
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: u9JMISCfoH7wLDvRAI9EYzcEk35kltdi7V/HaNkwa8M=
Subject key identifier: 1F:CE:7E:0E:1D:5A:CE:4B:97:45:B8:F9:7D:56:AC:CF:71:D4:C3:83
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 08BA
Signing time: Thu 08 Oct 2026 20:40:34 +0000
Manifest this update: Thu 08 Oct 2026 20:40:34 +0000
Manifest next update: Thu 15 Oct 2026 20:40:34 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: MgJgo82+nCvSigwQk8FaX6dHjuFIj++f/Kvrk4YczmA=)
2: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
3: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
5: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
6: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Oct 8 20:40:34 2026 GMT
Not After : Oct 15 20:40:34 2026 GMT
Subject: CN=6ac7ffc2-2c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:11:42:64:64:c4:1b:80:09:20:78:be:74:
41:42:4b:0c:71:f0:8f:b6:c2:2a:60:93:c3:2f:d2:
e1:98:ea:9f:1d:0e:c0:d3:d4:c6:49:03:32:f0:e4:
fe:cb:de:65:d7:9b:47:2c:a4:17:f8:6c:56:fb:f7:
b4:89:48:6d:f7:e4:01:82:14:53:7f:ff:db:89:9f:
42:a9:1b:f4:b0:ce:87:b3:56:88:ca:61:1b:40:09:
0f:dc:ed:31:57:16:a7:bd:6e:36:76:c5:57:8d:58:
43:3a:96:b2:b3:1d:c4:fc:a8:0c:08:b7:f4:ad:59:
7e:78:c8:a7:fa:9b:e0:a7:f6:4b:bb:73:d3:b6:62:
d9:9f:34:bd:c5:2f:df:9d:40:ca:c3:38:5c:3a:e6:
de:5d:01:e9:fe:f0:03:81:78:0f:00:c3:2f:51:c1:
b5:95:b8:4a:6f:2e:ba:73:f9:f1:3a:93:98:c5:f8:
6b:20:08:3b:21:c4:b9:9d:6f:47:e8:60:6a:dd:64:
9f:2a:89:68:2e:cc:10:98:33:e6:70:d6:a8:85:1a:
2d:5d:8f:b1:be:1d:73:dd:56:14:99:93:00:05:28:
10:9b:f0:8d:fe:24:e0:26:59:33:5f:10:cb:a4:98:
06:92:ec:95:66:69:f5:86:00:28:67:13:4a:99:3b:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:7E:0E:1D:5A:CE:4B:97:45:B8:F9:7D:56:AC:CF:71:D4:C3:83
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:8c:de:4c:ac:af:5d:e2:f3:a5:52:e6:7f:1f:d2:f6:6b:
0a:b5:d9:c2:38:10:15:f6:cf:4c:60:0e:50:5d:3e:43:b9:7a:
37:67:fc:84:0f:d1:15:20:d3:6f:56:82:e0:4a:d0:a0:6d:b5:
65:4b:9f:b6:ad:32:35:70:22:b1:89:9d:94:bc:08:ab:5b:55:
0f:8c:34:90:7f:fd:e8:ea:cd:b5:26:33:73:cd:31:9b:22:c1:
bb:06:49:75:55:16:53:f2:c4:e1:ba:17:cb:51:42:31:22:22:
b9:ef:0b:3b:4a:d5:3d:28:12:f5:23:d9:b0:c5:63:cf:df:3a:
43:33:c5:8f:59:76:07:79:48:05:ec:fd:cc:3f:fd:6b:08:a7:
40:32:d7:bc:58:62:6f:76:30:de:75:ef:84:20:b0:a4:84:de:
18:6d:ba:5b:96:23:62:fd:24:0e:93:6c:b2:36:54:4b:e3:37:
5a:99:6a:e2:bd:3a:66:08:a9:df:0c:ff:3f:47:0c:bc:ff:13:
0d:d2:8b:0e:f4:13:5a:9b:5d:a2:53:8e:81:42:46:3e:78:e3:
2d:b0:83:0d:46:e9:82:9b:33:54:8b:dc:fe:dc:bf:dd:92:b9:
a8:d7:bc:0e:3b:f2:d0:fd:ad:72:73:fd:74:e8:be:c8:5e:fd:
0a:6b:d9:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG
MTAwQzk4RjgwHhcNMjYxMDA4MjA0MDM0WhcNMjYxMDE1MjA0MDM0WjAYMRYwFAYD
VQQDEw02YWM3ZmZjMi0yYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9sRQmRkxBuACSB4vnRBQksMcfCPtsIqYJPDL9LhmOqfHQ7A09TGSQMy8OT+
y95l15tHLKQX+GxW+/e0iUht9+QBghRTf//biZ9CqRv0sM6Hs1aIymEbQAkP3O0x
VxanvW42dsVXjVhDOpaysx3E/KgMCLf0rVl+eMin+pvgp/ZLu3PTtmLZnzS9xS/f
nUDKwzhcOubeXQHp/vADgXgPAMMvUcG1lbhKby66c/nxOpOYxfhrIAg7IcS5nW9H
6GBq3WSfKoloLswQmDPmcNaohRotXY+xvh1z3VYUmZMABSgQm/CN/iTgJlkzXxDL
pJgGkuyVZmn1hgAoZxNKmTtALQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/Ofg4d
Ws5Ll0W4+X1WrM9x1MODMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC
RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr
bHdXOEphcVBESjd4QU1tUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnw+M3kysr13i86VS5n8f0vZrCrXZwjgQFfbPTGAOUF0+Q7l6N2f8hA/RFSDT
b1aC4ErQoG21ZUuftq0yNXAisYmdlLwIq1tVD4w0kH/96OrNtSYzc80xmyLBuwZJ
dVUWU/LE4boXy1FCMSIiue8LO0rVPSgS9SPZsMVjz986QzPFj1l2B3lIBez9zD/9
awinQDLXvFhib3Yw3nXvhCCwpITeGG26W5YjYv0kDpNssjZUS+M3Wplq4r06Zgip
3wz/P0cMvP8TDdKLDvQTWptdolOOgUJGPnjjLbCDDUbpgpszVIvc/ty/3ZK5qNe8
Djvy0P2tcnP9dOi+yF79CmvZyA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:34 2026 by rpki-client