
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
File: ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft (raw, json)
Hash identifier: K7oO49w9bUEKd5MH0nqZeIi2ZcueQdPV7ins2ethmfQ=
Subject key identifier: 96:43:FE:A9:FD:B1:0D:0A:7A:32:92:EF:C6:8D:FB:F4:8F:46:EB:65
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial: 1165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
Manifest number: 1155
Signing time: Tue 18 Aug 2026 17:25:43 +0000
Manifest this update: Tue 18 Aug 2026 17:25:42 +0000
Manifest next update: Tue 25 Aug 2026 17:25:42 +0000
Files and hashes: 1: ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl (hash: Ejkzn2277kxQsvloQ3K+W6zLLWsMJJGSKJYtIQ87lrY=)
2: 39C6EF3688BF11EABC04973FC4F9AE02.roa (hash: 5ml9uPc8uMuL0GuHpS5bB1PAJRBicj+ravnTT1fBrO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4453 (0x1165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Validity
Not Before: Aug 18 17:25:42 2026 GMT
Not After : Aug 25 17:25:42 2026 GMT
Subject: CN=6a849597-ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:f8:dc:59:99:61:d5:1a:50:80:d2:35:95:
cc:09:db:cd:c7:58:48:66:0d:bc:65:0b:70:38:55:
f2:a5:93:a6:09:33:6f:2a:5a:96:f9:8e:e3:f0:7f:
bc:2d:5b:4f:ab:4c:14:ec:c9:38:a2:c8:b5:83:4d:
37:2f:20:e0:0b:ff:b1:01:97:6e:39:ec:f7:79:8e:
84:ae:41:9a:87:e8:a7:01:07:cc:32:90:08:16:69:
be:9e:b7:82:43:71:e0:9b:cb:46:dd:da:66:2d:b8:
52:f9:e3:25:6f:2f:43:85:86:6d:e4:01:76:30:e2:
a6:1f:b3:e9:a9:3b:72:87:ef:61:0d:db:49:c1:78:
16:b5:a2:db:19:7c:0b:12:43:60:ec:9e:0a:d1:16:
f8:0e:35:fd:4e:8b:be:f0:29:46:c3:1d:a8:3c:8b:
b5:5e:d7:50:e1:99:2d:6a:50:a4:46:b0:ec:93:cf:
7e:dc:7f:44:31:dd:0a:80:87:29:11:e7:c4:e7:21:
90:f0:b1:05:79:54:9f:bf:5f:f5:8a:e1:74:7c:26:
b8:f8:71:0d:5a:19:33:6d:a5:96:bf:5f:05:98:b6:
33:a4:2f:b7:68:a1:e8:44:18:28:22:44:c2:c5:4d:
b3:c2:9c:24:c6:da:6a:6e:87:9e:7d:3f:16:b8:25:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:FE:A9:FD:B1:0D:0A:7A:32:92:EF:C6:8D:FB:F4:8F:46:EB:65
X509v3 Authority Key Identifier:
keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9a:cc:e7:38:2c:57:b3:10:dc:cc:09:9e:4b:5f:d9:3a:50:
92:9d:e7:3e:1d:94:a7:7e:81:ad:27:e4:f2:85:d9:68:55:fc:
58:f1:5c:d8:c6:e9:62:0d:a6:40:56:79:10:c1:59:e9:dc:6a:
e6:c6:fd:a5:86:98:18:c7:03:7d:ac:e3:0e:2c:89:b4:e9:af:
86:42:e5:e0:ff:2d:22:c2:2b:a2:80:b3:68:4e:00:47:ea:41:
4b:94:7d:48:f5:ac:e9:61:e7:04:6b:45:70:40:70:d6:5d:be:
72:92:00:5a:0a:b8:0f:4e:3c:50:15:b2:e9:81:aa:12:99:27:
e0:f2:9d:1f:68:47:b9:6a:ad:2e:aa:2a:84:6b:7c:03:b5:42:
a8:79:c4:93:6f:ac:20:b2:27:82:50:37:cc:9e:03:0f:91:10:
f9:fe:87:ea:3b:8c:c6:27:c7:28:d8:0d:2e:dc:84:b5:c9:9a:
ee:cb:c1:dc:ff:92:55:a0:53:fd:f8:06:d9:5d:17:d2:dc:19:
cb:eb:21:fd:9d:05:04:fb:b4:60:fe:32:0d:4c:9c:90:a6:45:
77:c2:cd:a1:82:49:11:64:2a:60:21:37:0c:97:3d:88:e3:d5:
40:96:3a:c6:1c:ad:2c:a2:54:9c:0f:2e:1c:bd:1b:46:95:cf:
f2:15:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:17 2026 by rpki-client