
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: oMdfXxDthNS1tb4ISnjcuh5L0cckgRNoLcdQMfC8bLU=
Subject key identifier: 5C:54:E9:BE:B4:F3:8C:68:4B:65:F5:08:57:76:E1:60:BF:45:24:44
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 072E
Signing time: Sat 24 Oct 2026 22:02:29 +0000
Manifest this update: Sat 24 Oct 2026 22:02:28 +0000
Manifest next update: Sat 31 Oct 2026 22:02:28 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: fOC7pljkNuQdwHuyN7gCZIo4H8oG/xQ2Iw5OEX88cUc=)
2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Oct 24 22:02:28 2026 GMT
Not After : Oct 31 22:02:28 2026 GMT
Subject: CN=6add2af5-f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:1c:46:f0:8f:f2:be:9a:73:c0:f1:9c:fc:
48:e5:4f:e6:36:4d:29:ad:7b:67:59:fa:c1:54:e7:
43:fb:09:52:f5:d2:d9:20:aa:e4:21:77:05:da:d1:
5e:2f:23:d5:63:1c:de:d1:07:82:1a:8f:27:09:ad:
77:89:ad:5d:dd:71:cc:49:53:37:3c:ce:53:54:de:
5a:d5:06:1d:d2:5b:07:e2:15:58:a9:8b:b3:25:79:
71:20:7b:59:e5:df:88:da:33:f0:89:45:e7:80:00:
b8:05:51:ae:4a:b9:7c:2c:cb:c6:56:58:5b:ca:75:
ba:4f:d2:c4:2c:6d:6e:79:ac:9c:63:52:8e:db:70:
0b:db:f1:16:46:13:8d:5a:ba:df:99:40:0f:48:79:
a6:10:4d:b8:04:86:6f:9a:89:d2:0f:ae:1d:44:10:
2d:a7:00:ae:b6:ab:c1:21:21:9b:19:39:7b:fb:05:
23:f9:3a:7c:c1:a8:59:80:81:79:ea:03:8f:d2:6f:
78:58:14:b9:78:16:19:23:3b:a0:85:50:53:ee:44:
f5:00:cc:88:d2:48:4c:da:14:39:14:d7:24:e2:04:
11:10:21:1f:ef:e9:a3:11:3d:d9:93:ac:77:b7:61:
bd:c0:12:14:b2:8b:b7:52:be:2f:9b:b2:25:b6:7a:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:E9:BE:B4:F3:8C:68:4B:65:F5:08:57:76:E1:60:BF:45:24:44
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:76:49:44:46:82:33:77:07:d9:f8:cf:c2:42:6d:b0:1f:32:
43:e9:0e:9e:f7:20:f7:3f:02:ff:4e:66:e8:c1:9d:9e:3b:e6:
f8:c3:5a:01:28:1a:d4:73:4f:ff:39:59:05:91:54:b5:1e:e0:
13:b8:c7:3a:f7:84:3e:69:f6:52:17:d8:83:9e:5e:f8:3b:25:
4d:3c:3e:29:ff:4b:e6:32:f3:14:e8:ea:6e:2c:20:95:a9:e8:
48:0d:0b:6b:43:87:d8:cf:2e:6e:00:a0:19:fc:52:8a:09:b6:
6f:8c:4d:43:14:fe:24:ad:84:bf:10:65:88:b5:2f:fe:40:45:
45:47:c6:aa:de:3d:b0:11:b8:b1:10:c6:7e:62:d7:81:cc:2a:
0a:a5:b3:d8:31:41:4c:9a:ff:7a:6c:5f:77:81:59:0e:42:06:
c2:38:01:59:2a:12:ac:b8:72:92:87:bc:55:b3:65:53:3d:c9:
d6:93:01:33:1e:8a:8b:0f:28:81:38:35:c9:29:13:f3:a4:0b:
21:95:15:51:d4:4b:34:33:4f:2b:2d:5e:df:75:e2:ad:6e:56:
c5:67:89:66:90:f0:54:1e:75:d9:b4:17:98:b4:3a:4e:e3:08:
63:49:b0:ba:1a:8b:5d:c2:87:49:3f:7a:99:cd:a3:43:c3:66:
80:20:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:33:15 2026 by rpki-client