
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json)
Hash identifier: qhBpyLj7xKDteZHJUzYWn44Lj5iznES29V9LK26dyIY=
Subject key identifier: E8:3C:8C:95:07:4D:30:82:9F:AB:3B:15:3B:5A:79:1F:41:4C:E8:5E
Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
Manifest number: 02B1
Signing time: Wed 19 Aug 2026 02:02:00 +0000
Manifest this update: Wed 19 Aug 2026 02:01:59 +0000
Manifest next update: Wed 26 Aug 2026 02:01:59 +0000
Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: IhMDMqYOVPMYSvvTAJXdkFy/D+AlGIPgCL4N/p5zrys=)
2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: 9AQPocMd2J6g2hv7Dkr/AUm1nWYER+gsBq8heFcxqIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE
Validity
Not Before: Aug 19 02:01:59 2026 GMT
Not After : Aug 26 02:01:59 2026 GMT
Subject: CN=6a850e98-2dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:e2:b5:a1:65:73:d3:41:8d:26:a9:3b:49:
94:97:ab:f3:95:ca:da:a4:41:3b:d3:5d:b9:bf:c4:
c4:43:5a:cd:5a:b1:7e:72:cb:a3:ff:4f:66:fe:d2:
ad:71:eb:c6:25:9e:2b:ab:f7:f7:24:d4:1d:42:c6:
ab:36:0b:d0:84:8f:f5:78:02:5c:02:0f:96:23:69:
66:1e:a3:2b:6b:d8:ab:dd:bc:8e:58:7c:ab:d8:ad:
9d:8a:c4:37:06:9c:e6:2b:fb:a6:4c:aa:6d:bc:80:
f6:e6:61:c4:85:45:57:bc:ba:ff:a9:8d:83:0a:69:
4f:2d:af:da:4f:f4:8a:0e:e5:38:5a:0c:40:53:54:
0e:06:d8:22:82:d2:d7:c8:48:72:fe:d9:23:3f:2c:
55:0d:e5:16:af:b7:34:f4:84:68:52:74:7c:0e:66:
10:77:52:0b:ff:de:45:37:75:13:a3:cd:84:7f:1c:
a7:83:f1:b7:c1:ef:8e:de:24:5c:5f:37:aa:8a:f8:
1b:99:fc:ce:66:26:46:d9:81:57:d4:f7:87:0d:e4:
b0:a5:5e:42:74:3d:35:b6:a2:3e:1f:98:f5:65:22:
f7:e3:26:04:bf:66:51:95:9e:25:a7:3a:e2:15:fa:
0e:18:b9:eb:ac:ed:c4:a1:a3:e7:27:f0:09:21:bc:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:8C:95:07:4D:30:82:9F:AB:3B:15:3B:5A:79:1F:41:4C:E8:5E
X509v3 Authority Key Identifier:
keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:a5:e3:46:fe:fc:4c:33:1c:ce:2d:dd:40:1f:ab:ed:2b:
bd:66:93:97:50:e1:4c:fa:20:b6:90:ae:5b:e0:80:92:48:f4:
bc:61:84:00:86:94:1f:d1:d2:13:28:ca:13:17:65:64:c2:45:
51:2d:90:d7:75:0a:b8:6a:45:ab:6b:7e:66:7d:2a:72:9e:7c:
df:02:95:93:1d:1e:97:76:a2:a9:34:d3:5e:d0:4c:1d:be:b2:
79:5a:fe:4b:1e:ee:14:c8:e0:44:38:10:64:39:8f:a2:fe:0b:
9b:14:e8:c5:03:0b:0f:44:85:99:68:a3:94:89:12:4d:62:48:
64:7b:d8:36:6c:bf:d7:2e:09:d0:0e:d6:77:b6:47:b6:d8:0c:
c7:8c:37:1b:b9:6e:3d:50:df:21:17:d7:8e:50:2e:4b:33:4d:
06:e1:a7:f9:0d:fd:3e:2b:b7:09:68:de:32:bf:73:0d:90:81:
74:2a:45:ed:ba:b0:37:cb:2e:73:3e:61:71:9b:dc:d5:77:6e:
1d:eb:7c:dc:13:b3:c7:65:24:fc:ff:97:ec:bd:3a:d5:e1:fd:
b0:b9:80:36:a0:64:77:11:8a:ae:20:41:bb:c9:cc:25:ef:3d:
a6:79:65:6d:fd:55:c3:d7:90:3e:29:40:26:19:b2:6e:dd:76:
e6:6c:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:59 2026 by rpki-client