
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
File: -D5VvcZ7iLBYj5Yplze0oce1u3o.mft (raw, json)
Hash identifier: rG+s1n/mLTNNkmoHUrnHI4X3LVCbx630mejHAWcKvXU=
Subject key identifier: D1:2B:B5:06:E3:FE:F5:BD:E9:86:87:11:0B:B0:13:22:61:6F:93:C4
Authority key identifier: F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A
Certificate issuer: /CN=A9134ACE/serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
Manifest number: 23
Signing time: Wed 19 Aug 2026 09:29:26 +0000
Manifest this update: Wed 19 Aug 2026 09:29:26 +0000
Manifest next update: Wed 26 Aug 2026 09:29:26 +0000
Files and hashes: 1: -D5VvcZ7iLBYj5Yplze0oce1u3o.crl (hash: 1PgCLKdLOKvbOQB2tMQ1HZJrrNc4ETPhaqLpt+Aqv9M=)
2: 289627426EC111F198F60F1C67A30FBC.roa (hash: uxG9NYEWiWnvCGI2UhFJaVgVq808jt/a6Bx2/OzeOec=)
3: 29CA3D926EC111F198F60F1C67A30FBC.roa (hash: PgVXYKG5QBRfwHOvukm3uo5F96YGB/Dd8aZakX2oSl8=)
4: 55C241CA6F6511F1B4C954875DA30FBC.roa (hash: 5dBmRYYWI0L5PUh0/9O11W0jeEUK5EK4hYrRoUKe5IA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl
rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134ACE, serialNumber=F83E55BDC67B88B0588F96299737B4A1C7B5BB7A
Validity
Not Before: Aug 19 09:29:26 2026 GMT
Not After : Aug 26 09:29:26 2026 GMT
Subject: CN=6a857776-a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:6d:b3:1d:f1:fb:3b:7e:5b:01:b3:a8:3c:
4c:45:a0:d4:05:08:a3:7e:da:6c:ac:fa:97:08:3d:
ad:0f:35:65:ac:c7:a5:88:20:4c:ed:75:72:ec:b6:
c3:b6:6a:ad:e0:b1:58:29:ad:7a:e4:e7:99:17:f8:
bd:2e:9b:e6:2f:6a:02:8e:6e:5b:60:61:a6:38:ae:
7b:cd:0d:e1:a2:47:bc:54:16:bb:4d:a1:92:be:5e:
03:53:97:e0:63:4f:de:95:58:ca:1d:ce:f8:a8:a5:
d4:cf:40:f2:eb:95:bc:af:4c:21:36:4e:8c:e3:57:
93:14:37:13:3e:29:77:d9:b4:1a:48:a0:73:d1:71:
02:bf:a0:0b:59:7a:8e:a7:9e:8c:22:a1:a3:32:85:
84:44:45:c1:9c:e8:15:2d:4b:2f:e7:88:ab:fb:85:
ca:74:e3:10:4c:b1:31:60:2c:1a:d6:f2:c0:37:30:
a7:1d:42:a5:fb:af:a1:0e:0c:e5:63:d9:9f:0a:4c:
21:8d:3c:a0:1c:25:06:7e:3f:50:d1:24:43:d4:5f:
44:39:b0:31:4c:b9:10:40:7d:6a:20:bd:98:55:fc:
03:ef:21:31:c1:03:43:65:ff:62:81:66:b8:b4:40:
48:c2:ee:5a:40:8a:50:aa:0b:d1:1b:32:77:16:10:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:B5:06:E3:FE:F5:BD:E9:86:87:11:0B:B0:13:22:61:6F:93:C4
X509v3 Authority Key Identifier:
keyid:F8:3E:55:BD:C6:7B:88:B0:58:8F:96:29:97:37:B4:A1:C7:B5:BB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D5VvcZ7iLBYj5Yplze0oce1u3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/2F48483E6BA311F185DB485C7047A888/-D5VvcZ7iLBYj5Yplze0oce1u3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b1:ad:80:2d:de:9b:e6:ad:0e:d4:f0:57:98:46:f0:b0:36:
1b:85:30:20:62:bb:f8:f2:85:2d:b8:61:0e:64:07:75:3e:3b:
a9:c9:78:3c:f8:71:ba:03:ef:93:68:a6:f9:70:ab:4a:50:a6:
5f:a8:6e:63:86:5d:a7:ea:c5:bf:af:ea:0c:f0:23:a5:48:90:
21:eb:6d:1a:b0:4e:11:eb:95:e0:e0:f4:c8:6d:ce:fc:11:1b:
27:cf:4c:7c:39:85:ee:dc:e1:ba:d3:21:08:e0:75:8e:99:bc:
d3:b9:ba:27:a3:86:b8:d7:4a:57:6c:c6:5e:73:03:1a:7d:27:
53:2d:f0:f8:be:e5:c8:67:7c:40:d2:eb:8d:54:db:de:24:03:
9b:9c:f9:00:62:20:ac:59:21:d2:38:d0:42:a6:10:90:bf:43:
ed:24:a6:4c:b0:d7:34:59:77:7a:63:22:7d:18:66:25:81:9b:
4b:24:ea:46:77:66:31:01:5e:b9:4b:f0:0a:8c:d3:de:d2:5a:
14:96:86:0e:25:86:e2:c9:2d:df:ca:20:0a:84:a1:40:4b:66:
b2:20:fe:13:bc:2e:59:ff:94:af:20:fc:10:c4:7f:c6:15:fc:
92:6a:99:09:18:7a:4b:c8:c3:99:f6:35:1b:9b:f1:e8:a7:b4:
0e:71:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:48 2026 by rpki-client