
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier: Ip86f2Jo9KBHLaKObnvaMqMTCXM05NFeA7ZO96JeeGU=
Subject key identifier: AD:5D:C6:2D:07:EE:1C:F8:61:D4:D3:F8:6C:AF:4A:B6:1A:FA:4E:6B
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer: /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number: 95
Signing time: Wed 21 Oct 2026 08:02:52 +0000
Manifest this update: Wed 21 Oct 2026 08:02:52 +0000
Manifest next update: Wed 28 Oct 2026 08:02:52 +0000
Files and hashes: 1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: gOrs+U/16jQrfJQBu4qH1r/9EFUU7y2peQaJjjcjOco=)
2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: iKMOZndSspUWn/Q2dD9wJzioM8CavlEGjQksPJ9SKPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Validity
Not Before: Oct 21 08:02:52 2026 GMT
Not After : Oct 28 08:02:52 2026 GMT
Subject: CN=6ad871ac-ec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:1a:47:40:c2:33:35:d4:f1:15:df:62:5c:
92:e3:36:cd:fb:1e:85:95:95:04:7e:70:11:a5:96:
f7:09:5a:d7:d2:ed:a5:a9:2d:13:ff:23:a0:99:97:
ab:b5:44:cc:c0:a3:fd:66:c4:aa:1e:b5:e8:34:c9:
2f:e4:50:78:3e:53:b2:da:82:01:55:2f:57:f9:d7:
ba:34:36:f4:27:2e:26:ad:02:cd:34:d1:f8:74:1b:
aa:db:b9:e4:66:ea:e4:e2:e6:28:fd:5f:d6:de:cf:
da:11:16:0a:1e:2a:c1:d1:fe:b3:49:47:54:15:75:
33:2a:da:6f:19:5f:8c:46:13:2c:34:82:0d:c1:12:
64:1b:af:48:34:86:15:8f:09:4d:1d:e2:ef:59:ab:
eb:9c:7d:fb:5f:67:c4:2c:c7:f5:64:e5:3a:e4:3a:
6a:09:6e:7c:ff:c1:55:14:b6:0a:1d:93:8d:b0:2c:
8d:41:6e:ac:01:51:f6:70:d0:56:a4:fa:9d:c3:bd:
25:7f:80:a3:65:2b:57:6f:25:d8:b0:9e:2d:58:d2:
3a:f1:05:64:1e:cd:ec:55:8b:64:f9:83:18:d8:2e:
1b:15:fb:c5:3c:79:b0:e0:62:4c:5c:e8:9e:57:37:
50:8f:da:14:21:12:34:63:67:35:d5:7b:40:40:a8:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:C6:2D:07:EE:1C:F8:61:D4:D3:F8:6C:AF:4A:B6:1A:FA:4E:6B
X509v3 Authority Key Identifier:
keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:91:80:a6:1b:34:f9:53:d5:4e:8f:f3:86:04:d2:53:52:
80:36:1e:bf:87:92:fe:36:b5:61:3e:1f:a6:75:42:ee:f0:de:
cd:d4:eb:c6:16:0c:7d:08:15:61:52:75:a0:57:23:6f:31:35:
fc:b1:6e:21:a7:4f:7c:e7:48:63:bc:69:4e:0a:ae:b7:5d:f0:
96:1b:11:c6:09:2d:e7:f2:60:85:3e:86:e6:20:9b:55:42:40:
35:a2:c3:5b:4a:d8:67:6d:f6:c0:25:cc:45:62:a7:44:ae:1e:
43:67:bd:7b:51:de:14:71:d2:7a:9f:d7:9b:ad:6e:e0:45:29:
83:5f:41:a5:4f:99:49:03:dc:7c:31:45:c1:04:76:38:08:12:
91:4f:79:2e:06:49:00:41:b3:a6:aa:f8:37:1e:97:fa:34:97:
e1:5f:dd:08:82:de:72:b3:b8:fe:cc:c1:0e:bb:93:d0:8b:77:
8b:1a:f5:9e:32:67:02:ad:37:17:78:4d:ed:b1:97:f1:7a:d3:
66:95:b5:0d:db:36:3b:ce:ed:ad:cb:78:ff:cc:1f:78:98:44:
35:7b:b0:84:5e:42:66:6a:6f:34:32:0a:0b:39:c9:3d:df:9f:
9e:f4:a1:a2:0f:af:d3:5f:59:eb:41:90:68:aa:3f:ba:67:2f:
e0:f7:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:05 2026 by rpki-client