fe:54:75:6e:64:70:a8:ea:9d:e1:9c:fb:26:e6:1b:42:
5f:22:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:58:13 2026 by rpki-client