
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
File: IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json)
Hash identifier: btqeDPrZELsxcgd0UgX6NESHrJFd4FKA9QseVHcOPtY=
Subject key identifier: 00:53:AB:71:F2:CD:55:83:6C:94:FA:68:9C:FF:00:BA:72:09:B3:AF
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Certificate issuer: /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
Manifest number: 02C2
Signing time: Sun 01 Nov 2026 02:17:11 +0000
Manifest this update: Sun 01 Nov 2026 02:17:11 +0000
Manifest next update: Sun 08 Nov 2026 02:17:11 +0000
Files and hashes: 1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: T4rZCNn/x9IdcOkXoTH6pC5QMauGtBVR7Xrdrs0arxU=)
2: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: ldsVU3+f9Ys8c9jjGtZsorbtRuuuB7CFx692x5DpYKg=)
3: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: QBNiuWqsSFvTii1XjINxNAIsFqpiHDWIk0XlWF5qx7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 02:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Validity
Not Before: Nov 1 02:17:11 2026 GMT
Not After : Nov 8 02:17:11 2026 GMT
Subject: CN=6ae6a127-5e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:88:94:ca:4b:44:e4:f9:8b:be:4f:c7:fd:
9d:a2:30:4c:7f:6a:0e:93:bb:0a:f6:97:06:39:5c:
2e:ba:ef:c4:90:89:99:49:eb:28:59:f3:06:d0:0f:
94:05:78:fe:00:da:7c:4f:18:9b:af:73:a3:68:5b:
2b:95:7a:27:17:10:db:bc:60:a6:2f:90:51:ed:cd:
5f:f3:ff:62:5e:ed:bf:76:59:7d:91:b9:af:66:ee:
80:6d:98:b8:c7:64:bb:45:aa:e6:d3:29:d5:6e:b1:
2b:bf:1d:a9:02:50:36:97:d7:7f:6e:62:d8:44:9c:
35:89:f3:41:a9:61:f9:84:2e:94:a4:18:32:9e:85:
6f:94:13:cd:f5:28:b5:fd:34:3c:77:26:65:4b:90:
8e:b5:16:8b:ce:1c:0a:8c:a7:2c:4c:c8:a5:30:57:
42:22:77:09:5c:21:fb:11:e7:20:93:bd:0b:42:31:
49:53:b7:8f:44:81:21:c1:38:09:bb:a9:9f:a4:0f:
83:9e:f3:65:0e:ea:6c:0f:4c:bc:31:fa:ab:0c:d4:
51:be:21:79:07:f5:a8:76:66:d1:3d:1b:e2:8e:4a:
1f:20:a3:81:f1:5a:c0:47:13:7d:84:f8:0f:d1:28:
6d:76:fd:6a:e5:cd:f1:be:84:a9:c7:2b:f1:2e:90:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:AB:71:F2:CD:55:83:6C:94:FA:68:9C:FF:00:BA:72:09:B3:AF
X509v3 Authority Key Identifier:
keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:f3:0e:78:e8:03:21:f0:bc:8c:ad:ce:2d:58:5b:0f:09:
51:f3:e4:03:5c:51:0a:3e:39:73:60:cd:fd:26:2f:f9:2d:97:
9d:55:cf:b2:52:08:4f:e5:9f:6e:d9:23:09:c8:95:5e:2c:c7:
72:84:d0:21:0d:9c:6e:80:e4:a5:6b:bf:6d:04:51:29:48:34:
ce:c7:bc:6e:9a:73:59:e3:0c:d3:76:b1:59:03:51:ae:a1:a9:
c1:ac:75:d8:69:3f:5d:3e:11:d1:58:b8:88:52:54:01:a1:e5:
c2:69:4a:a9:36:96:a2:8f:3d:88:86:92:a6:59:ab:64:5b:74:
e2:c5:8e:34:f9:f9:c6:31:ca:f0:d2:33:78:96:3a:e6:8a:cd:
17:bb:db:2f:46:8a:83:52:b6:4b:f7:4e:71:42:a7:9a:08:e2:
d0:a0:18:1f:5b:78:0f:38:46:96:a9:aa:54:31:ac:11:95:e9:
33:85:a2:9d:dc:29:46:d3:ae:39:c1:aa:7d:98:0e:f4:d0:c5:
12:2f:ce:ac:6b:d5:e3:1b:f4:a0:c4:62:cd:13:7d:84:81:25:
cb:58:80:cf:ec:3a:bb:7c:48:ff:b6:7f:7f:e3:dc:28:a8:18:
be:6e:6c:be:34:07:b8:92:c4:c1:eb:dd:39:9b:14:a4:89:f7:
60:af:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:45 2026 by rpki-client