
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
File: IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json)
Hash identifier: 0ShEaP+u3u2/ViDWXW5plfdZLdAYEZvfJ2PCez6SUf8=
Subject key identifier: 4F:40:9A:AF:BD:E9:24:40:F7:40:1D:75:9E:7E:8A:93:19:47:E9:CC
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Certificate issuer: /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
Manifest number: 02A8
Signing time: Fri 11 Sep 2026 01:37:27 +0000
Manifest this update: Fri 11 Sep 2026 01:37:26 +0000
Manifest next update: Fri 18 Sep 2026 01:37:26 +0000
Files and hashes: 1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: PEA/c4naN6q2GEMzDy9V4psXc4TZ7tBXaBZ/OcTCBzg=)
2: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: ldsVU3+f9Ys8c9jjGtZsorbtRuuuB7CFx692x5DpYKg=)
3: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: QBNiuWqsSFvTii1XjINxNAIsFqpiHDWIk0XlWF5qx7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Validity
Not Before: Sep 11 01:37:26 2026 GMT
Not After : Sep 18 01:37:26 2026 GMT
Subject: CN=6aa35b56-03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:19:ee:26:71:af:99:af:60:e6:7a:52:31:
2c:bf:c7:2e:8e:95:60:54:b6:66:d8:fc:0e:18:e5:
6c:f9:c9:0e:fb:40:34:3b:be:f1:5f:de:c3:30:85:
02:84:bf:49:60:5c:d8:9c:02:71:8d:d5:f3:20:9a:
76:e6:90:e4:3b:6c:df:8c:4c:ce:4c:dc:8f:d0:35:
ef:f1:59:23:41:4b:0e:ed:b6:70:6b:82:24:7a:3f:
d9:f8:0a:b6:38:15:73:d0:26:a4:d9:77:cd:a6:34:
9d:1b:75:45:9f:6f:95:45:85:13:31:38:6d:91:2b:
54:9e:01:0a:b1:69:29:ca:98:b3:a3:bb:0c:25:fb:
55:6e:95:44:80:a6:9c:ed:72:9b:77:fa:82:9e:89:
d5:df:c1:5a:36:ad:0b:9c:8a:f0:0a:29:9a:22:77:
7d:59:e2:33:3e:29:61:53:68:da:50:e1:83:7c:a5:
65:17:04:cf:a5:45:cd:5f:d6:f5:8a:a3:36:5d:85:
08:e4:07:b3:45:a9:ea:94:ce:ac:02:f5:32:91:52:
0c:00:13:ec:1c:e9:7a:08:92:62:88:dc:a1:12:9f:
0b:ac:6e:0b:d8:50:0f:ee:fc:1d:7b:b8:68:6b:6b:
2e:7f:4f:3d:92:89:d4:ca:33:79:f6:d0:8b:d2:26:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:9A:AF:BD:E9:24:40:F7:40:1D:75:9E:7E:8A:93:19:47:E9:CC
X509v3 Authority Key Identifier:
keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c7:a5:f4:11:64:fd:6d:c0:b1:a2:05:d4:e4:cf:9f:a6:27:
ec:29:c3:c2:b7:e7:fd:8b:94:a9:0d:09:4a:fd:8c:2e:88:b5:
1d:c0:92:36:50:ce:c7:be:17:84:43:79:d8:bc:ed:0f:c6:3b:
dd:41:69:9a:7e:20:20:44:74:bd:d4:39:cb:80:a0:5e:7b:84:
6e:87:d4:49:a6:d0:42:d4:db:ad:45:89:52:5e:61:66:bf:0c:
c7:40:04:ca:21:47:24:0f:a2:ec:a1:12:2f:1b:99:87:51:e7:
cf:8f:bf:65:1f:3a:aa:21:83:ca:f8:cd:c6:91:50:16:8d:7e:
7c:cd:f3:d6:1b:7d:7f:3e:5a:b8:ef:f6:7d:12:71:e2:eb:0b:
13:9b:86:f1:ff:36:7f:c3:4c:7e:50:e1:0f:a7:82:97:b3:20:
c0:b2:ff:8c:cc:fb:c1:4a:3e:9d:dc:ac:0b:54:55:c7:4f:39:
2e:07:1c:6f:b2:71:21:81:01:53:52:b1:ac:14:71:ac:9a:11:
5a:94:88:43:d2:4f:88:56:0d:5d:bc:5f:ad:7b:cc:4b:57:55:
11:9b:a3:32:c4:12:6f:1f:34:88:e9:bc:a7:e2:10:7e:f1:49:
cb:ac:c8:42:7b:39:23:8b:22:47:c3:e4:53:9a:d7:7d:55:87:
7a:cd:8a:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzNEUxMTAvBgNVBAUTKDIwMDk4RkI0M0JEOTBBQzAzMkRENTBDOUZBRTdEQUJB
MjBBMDgyOUUwHhcNMjYwOTExMDEzNzI2WhcNMjYwOTE4MDEzNzI2WjAYMRYwFAYD
VQQDEw02YWEzNWI1Ni0wM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlzIZ7iZxr5mvYOZ6UjEsv8cujpVgVLZm2PwOGOVs+ckO+0A0O77xX97DMIUC
hL9JYFzYnAJxjdXzIJp25pDkO2zfjEzOTNyP0DXv8VkjQUsO7bZwa4Ikej/Z+Aq2
OBVz0Cak2XfNpjSdG3VFn2+VRYUTMThtkStUngEKsWkpypizo7sMJftVbpVEgKac
7XKbd/qCnonV38FaNq0LnIrwCimaInd9WeIzPilhU2jaUOGDfKVlFwTPpUXNX9b1
iqM2XYUI5AezRanqlM6sAvUykVIMABPsHOl6CJJiiNyhEp8LrG4L2FAP7vwde7ho
a2suf089konUyjN59tCL0iYHBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9Amq+9
6SRA90AddZ5+ipMZR+nMMB8GA1UdIwQYMBaAFCAJj7Q72QrAMt1Qyfrn2rogoIKe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzM0RS9BMEYwNzM2MEE2
MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNzQXkzVkRKLXVmYXVpQ2dn
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBbVB0RHZaQ3NBeTNWREotdWZhdWlDZ2dwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzM0RS9BMEYwNzM2MEE2MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNz
QXkzVkRKLXVmYXVpQ2dncDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOsel9BFk/W3AsaIF1OTPn6Yn7CnDwrfn/YuUqQ0JSv2MLoi1HcCSNlDOx74X
hEN52LztD8Y73UFpmn4gIER0vdQ5y4CgXnuEbofUSabQQtTbrUWJUl5hZr8Mx0AE
yiFHJA+i7KESLxuZh1Hnz4+/ZR86qiGDyvjNxpFQFo1+fM3z1ht9fz5auO/2fRJx
4usLE5uG8f82f8NMflDhD6eCl7MgwLL/jMz7wUo+ndysC1RVx085Lgccb7JxIYEB
U1KxrBRxrJoRWpSIQ9JPiFYNXbxfrXvMS1dVEZujMsQSbx80iOm8p+IQfvFJy6zI
Qns5I4siR8PkU5rXfVWHes2K1A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:28 2026 by rpki-client