
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier: d1j47KrcigZYAxldR6wV2ngqHsqJD0BapvqCYeUIOp0=
Subject key identifier: 6A:01:58:21:7E:41:1A:16:CA:C6:26:AB:5E:52:BA:5F:DE:38:3E:BC
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number: 0312
Signing time: Sun 01 Nov 2026 01:39:14 +0000
Manifest this update: Sun 01 Nov 2026 01:39:13 +0000
Manifest next update: Sun 08 Nov 2026 01:39:13 +0000
Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: ZbrkZg73rfyANapTQMmNngAYd7eOnIh7KD66Jx2ZyL8=)
2: ED55D842ADB111F08582AD1BC4F9AE02.roa (hash: BI3W9ParKbhyv7S1vIIqd/WI+P8QtB13X8Ywdyld8Uo=)
3: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (hash: Kmmib4eKr40Y/rm0EWnrMCFbhUXjH4eSe4eiZ3kgGwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 01:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Nov 1 01:39:13 2026 GMT
Not After : Nov 8 01:39:13 2026 GMT
Subject: CN=6ae69841-f2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:b7:7f:92:ab:b1:86:a7:52:41:a8:96:5e:
23:48:fa:0f:0c:ff:e0:ea:58:57:3f:d8:72:33:83:
ff:03:d5:83:d2:64:72:db:18:0c:69:35:7e:ad:d9:
e4:8a:09:6b:c8:2f:57:a6:7b:16:89:33:61:a6:e1:
f2:04:bd:a5:16:b7:32:11:b7:ad:98:f6:bf:74:32:
35:c0:f1:eb:93:36:88:e1:31:6d:60:13:36:58:59:
71:9e:0c:89:60:89:45:dd:03:b7:20:c3:d5:62:83:
1c:34:48:a7:5a:e6:32:5a:d6:8f:9c:b3:84:2a:2d:
91:7d:f4:a2:fa:5a:61:62:8d:03:ca:44:e7:56:f9:
01:ce:5b:ce:23:7c:4c:50:f5:62:4a:73:7b:86:18:
04:e4:25:f3:60:dd:17:9b:70:cf:de:89:ae:16:0d:
92:d0:19:b2:c8:f6:77:9c:10:33:bf:35:25:91:a9:
9a:48:35:a6:c5:1b:69:97:68:1c:6a:4e:d6:b8:d4:
72:fa:eb:38:ca:63:99:3e:e7:72:f6:41:91:7e:34:
ea:e5:78:4a:9d:6e:59:23:58:06:2a:19:70:d3:37:
d4:e3:d0:5a:6f:37:d9:ad:c8:9f:f2:68:17:12:dd:
28:d6:e1:a2:18:a3:c3:f3:ea:4a:ea:ef:be:12:74:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:58:21:7E:41:1A:16:CA:C6:26:AB:5E:52:BA:5F:DE:38:3E:BC
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9c:e0:4a:d5:17:f3:95:d2:29:4f:cf:8d:8e:38:34:07:ee:
1f:6b:41:92:c0:bf:fc:cb:8f:9e:28:93:68:07:a7:e0:f6:4d:
4f:72:69:9f:1d:c6:b4:48:63:80:91:de:97:e4:6b:bd:5e:71:
35:0d:e1:4f:d9:18:98:2c:82:80:a8:c5:d6:e4:92:98:9e:5f:
16:f9:47:a6:df:5f:27:79:19:6a:6d:51:bf:21:e6:9e:42:13:
84:96:7b:86:2e:15:8e:7e:5d:96:74:7c:1b:22:57:96:09:da:
e9:21:c1:73:a2:3f:95:f5:bb:a3:a6:ef:49:98:4e:61:f5:39:
bd:f1:de:9e:fd:7f:8e:71:f7:2c:ba:49:7b:5a:64:cb:7c:b0:
14:a2:33:0c:be:70:d2:77:e0:a0:2c:09:61:75:19:a0:72:f8:
ac:5c:da:86:d7:df:64:04:68:a0:d1:6d:56:f9:3f:aa:0d:c9:
c2:60:a3:0b:e1:7f:f6:ec:4e:82:b4:cb:ea:7f:66:89:3e:0b:
b0:ff:5a:19:57:01:cd:91:64:f3:b0:c9:98:22:3c:08:71:20:
59:13:2f:99:f4:2e:2c:0d:6e:bd:d2:9b:72:46:e7:79:fe:9a:
de:1f:a3:a2:4c:ad:a1:de:73:53:db:48:f7:ce:28:b9:f8:20:
14:47:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 20:54:40 2026 by rpki-client