
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: M9lf0dpXhXS6NgwXhjFNgbnh8wsOTfxt8VUJoCywMEs=
Subject key identifier: 3F:BA:A0:7E:F3:42:01:0E:16:5E:58:21:AA:58:93:50:16:8C:0B:AC
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08A4
Signing time: Wed 26 Aug 2026 20:41:40 +0000
Manifest this update: Wed 26 Aug 2026 20:41:40 +0000
Manifest next update: Wed 02 Sep 2026 20:41:40 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: WedGFe8CUnV94+q32DqvejAyVoyOKyMSsPloRrBnzu4=)
2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
3: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
5: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
6: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 20:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Aug 26 20:41:40 2026 GMT
Not After : Sep 2 20:41:40 2026 GMT
Subject: CN=6a8f4f84-0ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:ce:02:fa:1e:f5:8a:c2:16:1c:96:ce:33:
ea:91:d2:a3:d4:2a:b2:a7:ce:09:48:7f:6c:d8:25:
37:b4:46:55:01:4b:b8:41:5c:bd:39:92:4c:b8:9f:
b4:58:23:ef:45:df:7a:4f:2a:46:b2:6e:8b:c8:bd:
d5:a1:40:89:f8:de:23:e5:d7:5f:3d:96:8d:e1:14:
a3:bb:5c:9b:24:02:9d:ef:23:7c:8d:6b:f2:18:7d:
e6:fe:c6:da:69:63:39:3b:24:a1:42:81:b0:da:a6:
0c:57:91:12:50:63:d6:03:c4:8a:83:ce:fa:7d:ba:
86:6a:ee:dd:89:22:4b:6d:41:66:b1:76:22:51:05:
57:4d:de:7c:ac:aa:03:d1:52:bf:66:d4:bd:71:10:
bd:49:8a:c7:a1:b1:b3:5f:0f:20:70:f6:88:62:62:
2e:bc:e4:09:5a:4e:36:09:a0:b5:2c:29:8d:43:67:
e4:a8:cd:4b:57:73:7c:e9:67:f2:4d:c5:34:b7:8f:
be:7d:11:b7:b3:19:53:f0:15:e9:6f:22:e7:25:70:
4f:81:9d:11:2a:8c:b7:a5:96:31:a1:eb:57:45:99:
e5:52:bb:a9:d1:f5:17:38:ff:3b:95:38:bb:97:c8:
0f:9d:b0:ae:81:fa:f1:a8:1e:50:98:95:c4:60:da:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:A0:7E:F3:42:01:0E:16:5E:58:21:AA:58:93:50:16:8C:0B:AC
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:00:8d:ed:62:45:79:9b:33:e3:0e:3c:5a:83:d2:38:f3:f0:
63:0e:3a:23:db:3f:f9:ac:f6:29:f1:be:00:b5:f7:33:ab:83:
9e:29:ce:9a:51:21:c0:bd:c3:1a:e6:ca:7f:85:5c:c4:02:c5:
2e:2a:e1:c7:5c:ef:3c:dc:96:eb:5a:f4:28:ec:48:ea:21:cc:
df:c2:ed:a3:2b:11:ed:93:4f:2d:bd:be:b1:f3:79:8f:9d:a7:
5f:fc:da:e9:e3:10:b8:39:3f:71:d4:1e:c5:19:36:38:c7:4c:
6c:a9:3f:03:3b:d6:ba:32:23:6a:fa:24:21:8f:b4:cb:fc:b8:
48:21:3d:2d:5f:08:b2:52:90:08:e8:65:74:ec:96:1d:9b:b7:
16:51:02:67:31:2b:26:b9:0c:c2:58:8a:76:48:eb:57:20:69:
2a:6f:71:05:42:c1:a7:e6:e2:25:6b:8d:85:12:32:f3:15:c6:
61:54:92:84:91:59:03:26:a0:98:0d:9d:f4:15:19:0d:bc:d6:
1e:f9:61:12:40:26:b5:eb:31:b5:46:1b:81:be:6e:1d:60:f2:
ee:71:78:3f:55:f8:69:41:f1:8a:15:94:89:24:0e:54:b1:73:
b2:15:2e:94:79:94:ef:88:e5:36:dc:7b:75:73:3a:83:16:89:
31:18:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:24:40 2026 by rpki-client