
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json)
Hash identifier: e3LdZUwCrIben328A4fNMjXA0YnHFJxgYIjjufqfW1I=
Subject key identifier: E7:B9:40:33:9A:78:2C:57:48:CC:4B:43:B7:DE:84:90:B3:10:AD:EC
Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40
Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
Certificate serial: 35AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
Manifest number: 359A
Signing time: Thu 08 Oct 2026 15:05:55 +0000
Manifest this update: Thu 08 Oct 2026 15:05:55 +0000
Manifest next update: Thu 15 Oct 2026 15:05:55 +0000
Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: +QWhiYe+gtLxlurRP53P3gBE1DWoVi7HiJRFNDbbijg=)
2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: OakXz6uabwbVjZ3x8angGynzmkwZsBIUc2kp6w+BN9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl
rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13741 (0x35ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
Validity
Not Before: Oct 8 15:05:55 2026 GMT
Not After : Oct 15 15:05:55 2026 GMT
Subject: CN=6ac7b153-2742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:c2:29:fd:dc:a4:a4:f5:08:39:4c:8a:26:
a8:ed:0a:d0:01:4d:39:85:76:7f:00:a7:d7:18:76:
5f:1c:96:1e:a4:0f:1f:57:eb:8a:37:3f:87:e0:73:
bc:14:46:ba:b7:3e:53:09:3d:8b:bd:87:c7:16:13:
2f:9a:37:32:81:3a:61:2f:1b:ea:f4:25:0d:04:a9:
35:db:b6:da:bb:92:5e:16:bd:66:58:3d:c8:7d:7b:
5b:10:4c:b8:f9:b3:95:d4:c0:9c:d1:56:f0:06:3a:
20:28:c4:7f:86:fc:b5:27:e2:7c:a0:78:12:18:f4:
5f:49:4d:5f:cf:ff:b7:ea:3d:80:d0:5c:86:be:73:
83:1f:69:5e:10:0c:5d:38:35:4c:34:17:cd:4f:8d:
3c:31:2e:a9:30:fe:20:f6:c6:f2:d5:1e:31:bb:67:
29:5f:8f:1b:ab:c8:9e:db:86:e2:18:1e:be:e6:60:
bc:0e:14:a9:49:de:ab:51:3c:a8:cf:66:56:f3:76:
af:1b:a5:2e:60:90:9c:c8:44:11:0f:3c:84:c8:45:
94:1b:5c:1e:51:d6:56:d7:61:e8:a9:cd:91:39:db:
45:ee:4e:7d:1c:ee:06:de:25:bd:d0:06:28:22:6b:
d1:e5:70:03:38:1a:52:44:f5:1f:de:da:d2:c3:79:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:40:33:9A:78:2C:57:48:CC:4B:43:B7:DE:84:90:B3:10:AD:EC
X509v3 Authority Key Identifier:
keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:9e:c9:83:28:11:d6:b5:f0:dc:8d:b1:1f:f7:0a:4f:eb:
4c:52:93:4e:dd:1e:26:c6:c6:34:55:3f:c5:c8:e4:c6:f4:09:
18:41:cc:5b:d7:ff:d0:e2:97:0a:87:dc:06:4a:94:07:f7:fe:
9b:2f:f5:03:b0:69:53:db:59:fb:59:b3:2c:a2:2a:f4:5b:61:
e5:30:0f:71:0e:14:77:51:7a:1f:4c:8e:b1:f6:f0:90:fd:36:
da:09:72:0e:3a:2c:e6:94:c6:e8:e1:19:1a:e0:20:d6:8c:d1:
33:40:13:61:c3:82:7a:ae:f7:dd:f6:34:91:3b:a7:7e:c9:98:
cd:5e:68:85:6c:70:30:3f:1e:6d:90:b9:04:aa:ab:57:cc:4d:
3e:dd:cc:71:4f:8c:7c:8f:64:82:bd:e5:3a:96:7b:90:dd:42:
9b:0d:7d:e9:d6:82:62:79:98:24:29:17:72:15:2f:16:27:14:
49:e1:6b:7c:46:7d:66:ec:c0:72:5f:3d:3f:bd:f0:6e:8b:08:
c8:83:48:cd:94:33:20:ac:10:4c:65:16:e6:47:e4:a9:87:13:
f7:f8:d6:f7:2e:96:f6:8e:b7:f5:a2:64:e0:7b:ea:62:88:7c:
d8:f4:82:70:ab:78:07:35:82:b0:2b:f3:27:89:45:15:4f:5d:
6d:10:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:48:43 2026 by rpki-client