
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
File: RnF4Q-fTSLOez3uSSVUB_jVQujw.mft (raw, json)
Hash identifier: wGvtG4D8qPLeF7uKcbEf31FSZk14adl/IqON3l3U0eA=
Subject key identifier: 93:5D:9B:13:F9:42:A3:BB:C8:11:D2:48:97:9A:A8:74:3E:EC:CD:A9
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Certificate issuer: /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
Manifest number: 42
Signing time: Mon 05 Oct 2026 08:55:18 +0000
Manifest this update: Mon 05 Oct 2026 08:55:18 +0000
Manifest next update: Mon 12 Oct 2026 08:55:18 +0000
Files and hashes: 1: RnF4Q-fTSLOez3uSSVUB_jVQujw.crl (hash: VcubDEIlG3UfGOL2C+SDIQYolVnhFEjsKKjvF7U4IHg=)
2: 27B6241C6EC111F198F60F1C67A30FBC.roa (hash: 1vqnDMCOkfAA0RhjR6F0sutamrJDfPdesHktqXu9g8s=)
3: 270496C06EC111F198F60F1C67A30FBC.roa (hash: JtKOBE4F8rwYsWTEwFLdbKDrbkNvr+908F7G3Dfu+ec=)
4: 0B73271E6BAB11F1817F09047447A888.roa (hash: xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=)
5: 83C1CE04704D11F1AE17E0CA6AA30FBC.roa (hash: +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=)
6: g8XYHoulscOdIzPLr2d3D2E_Iq4.asa (hash: xRoqthOZmfDfJDQzpKsFdbAkLfGrB9YrhCDM68yWLys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Validity
Not Before: Oct 5 08:55:18 2026 GMT
Not After : Oct 12 08:55:18 2026 GMT
Subject: CN=6ac365f6-e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:0b:7c:63:3b:02:3e:93:c9:aa:f9:e5:cd:
9b:cb:15:4b:57:e6:40:c2:68:7d:61:34:4a:95:b2:
60:b1:35:04:18:55:e8:ac:e4:04:04:29:e1:a0:65:
1c:fa:3f:11:b6:84:99:5f:db:d6:6f:9f:15:b7:f6:
d9:32:39:33:dc:64:f9:02:c7:ba:ff:00:44:e8:37:
a0:f5:f0:d5:cd:ea:77:32:d8:6f:69:f6:dc:b6:92:
61:33:bb:4f:8f:8a:ce:84:c3:48:56:e2:9d:32:ef:
a1:52:24:4c:e4:b1:36:b3:60:77:51:17:ae:54:ac:
0a:f9:ec:80:35:2f:75:76:02:d4:35:46:1a:47:ae:
1e:89:ea:84:81:f6:7f:b5:f4:2b:0a:96:4a:14:db:
2c:7a:da:d9:d8:0d:75:d3:57:f4:4a:f4:0d:35:20:
a3:83:a2:a4:24:d2:37:d0:9a:c5:a5:77:31:6c:f4:
f4:04:d4:0f:3d:00:d5:a1:43:c6:5c:ba:4c:0b:57:
71:7c:e1:1e:d3:fc:7b:71:df:ce:a9:c9:2b:4a:54:
d0:c5:df:da:cd:d0:aa:f4:79:94:25:91:95:03:ec:
b4:b8:cb:1e:d2:1c:35:e4:4e:a9:6e:81:99:e3:db:
2a:f4:79:8c:2c:f2:ad:31:01:46:b7:a2:14:e9:13:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:9B:13:F9:42:A3:BB:C8:11:D2:48:97:9A:A8:74:3E:EC:CD:A9
X509v3 Authority Key Identifier:
keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:54:ea:c5:9e:81:d0:24:6f:dc:ad:f1:91:f5:95:9a:d1:5e:
4d:74:37:96:0b:cd:09:ad:fc:a1:f2:27:30:40:b8:7c:c3:11:
1b:4d:74:63:3e:b2:be:c1:13:35:d9:0a:39:3d:6c:2a:0d:4d:
2e:fc:53:f3:e5:e3:53:e0:75:c3:1a:bf:91:e3:bd:70:71:53:
73:88:66:56:f0:7a:b4:57:75:b2:ab:53:d3:4b:33:4d:ea:7c:
34:c8:b1:a6:19:97:d0:c0:f1:ef:b1:26:dd:1d:57:96:c5:3f:
e0:1f:c2:f4:13:72:50:69:b0:be:30:c8:aa:bd:78:30:d5:44:
fb:b3:87:bf:3b:5f:59:54:e8:b5:60:cb:74:b9:7e:a8:f2:80:
e9:2e:97:f9:19:3b:d4:19:db:dd:d0:3b:75:47:94:9f:d7:37:
d7:9a:61:c8:d5:59:13:a0:63:44:b1:d6:e3:42:c4:c1:05:94:
13:88:a8:64:55:4a:d8:35:0d:84:e4:b8:12:2e:b5:79:b0:0c:
5d:2b:c7:eb:57:9c:54:8c:4a:d0:de:75:52:38:60:38:66:77:
34:cd:53:fe:b8:b9:f9:99:40:4c:20:d8:2b:d9:e7:9b:24:2b:
4a:6f:47:c8:2f:4c:71:c1:ec:51:c2:f2:88:59:86:24:7e:7f:
81:d8:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:28:13 2026 by rpki-client