
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier: GbRwVVYufpTb7SJ3xhRvKEfs0NBVfXCqXik68Pub+F8=
Subject key identifier: 74:41:71:2D:77:30:6D:0D:55:59:CE:F7:C4:50:A0:81:A2:25:38:71
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer: /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number: A6
Signing time: Sun 11 Oct 2026 07:46:58 +0000
Manifest this update: Sun 11 Oct 2026 07:46:57 +0000
Manifest next update: Sun 18 Oct 2026 07:46:57 +0000
Files and hashes: 1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: 2HP60Zg2Z+Uuxx5IsfBhpHnqm4wIXNZ3Aqek2mwOZxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Validity
Not Before: Oct 11 07:46:57 2026 GMT
Not After : Oct 18 07:46:57 2026 GMT
Subject: CN=6acb3ef2-e916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:8d:5b:e5:ba:01:c5:29:19:b3:bc:17:b5:
ca:03:82:4b:df:5b:58:71:27:ca:13:c4:3a:44:5c:
60:7b:ab:ff:ff:ef:3d:e0:03:30:52:1c:a6:e0:a0:
91:7c:b4:33:0f:62:e8:fc:2e:45:6a:00:c1:7e:cc:
17:d4:cc:69:2c:a3:57:81:a9:24:2d:7e:fe:46:2c:
6b:80:dd:8e:14:55:7b:18:bb:f2:6f:45:4d:e0:c4:
ef:d7:16:1f:f6:4e:ee:4e:70:e4:42:a8:75:82:09:
84:83:1e:83:2d:14:5a:4b:51:90:30:8a:fb:5f:ae:
26:e6:47:d4:5f:53:d7:d5:7d:d9:0c:b9:97:cb:dc:
44:68:4b:47:fa:05:f6:bc:64:b7:e9:96:a8:61:f7:
2f:9d:5b:19:c8:79:cb:57:61:92:59:5f:3a:52:c2:
a5:f4:f5:c8:46:ad:c5:b4:e0:7c:27:81:44:99:ee:
71:95:12:2d:f6:d3:db:2a:fd:00:a8:51:d4:2f:90:
d7:5e:d5:75:7c:26:eb:21:ac:c4:06:39:4c:00:7b:
6c:e1:c6:02:01:c3:04:f9:b3:00:e7:71:95:2e:9f:
65:91:de:3d:d4:a4:b6:15:ee:ed:49:e1:bc:84:00:
d1:f6:91:12:45:b5:26:62:80:f3:62:b7:ae:43:aa:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:71:2D:77:30:6D:0D:55:59:CE:F7:C4:50:A0:81:A2:25:38:71
X509v3 Authority Key Identifier:
keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:73:41:ee:63:8d:29:39:6c:1d:1a:3f:fa:16:13:41:20:08:
18:25:4b:4a:fe:36:1c:ea:ca:51:c0:05:4c:4e:a5:b2:71:b6:
bf:d9:a3:23:dc:4f:e6:b9:30:23:1a:df:32:71:5c:36:34:6b:
fd:6e:f9:19:bc:57:19:b6:77:a8:be:39:45:9e:3a:5d:90:cd:
b6:50:c2:b5:b0:f6:4b:b8:d3:e4:67:9d:7c:53:cd:d0:85:bf:
56:ff:da:95:8f:59:bb:02:0a:80:51:ff:4f:d7:fe:fb:a3:87:
e4:e3:79:cf:13:7d:af:8f:b8:e1:55:56:70:b5:bc:35:68:ce:
f7:b0:84:99:ec:88:e4:57:65:4b:82:c8:12:d6:22:60:19:d8:
5e:e3:db:f7:e4:b8:a9:22:ff:03:c9:a3:27:e9:f1:60:2b:1f:
d8:2f:d5:3a:57:13:9b:39:ab:c4:ff:93:42:4b:15:11:56:27:
1b:db:4c:0f:c8:71:02:ac:88:54:32:db:98:1f:b9:93:30:b0:
dd:f7:a9:f4:ad:e9:91:5c:c9:84:5f:19:cf:66:36:01:88:ca:
94:bf:67:9a:63:67:ea:fa:ee:92:92:b0:28:90:da:4e:76:47:
69:ef:d1:bb:31:f8:35:0f:91:4a:40:d4:96:7e:3d:67:e9:03:
9e:15:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:20:19 2026 by rpki-client