
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: 26rR2t9V0ZjmjbsyVe50ns9ORib54Zcpff1lVPESMK0=
Subject key identifier: AF:B4:5A:59:31:82:8C:F4:81:A5:81:0A:5A:C8:20:B3:0B:C1:CA:09
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08C4
Signing time: Wed 28 Oct 2026 20:42:20 +0000
Manifest this update: Wed 28 Oct 2026 20:42:19 +0000
Manifest next update: Wed 04 Nov 2026 20:42:19 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: PseoYA21SOxcxNpbgXVWn7ZnA4nUELHfYThEf+0SjMA=)
2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
3: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
5: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 20:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Oct 28 20:42:19 2026 GMT
Not After : Nov 4 20:42:19 2026 GMT
Subject: CN=6ae25e2c-bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:67:18:a6:5a:3b:1b:45:78:4e:70:54:06:
2d:95:9b:b6:d4:42:14:e9:48:47:25:27:ef:67:6a:
b0:1d:82:ef:f0:e9:74:e8:53:1a:da:e1:dd:4b:ad:
b2:fe:5e:eb:ec:10:31:a6:92:8d:1e:56:fa:7d:90:
61:23:b7:f8:a0:a5:d8:3e:2f:f5:46:80:6f:e5:29:
a9:cf:54:c9:19:65:af:3f:d4:00:6c:3f:5e:39:34:
9d:80:c4:46:e2:c1:89:c0:5c:70:45:74:bd:6b:96:
eb:72:ab:04:1a:9b:10:f7:8b:87:d2:c4:7e:3f:d6:
88:7d:0e:14:09:41:74:3b:4a:04:db:37:1a:ec:21:
4c:c5:7f:d6:04:77:3f:3d:35:64:a4:cb:34:a3:e5:
30:39:da:39:ac:5e:60:64:cc:8b:3d:19:4b:27:bf:
dc:e0:d5:0a:71:65:ca:ae:35:e5:a9:4a:f7:05:22:
a0:bb:14:1b:60:57:4c:f9:bc:e8:2f:97:05:f9:ec:
cb:96:4d:d0:62:fc:b2:fe:6f:ad:f8:9d:f7:03:14:
db:28:ef:fe:87:ba:b0:cf:b0:97:c2:df:1d:19:bc:
81:9d:9f:e7:32:ef:41:d8:21:85:a9:b1:c4:36:7a:
31:53:34:01:bd:6e:8f:86:92:38:1b:14:52:5e:71:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:5A:59:31:82:8C:F4:81:A5:81:0A:5A:C8:20:B3:0B:C1:CA:09
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:86:8b:55:c8:ed:68:50:73:11:f2:09:64:89:cf:6b:e3:01:
bf:47:0c:2d:f8:07:65:a0:0c:8b:df:a2:5d:68:c2:a6:e4:48:
6d:0d:67:5a:eb:9e:48:7a:50:b5:58:84:bc:e2:49:93:64:98:
d0:ff:24:38:39:85:5f:5c:b7:2e:10:02:ee:61:62:d4:e0:aa:
43:2a:52:f7:48:ad:ad:22:2f:f1:1a:ca:6b:f0:27:e2:55:3a:
30:d6:9b:aa:b3:4e:2b:a7:e3:c6:04:b9:6e:bf:e7:ec:61:46:
70:e5:c9:16:41:bf:92:87:3d:90:51:13:a0:83:d3:79:2c:bd:
b6:c3:d6:08:20:b1:de:47:70:f5:79:a0:a7:f6:75:df:43:62:
41:6e:55:7f:7f:c2:dc:3b:43:4b:fd:29:20:ed:9a:e9:82:42:
8b:73:63:8e:55:6e:bb:f9:7e:2a:a9:ef:7c:32:9c:01:61:08:
9d:01:4e:d6:b2:05:49:cc:7d:ad:34:50:e2:25:93:9e:33:3d:
86:af:a8:02:9a:b9:26:1c:e7:b9:ba:b8:d9:ae:c5:ce:1e:38:
d7:7d:a9:25:96:1c:64:c2:58:ef:35:4b:2a:2b:74:01:8d:0d:
73:bb:eb:9c:48:2c:db:05:fd:a8:26:c9:11:b2:a0:be:79:77:
d2:57:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:47 2026 by rpki-client