
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier: AfJ5nItCktcLIJu33gIViHHJnjHbUhPloCmnvV/+ci0=
Subject key identifier: 54:99:52:6B:04:63:4F:96:28:35:F1:3F:9A:D0:88:3A:06:98:1B:45
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number: 02C5
Signing time: Mon 05 Oct 2026 01:47:05 +0000
Manifest this update: Mon 05 Oct 2026 01:47:04 +0000
Manifest next update: Mon 12 Oct 2026 01:47:04 +0000
Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: 0OSVPeawwkEJaHXMoLLk2Kqo9sGMYUlTv/QCAzHYAmE=)
2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Validity
Not Before: Oct 5 01:47:04 2026 GMT
Not After : Oct 12 01:47:04 2026 GMT
Subject: CN=6ac30198-3145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:4a:6d:aa:67:47:0a:fb:41:5c:9e:6b:6e:
75:f5:9b:26:a7:5e:7a:68:49:9e:37:3e:6b:24:d1:
33:8b:f3:fc:7f:27:18:cf:05:76:cb:50:cd:3a:81:
56:61:d0:b0:72:7d:ca:36:0d:7e:90:fb:20:e5:d9:
bb:1c:97:6a:01:75:31:24:6e:d8:77:a3:b4:71:e7:
1f:a2:0d:8c:11:ca:40:3c:df:a3:64:b6:77:37:24:
ed:97:38:02:ba:6e:0a:38:83:10:3c:37:3d:91:83:
dd:81:b4:4f:f8:8c:31:c4:e9:e2:d5:c5:15:a9:07:
41:7b:00:09:17:35:ab:37:ad:71:cb:e6:72:b7:81:
b1:48:ae:73:35:df:f6:31:96:f6:6d:4e:2b:ea:2a:
5a:c3:8a:45:4e:23:05:41:cf:de:36:11:4e:89:7b:
ee:cd:38:bb:9b:25:6f:43:86:03:ea:1b:5b:83:cf:
1d:f5:7f:66:a9:52:94:2e:dd:b4:b6:31:b7:45:b0:
84:c4:c7:12:4c:d5:3d:e4:c6:a7:06:13:ce:44:21:
7d:47:ff:01:a2:fb:d8:ab:38:99:d1:f3:c1:cc:91:
5c:60:28:e5:9f:4c:16:36:b4:43:09:7b:b1:7c:e5:
0d:be:18:39:48:61:e3:cc:cb:b5:38:41:65:e7:43:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:52:6B:04:63:4F:96:28:35:F1:3F:9A:D0:88:3A:06:98:1B:45
X509v3 Authority Key Identifier:
keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:6a:7e:cb:ac:01:93:6b:7a:1c:79:6d:29:4c:d0:64:0d:b6:
36:32:3a:da:80:bc:1c:66:f8:4f:7f:d5:d4:a2:a0:75:cb:f9:
67:18:e3:87:b2:3b:2a:2e:cf:cf:a2:86:ce:e7:68:12:88:6d:
9a:e5:ab:dd:dd:f6:96:41:e3:1a:8e:9a:50:36:fa:10:ac:0e:
09:a6:c5:eb:cc:c5:2e:7a:35:fd:03:8e:94:69:8c:8c:ed:f7:
ae:56:57:8b:7b:28:5a:8b:d7:67:6a:90:c9:1f:1c:3c:46:f0:
25:21:a0:eb:54:da:0a:29:be:f8:95:73:05:df:83:d9:bc:87:
00:fa:fc:db:c4:e7:7e:c1:12:ae:6f:50:56:b2:7d:7d:cb:ef:
d5:85:e8:2d:d0:bf:c0:6b:8c:92:85:d6:c9:96:4b:9f:7d:9d:
18:7d:3a:76:93:69:ae:7b:13:1d:fb:53:b0:af:7d:4d:29:b8:
8f:e9:1d:da:d1:11:e3:31:be:22:4a:e1:46:c7:73:84:f1:a4:
82:b0:79:af:f5:de:b0:10:8f:20:3d:0a:03:52:38:00:5a:3a:
89:e0:1f:3a:5a:4e:4c:57:1e:fc:01:b4:12:01:28:9f:da:90:
f7:5a:d4:2a:e8:09:05:16:b9:61:13:b5:67:bd:1b:35:fd:13:
eb:5f:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:36:52 2026 by rpki-client