
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
File: mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json)
Hash identifier: 9utciMCtlGodAktEYeihhQQaMpC7gkDOlwnt8H64+VI=
Subject key identifier: 6D:86:28:C6:9A:45:B6:3B:D9:C7:B5:23:6F:4B:12:2C:CD:CF:80:2A
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial: 115F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
Manifest number: 111A
Signing time: Sat 24 Oct 2026 17:17:23 +0000
Manifest this update: Sat 24 Oct 2026 17:17:22 +0000
Manifest next update: Sat 31 Oct 2026 17:17:22 +0000
Files and hashes: 1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: U9soSNEPqUpuC/k0NzgjAkoLDwoTTDPgln3fJ8JW54c=)
2: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: Q/eCF0AzmK8tNl3R3SFQuYN54I5IONWrSmL4B/NCtck=)
3: mKPQBXH61YZ-aXWXRBvkP2QM7xw.asa (hash: i+Xzz4/pjjPTXpwn4PpHSHOD48b0E1VC1Rlyg+hKBSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 17:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4447 (0x115f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Validity
Not Before: Oct 24 17:17:22 2026 GMT
Not After : Oct 31 17:17:22 2026 GMT
Subject: CN=6adce823-99c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:2f:27:72:45:57:89:de:26:d1:4c:f0:85:
05:88:d7:ed:c2:cd:af:ca:e8:e3:11:c2:64:ec:95:
1a:ec:6f:06:17:13:ac:88:49:2a:c7:29:d8:ce:b4:
57:70:78:38:6a:dd:3e:00:5e:e0:e4:ec:f5:46:0a:
53:1a:2e:a2:63:16:a1:2f:fd:26:dd:56:a7:92:02:
15:f2:e9:8e:6d:1c:a9:cd:99:71:76:9b:6f:70:d2:
21:58:d8:b4:17:f9:71:8f:f9:9c:11:1b:6f:56:fc:
3f:48:68:68:5b:f6:ad:f1:6d:72:f2:52:aa:81:68:
88:51:73:92:25:6c:85:cb:9e:42:1b:b7:8d:81:c4:
8b:b6:e8:f1:a6:8c:dc:e0:a8:6b:cc:35:1e:11:a4:
32:a8:12:75:84:d0:cf:50:e6:82:3c:14:86:3b:9d:
54:c7:71:19:1d:9e:32:ba:16:4c:66:17:7c:99:98:
b6:75:8e:81:21:c3:c1:57:61:c5:72:fc:73:c8:fd:
34:99:09:e1:29:e4:f8:d6:77:f6:1e:ed:16:2f:c4:
7f:1d:39:ec:55:21:a9:4a:88:c6:f2:01:09:b8:a1:
d9:bf:31:79:1a:e6:2e:6e:eb:4a:78:59:40:98:df:
53:ce:7c:da:4f:6e:ec:1b:2b:ba:ac:45:41:13:2d:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:28:C6:9A:45:B6:3B:D9:C7:B5:23:6F:4B:12:2C:CD:CF:80:2A
X509v3 Authority Key Identifier:
keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f5:6f:8b:43:ac:6e:79:2b:9f:e0:08:68:50:63:12:a0:4c:
bc:c5:40:70:c9:99:03:ac:c0:32:4d:c4:f0:3d:d8:ff:1c:c4:
e6:d8:ea:04:40:72:3a:52:66:d2:3d:db:d8:95:db:42:a9:b7:
ff:17:d0:74:4d:22:5f:73:00:cc:ad:a0:cb:ee:ce:6e:fb:61:
9d:7e:29:99:19:34:d1:6e:49:37:79:74:0d:85:76:5f:e7:d6:
d9:5c:12:1d:06:28:65:f9:c3:5f:74:ed:6f:a7:c0:0a:24:4c:
bf:b7:cd:7a:89:81:07:7b:4e:d1:38:1e:b4:c1:9c:84:fa:4f:
fe:11:20:0f:76:5f:4a:25:f1:5e:54:42:4a:9a:32:5f:c8:df:
a0:2f:f3:df:37:68:22:3f:c4:a4:78:59:a7:b5:05:b7:aa:b3:
2c:45:fc:42:20:1f:06:69:40:e6:27:00:aa:fe:7b:b1:55:f7:
08:95:8b:19:d5:5b:d9:e1:6e:7b:81:71:11:a3:72:80:c4:33:
9c:c6:c7:ad:5f:06:d8:8e:23:9c:2e:7c:bf:48:6c:0a:6b:ec:
f7:1f:17:b0:01:3d:28:da:c7:21:bc:ed:27:96:6b:75:2a:3d:
22:0c:e3:03:6d:ec:cb:ec:74:48:71:9e:38:1d:6c:73:d2:8f:
43:72:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:56 2026 by rpki-client