
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier: CXP5SSCCFKCs0iBySg/cs3Em3QFsi5swlbmUiKg0gBg=
Subject key identifier: F1:C2:92:2F:26:4B:E7:DE:19:52:9C:3D:77:21:48:32:B5:86:74:B4
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0DD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number: 0DAC
Signing time: Mon 02 Nov 2026 18:05:18 +0000
Manifest this update: Mon 02 Nov 2026 18:05:17 +0000
Manifest next update: Mon 09 Nov 2026 18:05:17 +0000
Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: 5NLD5BXKzqaJHEeVtHLij0+E+uzW3SrisWJb/0cMAnw=)
2: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=)
3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: J62kW7vY7+y9yEuU2U+Umwljmn5gkb28051yzRtO/0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 16:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Nov 2 18:05:17 2026 GMT
Not After : Nov 9 18:05:17 2026 GMT
Subject: CN=6ae8d0de-880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:84:57:26:19:13:b5:fd:59:39:44:6b:9a:
fa:0a:14:96:9f:e3:25:c8:92:f3:01:51:f0:1d:06:
92:04:cd:c7:9b:a0:f8:37:4a:12:de:94:bd:11:b6:
3b:92:ed:35:9e:12:59:ba:c9:11:5b:99:d9:d8:47:
00:7f:2c:f6:0a:6a:4a:d6:dd:55:c6:7a:e0:24:60:
a0:62:db:b5:ca:d2:df:af:22:df:28:45:34:f9:5f:
22:a8:4e:1c:51:72:76:1b:75:df:15:7d:6e:97:65:
70:d0:fa:26:9b:b7:5b:fa:dc:fc:8e:a7:ec:cf:f8:
94:b5:11:3f:f0:ae:f7:86:06:01:ee:04:1b:6c:f4:
73:70:48:56:98:2c:14:6a:95:fe:10:f8:66:fc:53:
25:99:88:e6:25:6b:e5:a4:bb:79:93:a4:c0:c2:d0:
00:b9:f5:bc:21:da:65:09:b5:3c:e1:02:cc:b6:51:
00:41:95:70:eb:9a:b3:78:27:fe:e1:0b:ee:e6:62:
10:42:5b:b9:ee:01:99:3d:d5:79:80:cf:15:46:fd:
65:99:59:c1:68:26:51:99:87:97:ee:26:cf:ff:a9:
45:0f:ab:8e:e0:b4:a4:63:e2:48:d0:c6:e9:ce:e6:
35:74:e8:31:a5:2b:35:bb:43:21:95:4d:62:9a:f1:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:92:2F:26:4B:E7:DE:19:52:9C:3D:77:21:48:32:B5:86:74:B4
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:3f:25:5e:9b:5a:5c:54:22:6f:16:45:a1:4a:63:34:4c:d8:
96:23:3d:b8:42:90:88:5a:9e:2f:03:a7:70:69:c1:3f:20:54:
e1:6c:fb:2d:9b:3a:42:66:fa:fd:bc:1e:8f:17:af:48:bd:40:
21:b1:2d:4f:1a:8c:a4:53:d3:56:52:03:be:1b:43:f4:15:89:
72:78:5b:85:5f:81:31:39:e9:c2:2b:c3:ec:b2:50:2c:c5:b4:
b9:db:bf:1b:3e:23:f0:f0:d8:2e:e8:9f:97:0b:28:4d:3c:37:
21:7d:e4:01:ec:5c:b7:27:a2:0e:96:e7:b3:e6:05:ae:69:f2:
22:4f:78:15:ab:54:bb:81:73:5e:21:0e:b1:67:7d:54:f2:33:
6b:ba:44:0b:a7:09:58:b2:2b:01:83:0f:48:3c:43:50:59:fd:
68:e4:a0:2c:22:a2:78:10:c2:bd:81:66:78:ec:85:e4:99:db:
41:33:74:9f:73:94:85:2a:5a:74:25:24:6b:14:73:1a:14:25:
fe:fb:2d:55:2b:4b:c4:77:49:b9:7f:39:46:2b:c6:56:6d:5a:
8e:11:8b:ac:38:cf:ef:eb:f5:8f:ab:ed:05:1d:c3:07:7c:7e:
0f:6c:3f:50:15:c9:09:71:a0:32:94:c7:f6:37:6b:55:a8:b6:
d7:00:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:37:30 2026 by rpki-client