
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier: 1dzo2zb3diihzaaxLh6D+VGtIHbEC+/nQd8tJcdKgqs=
Subject key identifier: 24:76:FA:17:E7:A4:17:3A:DB:BB:9F:24:FF:E1:37:14:5C:4A:5A:00
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number: 0126
Signing time: Thu 17 Sep 2026 06:02:45 +0000
Manifest this update: Thu 17 Sep 2026 06:02:44 +0000
Manifest next update: Thu 24 Sep 2026 06:02:44 +0000
Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: Tfu1UAAdSdRIEBytxuc4x13sjGHNyMoMNfGklmjJ20k=)
2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Validity
Not Before: Sep 17 06:02:44 2026 GMT
Not After : Sep 24 06:02:44 2026 GMT
Subject: CN=6aab8285-67bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:cf:a6:6b:50:44:33:97:3d:54:73:bc:d7:
c6:40:6c:43:44:ed:03:72:0f:57:ef:fa:da:a3:4c:
02:fa:3c:db:1e:02:2c:da:ed:0f:c0:04:f7:b5:a3:
60:6d:28:92:0a:7d:40:ca:03:af:f9:88:23:53:fb:
42:e3:0d:52:50:58:22:5b:06:4f:0b:57:2c:ec:d5:
44:32:80:9a:9b:2a:c1:d6:3a:1a:de:70:6b:72:3d:
63:84:8b:99:8d:6b:5b:b4:67:c9:29:c7:ee:77:09:
91:f8:51:7a:e0:a5:18:6f:58:2f:bd:f2:64:a6:e4:
c5:28:a8:a7:6b:70:f1:c1:e8:b6:d5:52:11:39:68:
70:2f:3b:b3:69:eb:e6:41:ad:a7:22:3f:5f:7b:06:
bc:75:b9:15:71:70:ad:68:c6:d6:db:02:55:99:f3:
cc:fb:9e:47:0b:1e:b9:8d:96:d4:fb:4e:99:1b:b0:
7c:6d:97:3b:32:82:f0:c7:a7:01:f8:2b:52:7f:05:
b1:cf:57:f7:af:1e:4c:36:6d:03:70:66:eb:ca:34:
2a:01:19:78:7d:ec:1b:5b:91:37:ef:08:7f:2e:42:
65:70:63:ac:d9:aa:6f:1c:4a:50:8d:fc:e6:f3:0e:
e3:7a:a5:22:3f:01:c8:87:a4:69:27:b9:ee:98:19:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:FA:17:E7:A4:17:3A:DB:BB:9F:24:FF:E1:37:14:5C:4A:5A:00
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:90:a5:74:df:43:88:79:1c:62:a8:9b:9e:dd:6e:58:4e:
f5:00:09:7f:36:d3:7d:7c:b0:9a:00:b0:e5:f3:bf:13:53:95:
ea:69:98:f7:3f:f3:04:21:3a:dc:dd:6c:5e:ab:74:f5:a7:ad:
76:4d:76:71:41:17:8f:eb:04:06:6d:d5:e8:26:da:da:ed:b3:
09:23:84:97:cb:cb:db:34:76:97:40:6d:39:bb:d2:8a:e7:19:
7d:03:cc:03:8e:f2:0d:d2:47:f5:51:2b:f7:06:90:66:83:2a:
59:21:11:29:8d:fc:87:12:74:f4:b1:be:80:4f:14:d5:6b:c5:
c3:1f:7f:ce:a8:a6:bb:a1:fc:0c:d0:61:2d:46:c9:ae:a1:f3:
89:48:c7:fe:24:50:7c:35:4d:c3:2a:a8:67:9f:17:85:0a:88:
ae:3c:8f:14:00:0d:08:0b:06:0b:ce:bb:01:34:f6:41:9e:3a:
55:53:0a:5c:15:f4:68:58:59:b6:8c:0e:2f:80:00:79:3a:f3:
f4:69:b0:ad:4e:38:85:9d:c0:df:90:13:a0:e5:93:b3:13:47:
b6:76:9a:6b:40:84:95:69:1f:bc:b9:b7:7e:5a:0f:5e:32:2e:
bb:b9:ab:b4:2f:2d:5c:66:ef:28:ab:e4:0a:c6:9b:a5:d2:75:
7f:2a:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:53:21 2026 by rpki-client