
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: fJTctER6ZtqBUNL6q0oHRlvsTu0ljB0M1oM9X23WJw8=
Subject key identifier: 58:91:F3:47:29:F7:6E:88:B8:42:21:12:94:5C:48:8F:B6:28:74:73
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 016C
Signing time: Sat 05 Sep 2026 04:44:29 +0000
Manifest this update: Sat 05 Sep 2026 04:44:28 +0000
Manifest next update: Sat 12 Sep 2026 04:44:28 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: eZZHZHQQG1VmUTQJ7S3ygKoqVut8Fn4WC6naTJsl69c=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Sep 5 04:44:28 2026 GMT
Not After : Sep 12 04:44:28 2026 GMT
Subject: CN=6a9b9e2d-a729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:bb:d2:f7:09:b6:76:60:a4:48:e8:80:bc:
07:aa:d1:92:b9:1b:a9:7e:84:48:c2:0c:bc:f6:57:
2d:49:50:0c:44:c3:65:9f:fc:2d:80:90:16:b9:9c:
12:85:93:3a:26:4c:88:d6:e1:4d:c8:69:27:03:5b:
fd:f6:00:2c:b9:61:7e:08:d2:77:c3:93:7d:25:f1:
15:f2:cf:b1:da:ea:0a:19:10:86:3d:bd:6b:99:9e:
0d:55:87:9b:62:86:3d:ea:7c:88:6a:13:db:fc:ff:
8c:bd:fc:36:fc:9d:50:f5:4c:47:a8:f8:e2:38:0a:
dc:df:97:a0:4d:d3:de:48:94:53:33:00:eb:b5:3c:
83:26:5b:a5:89:38:c8:6d:cf:c5:51:27:7c:87:b9:
59:7b:3a:05:f9:6b:e6:26:93:20:ad:0a:58:0a:9f:
dd:f1:3a:64:97:85:b9:79:21:78:d3:b6:0e:9e:c5:
43:7e:f0:26:af:01:85:7e:07:6d:e7:04:93:ca:31:
84:ce:d2:ae:45:e6:96:7c:cf:3d:c6:b5:dc:92:fe:
f3:9c:86:d8:24:38:ae:29:64:73:0c:06:b0:9c:1b:
67:16:2e:86:cc:af:25:a0:0a:1a:23:38:73:73:71:
48:e3:2a:77:ca:4e:fe:a6:2f:3a:bc:53:63:f3:6a:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:F3:47:29:F7:6E:88:B8:42:21:12:94:5C:48:8F:B6:28:74:73
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:b0:6e:fc:86:c8:1c:06:f6:68:f6:97:c4:d5:00:c1:69:25:
5c:57:55:1c:b8:b7:8f:0e:26:ca:e2:0d:00:51:d9:e6:7c:68:
4a:96:c2:19:b2:ee:28:c1:f7:0e:5f:e6:7d:76:bf:cb:11:fc:
8a:a8:77:0d:48:7e:74:0a:02:22:12:d3:ab:3e:63:25:55:f3:
4d:7b:07:5a:b9:b2:75:b1:b6:e2:c6:cb:db:ed:44:91:4d:82:
0b:2a:18:da:eb:04:d9:3d:9c:f7:af:b7:74:8c:e0:09:fb:eb:
90:d0:57:d4:50:19:bd:01:54:7b:c3:a2:cd:04:27:50:59:e7:
d1:f3:78:7d:cb:57:ec:4b:94:31:4e:32:bd:de:dc:79:14:9d:
94:80:f9:d0:3a:5a:32:a0:83:7e:12:12:35:03:ae:91:fb:5a:
7f:7b:d7:59:0f:21:81:3c:73:0a:a2:84:0e:37:b0:1d:3d:04:
18:c5:9d:47:2e:f8:be:78:80:e8:2c:b2:9c:5d:8d:45:b2:32:
bb:5c:33:a8:2e:46:24:72:ea:43:8b:a8:50:12:53:0e:79:e4:
3d:37:72:fc:c9:c7:dc:cc:d7:00:28:8b:60:8f:a1:28:3a:3a:
84:a1:8e:eb:eb:b1:a3:40:c1:f5:db:d4:42:c9:75:e5:21:11:
a6:f9:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:25:21 2026 by rpki-client