
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: NqcX5VpHwMMsduiF7lVLVs/+wZ/aKdYK/j00AzK7VAk=
Subject key identifier: 41:E9:D6:4C:86:49:9F:B1:F2:7D:B6:60:8A:1E:58:CB:D8:CD:9F:F7
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08A8
Signing time: Wed 02 Sep 2026 20:34:49 +0000
Manifest this update: Wed 02 Sep 2026 20:34:49 +0000
Manifest next update: Wed 09 Sep 2026 20:34:49 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: qdoMa4sM+mduBg5WmciCJzKSCZ8SCPMvJV4TFCrON9M=)
2: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
3: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
4: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 20:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Sep 2 20:34:49 2026 GMT
Not After : Sep 9 20:34:49 2026 GMT
Subject: CN=6a988869-3820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:0d:b2:4b:52:34:d1:5f:67:fa:92:3f:7d:
c5:7b:16:d3:1c:d4:22:f6:2c:40:3f:07:18:6d:fb:
89:a4:36:e9:d3:ce:13:b2:cb:c4:f0:d8:00:58:f2:
9f:7d:0e:58:d7:9e:49:a5:1d:35:d3:c0:36:ca:0f:
f3:df:70:86:40:cb:ed:82:30:6f:b7:15:e9:26:2e:
3c:54:a7:92:72:44:92:80:bb:c4:8e:c9:7b:ed:bd:
86:14:46:77:23:94:f9:eb:01:bf:87:46:f0:eb:c5:
44:c5:12:c5:11:f4:bb:76:c7:51:eb:b2:1a:ce:c3:
3a:08:ce:6b:b3:13:5f:f2:03:bc:9d:a7:7f:07:e6:
5e:a0:c9:e5:ac:28:7d:57:74:b8:81:53:a2:a2:90:
6b:af:cf:d9:44:f9:ce:26:23:ca:cd:b0:d0:ac:cd:
3e:a4:5d:74:3e:80:59:aa:19:24:4d:67:1c:25:45:
6f:9d:f8:7a:53:22:2c:6b:b0:98:5b:90:ba:99:4c:
19:1d:72:3f:8e:af:6a:f0:18:0d:e9:e1:bb:5c:bb:
13:2e:74:f3:25:51:cb:2e:1b:3c:23:35:97:9a:f9:
ae:b6:53:e1:e9:85:22:0d:ec:8b:00:38:de:53:6f:
f1:c2:20:60:4b:9f:56:d3:c4:b4:d7:63:6b:13:45:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:D6:4C:86:49:9F:B1:F2:7D:B6:60:8A:1E:58:CB:D8:CD:9F:F7
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:34:e2:de:90:fe:2a:17:08:f3:b3:a1:ce:d5:2b:3a:4f:5e:
11:81:2d:13:c7:29:9b:5d:be:7d:93:a9:54:27:4f:8d:9f:da:
55:79:36:3f:fa:a3:75:ed:61:be:28:3a:ed:40:fe:b4:ab:15:
e0:0f:c9:43:60:98:50:15:e8:4f:be:be:4d:7d:0e:26:6b:5f:
75:c2:ec:e3:04:c1:a3:dc:73:51:5b:6a:da:e6:34:3d:02:51:
c7:64:c5:ea:a9:03:79:0b:48:02:26:53:fd:a3:94:ba:13:3b:
9b:b5:af:5f:b4:d2:61:e0:56:d6:eb:b6:df:77:1e:95:ae:68:
91:44:6c:11:a8:06:92:75:eb:0a:41:7a:fb:8a:33:14:23:e1:
cb:e8:b0:79:f8:24:33:3e:31:3d:08:97:db:27:a1:28:5e:71:
36:29:0c:b6:78:85:55:a0:4e:0b:39:da:b6:ef:e7:64:22:fd:
80:2b:1d:d0:9d:37:8c:67:06:90:0e:ae:7b:cb:b0:9c:30:97:
cb:40:c9:6d:79:6a:f7:96:56:9d:60:01:dc:7a:61:e7:0a:51:
1f:51:67:b6:fe:87:7c:d9:a1:14:9e:b3:da:53:d9:17:7f:db:
c5:91:a6:a2:b1:6f:84:e9:b7:33:07:db:12:01:cc:98:48:b8:
76:4c:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 01:40:26 2026 by rpki-client